Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/3139322e3134312e3230302e302f32322d3232203d3e20323637343739.roa
File:                     3139322e3134312e3230302e302f32322d3232203d3e20323637343739.roa (raw, json)
Hash identifier:          rbl8YPpksaVP1UdXLv5yh0Wg+gO24gVjjCbTnPK3xR0=
Subject key identifier:   7F:20:CB:54:F0:E6:07:3A:FA:83:3A:A4:E4:5D:97:D9:AE:B9:A4:C2
Certificate issuer:       /CN=CD2876FE25D1172BDF72E8EC902B7BBF8F561B93
Certificate serial:       3A8EADE168601C48150AF7F31A0253BFC37E02D5
Authority key identifier: CD:28:76:FE:25:D1:17:2B:DF:72:E8:EC:90:2B:7B:BF:8F:56:1B:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/3139322e3134312e3230302e302f32322d3232203d3e20323637343739.roa
Signing time:             Thu 01 Feb 2024 02:31:14 +0000
ROA not before:           Thu 01 Feb 2024 02:26:14 +0000
ROA not after:            Thu 30 Jan 2025 02:31:14 +0000
asID:                     267479
IP address blocks:        192.141.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8e:ad:e1:68:60:1c:48:15:0a:f7:f3:1a:02:53:bf:c3:7e:02:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2876FE25D1172BDF72E8EC902B7BBF8F561B93
        Validity
            Not Before: Feb  1 02:26:14 2024 GMT
            Not After : Jan 30 02:31:14 2025 GMT
        Subject: CN=7F20CB54F0E6073AFA833AA4E45D97D9AEB9A4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:89:08:d5:e3:01:c1:58:65:b4:40:e2:72:
                    d5:77:5f:5f:3e:17:42:2f:2e:19:54:d6:09:f2:37:
                    c8:29:5f:f6:ce:83:ba:b5:80:81:60:0d:c2:aa:3d:
                    d0:f0:20:74:17:5d:88:df:cf:62:99:22:8e:70:96:
                    0c:ad:63:98:1c:79:3e:6a:5c:3e:21:5f:09:49:2e:
                    0e:41:0a:04:06:fb:a1:58:da:73:bb:6d:26:92:46:
                    4c:71:84:df:7d:fa:fe:05:f7:41:63:65:5f:c4:04:
                    66:7a:07:4a:fb:a8:fa:e1:94:06:9d:f1:92:ac:cd:
                    ec:bd:95:0e:7a:bd:da:07:ec:45:d0:e9:3e:a9:08:
                    ba:b3:91:83:7f:ee:15:e9:7e:48:3d:ab:a7:48:92:
                    00:59:4f:7a:cb:c2:91:48:c5:4e:7e:b4:cc:38:2f:
                    91:92:3b:e0:0f:45:ff:2d:59:bf:7c:cb:04:c6:06:
                    11:f8:90:80:97:ec:3d:10:d3:25:d9:27:32:e9:bd:
                    97:98:02:ab:b6:88:7c:fa:13:7d:a9:3e:f9:b2:e1:
                    99:af:fe:5a:13:32:3f:22:3a:6f:59:20:20:ff:0c:
                    2d:e3:39:f4:cd:47:0e:5f:17:f9:e2:cb:5d:15:55:
                    19:6e:0e:72:c6:bb:3b:16:19:44:c6:7a:3c:44:8c:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:CB:54:F0:E6:07:3A:FA:83:3A:A4:E4:5D:97:D9:AE:B9:A4:C2
            X509v3 Authority Key Identifier:
                keyid:CD:28:76:FE:25:D1:17:2B:DF:72:E8:EC:90:2B:7B:BF:8F:56:1B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/3139322e3134312e3230302e302f32322d3232203d3e20323637343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:17:f3:3a:1a:85:71:17:c2:20:11:92:a0:6e:92:df:bc:86:
         d8:a9:01:4d:ab:b0:2d:e5:9b:55:40:54:e0:69:ca:9a:1a:a8:
         44:45:08:90:93:1c:2d:fd:58:93:f5:8c:a5:45:66:97:7a:99:
         0e:b9:82:69:c8:e0:a4:03:58:32:aa:63:20:4c:86:53:0e:26:
         10:81:4e:ff:6f:ab:e9:44:c5:f4:6a:70:3b:7d:9f:ed:0a:3c:
         87:21:eb:a6:bf:40:51:de:5e:9a:f9:03:a4:b8:30:a9:13:16:
         eb:97:8b:f8:63:cc:97:b1:2d:88:11:6c:e5:8e:f0:74:4f:6a:
         21:0b:d6:ad:c4:e0:61:d1:4b:18:57:1a:69:81:b2:1a:a8:cc:
         7b:85:08:07:fa:63:56:f5:af:5c:85:23:a1:14:44:f9:5a:5f:
         27:ed:43:c8:32:db:0a:19:0e:8e:bb:28:ee:55:fc:6b:36:a5:
         79:f3:ec:82:77:31:82:6e:2a:4f:43:a1:e8:d7:d3:5d:70:b0:
         8c:22:25:cc:a2:6f:93:e9:08:f7:6a:85:64:d8:21:dc:ec:fd:
         2e:e9:f9:c7:69:a7:81:43:6c:76:e7:e6:89:c0:7a:2a:69:04:
         28:11:09:4f:cb:23:19:63:a3:8d:79:64:1d:69:5f:ec:1f:85:
         43:2e:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org