Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3130382e302f32342d3234203d3e20323731373233.roa
File:                     3230302e31312e3130382e302f32342d3234203d3e20323731373233.roa (raw, json)
Hash identifier:          pV5yFYQsuHGzV3wK56Owa/0ofhcT36FqWW160RgsFwg=
Subject key identifier:   E3:85:BD:81:49:2D:A0:88:5F:59:45:6B:92:B4:CA:E7:D7:0C:4F:70
Certificate issuer:       /CN=5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C
Certificate serial:       0F3A5681080AF404F873D1A0047428DD1EB5A23D
Authority key identifier: 5D:E2:7C:AC:76:D0:2D:07:B1:A1:EC:1E:10:81:0E:D5:D7:5B:A7:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3130382e302f32342d3234203d3e20323731373233.roa
Signing time:             Mon 13 Jun 2022 19:19:21 +0000
ROA not before:           Mon 13 Jun 2022 19:14:21 +0000
ROA not after:            Mon 12 Jun 2023 19:19:21 +0000
asID:                     271723
IP address blocks:        200.11.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3a:56:81:08:0a:f4:04:f8:73:d1:a0:04:74:28:dd:1e:b5:a2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C
        Validity
            Not Before: Jun 13 19:14:21 2022 GMT
            Not After : Jun 12 19:19:21 2023 GMT
        Subject: CN=E385BD81492DA0885F59456B92B4CAE7D70C4F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:74:ea:fe:29:a5:d1:86:7b:da:14:09:9b:
                    ce:79:10:b8:4b:92:86:78:4a:ec:18:23:a5:e3:11:
                    11:4e:ad:9a:20:be:a0:51:1c:bc:09:4c:4a:20:55:
                    95:48:15:fe:1c:74:d8:1d:82:a2:6c:7d:5e:69:46:
                    53:46:dd:fc:49:5c:38:61:d2:cb:7d:32:fa:d9:59:
                    49:d2:2a:9b:6a:c6:ec:31:82:cb:61:1f:a0:7b:ba:
                    19:e2:4c:0f:82:c6:24:dc:34:07:ab:6b:5f:64:87:
                    53:23:cc:ad:58:bf:46:7e:3c:5c:41:e1:bd:a8:8c:
                    3f:04:5b:5b:1f:98:b5:f9:28:5c:75:39:d3:ea:25:
                    64:b3:70:fc:68:ad:20:cb:17:43:0b:99:83:b5:07:
                    43:54:7a:b4:1e:0b:a6:2d:54:e7:b0:59:d6:90:c3:
                    23:46:24:dd:73:e5:10:4d:b9:cb:48:56:36:d8:a3:
                    17:3f:b5:9a:25:f9:a5:78:0d:ca:35:d0:e9:1a:68:
                    ca:96:2f:2c:26:f6:ec:8a:14:30:54:3d:dc:56:ef:
                    e2:89:a1:e2:57:40:e8:ee:f3:57:9b:26:a2:bd:0a:
                    86:be:94:53:d9:97:ab:ee:15:cd:e3:02:82:29:81:
                    d5:7f:ba:7c:53:55:19:87:d0:30:7d:8e:db:3d:b8:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:BD:81:49:2D:A0:88:5F:59:45:6B:92:B4:CA:E7:D7:0C:4F:70
            X509v3 Authority Key Identifier:
                keyid:5D:E2:7C:AC:76:D0:2D:07:B1:A1:EC:1E:10:81:0E:D5:D7:5B:A7:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3130382e302f32342d3234203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:70:76:2e:9b:ab:7d:76:d4:e9:1b:cb:ff:ac:14:e7:bd:e8:
         84:3f:dd:bb:4e:94:63:54:c1:e6:c1:ef:4f:4f:3f:49:31:67:
         bd:01:d4:5f:0d:9a:ac:d1:d9:4c:62:b5:ba:7e:12:6e:4a:41:
         11:77:e1:b0:95:e7:3c:f6:b2:64:82:fa:de:79:03:ea:bf:bf:
         70:5b:b7:a0:fe:82:a9:5c:b0:04:65:05:70:3f:6b:3c:9b:7a:
         a8:76:83:03:bd:6d:6b:96:14:d7:ff:00:14:a9:4f:11:ec:f9:
         dc:7f:ce:71:fd:67:49:33:f7:fd:2b:70:94:d4:e4:19:46:a4:
         a1:11:33:6c:09:4e:0c:19:dd:10:27:ae:03:c5:c4:09:45:0d:
         28:68:6e:b2:11:59:9d:9f:b0:b0:99:d7:f6:fd:cf:4e:86:2c:
         f6:e0:9e:94:e4:74:9c:6d:ae:68:28:c6:b4:e0:f8:36:f1:d6:
         91:e9:84:6d:4e:a4:2a:9d:ac:95:9d:56:8c:4d:0c:ce:7f:94:
         3e:e2:28:20:97:3f:7a:7d:eb:15:6e:61:d5:c2:73:76:17:40:
         88:9c:85:3f:31:76:d5:ea:8d:14:4b:c1:0b:38:f9:00:25:0f:
         ae:90:6c:27:81:bf:42:77:dd:0e:05:0b:da:09:46:62:4b:b8:
         5c:93:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org