Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3130362e3133322e302f32332d3233203d3e20323635333030.roa
File:                     3230302e3130362e3133322e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          mQjjsHk1307+gLzLwoC+zefMC3hGwFPL0x3NkbH0lJg=
Subject key identifier:   92:FA:9F:28:E8:23:72:D9:CD:2D:9A:A1:4F:45:0D:17:C7:3C:69:B6
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       3FF8BD8BDCE990F759AF67D802936ADD2C05F9A4
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3130362e3133322e302f32332d3233203d3e20323635333030.roa
Signing time:             Sat 27 Apr 2024 14:58:18 +0000
ROA not before:           Sat 27 Apr 2024 14:53:18 +0000
ROA not after:            Sat 26 Apr 2025 14:58:18 +0000
asID:                     265300
IP address blocks:        200.106.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f8:bd:8b:dc:e9:90:f7:59:af:67:d8:02:93:6a:dd:2c:05:f9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr 27 14:53:18 2024 GMT
            Not After : Apr 26 14:58:18 2025 GMT
        Subject: CN=92FA9F28E82372D9CD2D9AA14F450D17C73C69B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bf:58:ba:d9:69:be:cd:80:9b:1a:f5:94:2e:
                    12:1a:53:89:69:f2:8c:42:5a:31:76:e2:dd:46:6e:
                    19:70:be:8a:e7:90:25:82:a6:00:d0:75:7a:56:f3:
                    1b:cf:48:68:71:1b:cf:16:a6:61:29:14:b5:15:57:
                    ee:65:e9:e3:da:19:84:4c:15:31:60:f7:90:02:41:
                    c1:85:b7:fc:63:f5:e9:00:14:99:4c:a8:e5:a3:03:
                    ae:b2:6c:c1:8e:d4:94:63:60:f2:f2:cb:80:5f:af:
                    b4:83:0a:f1:74:b4:b3:46:3c:d5:03:33:3a:7a:60:
                    01:ac:29:a6:f1:fa:57:f3:d2:5d:61:26:26:59:36:
                    62:2b:4c:d6:69:4c:57:59:03:71:2a:ad:73:7a:0c:
                    02:a5:f0:0d:db:13:b1:3c:c1:73:1b:54:f7:28:f5:
                    9d:1c:aa:31:87:b0:3e:80:d1:28:9f:76:4e:5d:8a:
                    3e:72:37:44:a1:f9:07:66:ce:af:b6:a6:0f:d3:9a:
                    23:ea:81:43:2c:df:da:12:14:9e:53:90:9d:0f:2c:
                    71:80:63:56:60:7e:88:33:e2:23:4e:1a:4b:b4:51:
                    2f:8b:1b:cd:51:4c:0d:43:3f:eb:ba:75:7a:a6:5c:
                    68:c3:ba:5f:80:66:9b:60:cc:de:9a:ba:a2:91:64:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FA:9F:28:E8:23:72:D9:CD:2D:9A:A1:4F:45:0D:17:C7:3C:69:B6
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3130362e3133322e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:b6:5f:69:00:15:d8:16:40:4e:dd:b2:34:44:82:5a:4a:40:
         2d:5d:8b:da:03:b3:64:d6:5c:20:e6:26:ba:59:a6:a1:b0:c7:
         30:1b:1d:a0:6f:98:9d:e9:71:8b:e7:eb:5d:c1:5a:a0:c2:db:
         45:3b:04:47:53:b6:d8:2f:1a:19:9f:58:ba:fd:c1:db:65:a9:
         98:ab:74:3c:aa:a6:d1:3e:a7:ec:43:fb:23:56:c7:48:70:17:
         8b:42:32:2f:e6:41:16:08:e4:7a:e4:d5:9d:b6:13:a2:ce:d5:
         f2:9d:58:12:9f:ba:b2:21:e8:53:e0:28:e9:b9:94:20:df:1b:
         15:6f:36:67:55:a3:40:13:c2:cc:30:c3:e5:ff:24:88:18:3b:
         28:08:65:6b:5c:f3:4e:80:9b:c7:8a:93:b5:21:c9:78:2f:60:
         2f:64:05:97:c6:23:16:d3:56:41:01:d3:2a:e8:8e:0f:7a:78:
         7c:a3:4c:1f:05:cf:21:4c:6f:36:16:49:54:8c:86:a9:9a:b0:
         44:35:d7:d0:5e:06:19:0a:93:d0:99:20:42:ec:49:cb:79:1f:
         f0:1c:37:ba:fe:6b:b4:40:78:f6:a6:60:6e:2d:6c:23:ac:c4:
         6e:52:cf:b4:02:77:f7:64:fe:11:0f:83:a0:3e:01:fc:38:bc:
         50:72:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org