Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/3139322e3134312e3230302e302f32332d3233203d3e20323637343739.roa
File:                     3139322e3134312e3230302e302f32332d3233203d3e20323637343739.roa (raw, json)
Hash identifier:          SjRWHXA14RedpUvSgi2+CrdyxBUPUoKNFCA4C9/MYa8=
Subject key identifier:   60:A0:22:26:21:1C:33:A7:E4:78:65:6F:61:4C:C0:5D:4D:7A:CE:5F
Certificate issuer:       /CN=CD2876FE25D1172BDF72E8EC902B7BBF8F561B93
Certificate serial:       735FC33D000B8E8CFDD107B7E5413CE8C4B006D7
Authority key identifier: CD:28:76:FE:25:D1:17:2B:DF:72:E8:EC:90:2B:7B:BF:8F:56:1B:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/3139322e3134312e3230302e302f32332d3233203d3e20323637343739.roa
Signing time:             Thu 01 Feb 2024 02:31:14 +0000
ROA not before:           Thu 01 Feb 2024 02:26:14 +0000
ROA not after:            Thu 30 Jan 2025 02:31:14 +0000
asID:                     267479
IP address blocks:        192.141.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5f:c3:3d:00:0b:8e:8c:fd:d1:07:b7:e5:41:3c:e8:c4:b0:06:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2876FE25D1172BDF72E8EC902B7BBF8F561B93
        Validity
            Not Before: Feb  1 02:26:14 2024 GMT
            Not After : Jan 30 02:31:14 2025 GMT
        Subject: CN=60A02226211C33A7E478656F614CC05D4D7ACE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:a4:17:fc:5a:e1:2f:6c:fa:24:da:a3:08:
                    ac:11:71:e1:9f:7b:3e:c8:46:0e:dd:6a:37:8f:38:
                    d2:d8:db:51:ed:80:9f:f2:fe:f3:bb:38:af:b8:0d:
                    b8:ad:b0:4e:9e:4e:23:e5:b3:45:2d:5c:f9:4b:ac:
                    bc:5b:c4:eb:2c:75:53:19:9c:2f:2b:4e:57:0a:78:
                    9a:11:20:a0:1b:d8:44:ab:ce:c4:12:25:53:c6:11:
                    4f:72:b8:02:6f:04:17:2c:16:81:6c:c8:75:36:32:
                    ea:35:b9:54:ce:10:f0:74:78:94:7f:96:a2:2d:18:
                    1f:b9:34:7d:42:82:42:d1:3e:42:0d:4e:a0:93:8a:
                    bc:df:d0:f5:f8:2b:e2:31:08:fd:ae:0e:9f:b2:a9:
                    7c:3d:7b:bf:b1:99:3d:cb:d9:ea:b3:b1:0e:c0:3c:
                    a5:6a:aa:02:43:a0:34:c2:96:9b:76:05:6a:6b:8f:
                    d7:ed:78:73:84:32:75:fa:35:41:5a:97:c7:8d:eb:
                    29:fe:b4:06:40:8a:65:0d:15:2b:3d:a7:ab:ec:a1:
                    e3:26:39:62:4b:6b:71:8a:3d:c8:65:6a:7f:3c:56:
                    71:55:cb:ad:79:b7:67:6d:4b:ba:58:ae:54:9b:7e:
                    79:21:c3:3d:99:e0:02:17:25:f5:07:b1:79:85:1c:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A0:22:26:21:1C:33:A7:E4:78:65:6F:61:4C:C0:5D:4D:7A:CE:5F
            X509v3 Authority Key Identifier:
                keyid:CD:28:76:FE:25:D1:17:2B:DF:72:E8:EC:90:2B:7B:BF:8F:56:1B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/3139322e3134312e3230302e302f32332d3233203d3e20323637343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:db:d1:9c:b4:58:41:97:ac:ad:6f:78:c0:fc:d2:54:60:45:
         20:1a:5e:9b:0b:09:cb:33:d7:30:e3:d9:06:6d:30:b8:42:23:
         40:47:87:c2:3f:8f:e1:e5:a9:29:b3:59:17:3c:bd:c4:63:de:
         79:44:12:c8:70:5b:6e:11:79:d2:92:a7:76:1e:3c:ce:12:36:
         54:b7:b5:95:97:c1:50:32:df:26:0e:7a:ad:e7:15:cd:87:c4:
         d6:11:49:6f:fb:d5:ba:b1:d5:49:fb:07:81:39:60:7f:39:75:
         c8:6f:c6:54:d4:28:84:e8:48:94:3b:cb:fc:ce:80:ae:20:97:
         7a:3f:b2:66:aa:c9:08:30:4e:b5:aa:2b:66:a0:a5:ad:0b:41:
         89:52:b8:86:f5:9c:6b:5a:d9:81:d5:eb:31:1a:b4:fd:0d:40:
         d0:11:98:86:32:cc:ee:2e:34:d8:a2:68:9b:7b:9a:55:e7:8a:
         11:43:57:7f:8c:c7:f0:44:a6:6c:bb:de:7d:d4:c7:aa:ff:74:
         62:1f:91:54:7c:6f:5f:f6:4a:a4:29:cd:7c:3a:fc:23:a3:cb:
         d3:2c:27:e7:dc:33:42:f8:f8:c4:f2:57:93:a7:9c:8a:a1:9d:
         8b:c3:12:54:0a:c3:56:29:59:60:15:9e:65:f9:4b:97:e6:a1:
         ec:83:1e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org