Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3132352e3137382e302f32332d3233203d3e20323635333030.roa
File:                     3230302e3132352e3137382e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          1CFhUkVyyHXGt+IWYbqnbf2AYkn45NzFTKOme42S5zg=
Subject key identifier:   41:42:6C:A3:06:7B:32:3B:03:BF:E0:83:B6:05:1D:6B:F3:AB:EB:0C
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       4899C67E1A9A6763A07FA42D6225D5A00A152007
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3132352e3137382e302f32332d3233203d3e20323635333030.roa
Signing time:             Thu 04 Apr 2024 00:16:16 +0000
ROA not before:           Thu 04 Apr 2024 00:11:16 +0000
ROA not after:            Thu 03 Apr 2025 00:16:16 +0000
asID:                     265300
IP address blocks:        200.125.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:99:c6:7e:1a:9a:67:63:a0:7f:a4:2d:62:25:d5:a0:0a:15:20:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr  4 00:11:16 2024 GMT
            Not After : Apr  3 00:16:16 2025 GMT
        Subject: CN=41426CA3067B323B03BFE083B6051D6BF3ABEB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:75:13:7d:e2:4b:44:8a:0a:4a:66:3f:50:
                    e4:76:8b:90:d0:7a:87:ee:b4:f0:49:ea:3e:19:24:
                    14:6c:a4:8d:13:0c:71:dc:6f:b7:22:92:4f:80:38:
                    74:0f:fa:d9:85:a6:75:60:03:e1:0b:21:84:cf:f0:
                    8e:48:04:83:80:82:27:59:cc:b1:af:99:eb:f3:76:
                    48:d8:76:ae:62:c9:b7:d8:73:52:6e:3b:cb:de:96:
                    fe:d0:30:17:ea:5c:8e:c2:5a:e0:41:47:ec:d9:9e:
                    7a:68:df:8f:64:d3:08:88:ce:fe:05:da:3e:4b:53:
                    90:25:20:71:6d:28:02:a0:9b:5d:bc:eb:b7:9e:c7:
                    5c:dc:1e:9c:29:e7:1d:ad:9c:b9:d5:41:a8:2a:29:
                    22:74:d4:95:eb:66:d0:ae:80:57:6e:48:00:8c:6e:
                    be:c2:34:26:b6:46:9b:b0:cd:e3:c1:1f:42:47:48:
                    04:75:30:36:b4:00:be:38:e1:ff:99:f3:e4:89:ad:
                    0e:8a:10:80:46:9b:53:25:93:9d:58:37:8a:4a:73:
                    86:67:bc:39:f6:7a:d2:dc:b3:a1:7a:67:6e:23:37:
                    7c:43:16:a4:f8:35:94:66:a4:ea:a5:b1:d9:f5:38:
                    3a:e6:8c:47:46:76:c2:0b:7d:19:70:1d:3b:f5:de:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:42:6C:A3:06:7B:32:3B:03:BF:E0:83:B6:05:1D:6B:F3:AB:EB:0C
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3132352e3137382e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:24:59:e2:af:e8:f0:30:fb:e9:57:b2:cc:04:6f:37:b7:75:
         a0:16:27:f6:9d:ec:d6:ac:99:8e:9d:64:4c:53:62:39:31:69:
         27:ac:dc:9a:52:21:ab:92:db:65:7a:81:54:95:5b:6c:97:7d:
         ee:fe:94:08:7e:43:ae:3d:9b:7b:07:99:fe:f8:d8:d0:9f:54:
         5c:36:1c:25:31:59:4c:96:46:fd:86:d7:26:ba:7c:c6:b4:f9:
         1a:65:0a:8b:f3:96:59:16:37:30:b4:6f:1e:98:24:76:36:8b:
         6c:5c:fc:d3:23:f3:2e:a2:04:cb:a0:5f:11:7d:b0:50:cd:fd:
         79:a6:15:4a:75:c9:e9:3f:9a:ce:ff:59:4b:4c:a8:42:db:dc:
         59:bc:14:69:f5:da:50:c8:61:ac:07:cd:b2:86:c5:07:38:3b:
         5a:51:69:67:19:67:cd:15:6f:95:94:b6:ab:1a:8f:4b:ab:21:
         12:60:1f:e3:2c:ad:60:29:f4:c7:3f:79:99:4e:fe:71:f9:16:
         b4:e5:e0:39:4e:0b:4c:09:09:c2:cd:17:4b:ab:ed:f8:5d:05:
         6c:98:7a:49:da:48:f6:d9:6e:94:09:3e:05:f3:77:60:ff:7c:
         c2:cc:43:ca:53:de:cb:ee:c2:00:3b:f3:63:c8:d2:fc:0c:04:
         c8:09:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org