Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/3230302e3139362e302e302f31392d3234203d3e203130373333.roa
File:                     3230302e3139362e302e302f31392d3234203d3e203130373333.roa (raw, json)
Hash identifier:          7GYXdWzvuWy0M7miZH0kx2rfMaflUjoBju6M9+6aKnc=
Subject key identifier:   15:6E:F9:4D:FE:37:A2:17:A4:A8:9C:F6:3A:E4:E7:3C:BD:32:A3:59
Certificate issuer:       /CN=A955974547A0FE776FE59842FE4095486B6693E2
Certificate serial:       6861B6185E7B0CE8CF3B098DDECE5CE77DCA8F46
Authority key identifier: A9:55:97:45:47:A0:FE:77:6F:E5:98:42:FE:40:95:48:6B:66:93:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A955974547A0FE776FE59842FE4095486B6693E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/3230302e3139362e302e302f31392d3234203d3e203130373333.roa
Signing time:             Mon 04 Sep 2023 23:00:30 +0000
ROA not before:           Mon 04 Sep 2023 22:55:30 +0000
ROA not after:            Mon 02 Sep 2024 23:00:30 +0000
asID:                     10733
IP address blocks:        200.196.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:61:b6:18:5e:7b:0c:e8:cf:3b:09:8d:de:ce:5c:e7:7d:ca:8f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955974547A0FE776FE59842FE4095486B6693E2
        Validity
            Not Before: Sep  4 22:55:30 2023 GMT
            Not After : Sep  2 23:00:30 2024 GMT
        Subject: CN=156EF94DFE37A217A4A89CF63AE4E73CBD32A359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:a1:fc:62:b4:d9:08:a5:2b:73:08:92:c0:
                    cd:83:51:bf:a5:c0:f2:5d:06:95:8d:d8:46:84:2b:
                    94:c8:a8:3a:94:3f:12:f9:b4:9b:4b:85:e4:e5:a5:
                    9a:01:61:6f:7a:06:e9:cf:67:e8:f1:20:e7:d1:0c:
                    76:53:9c:d5:b6:b0:2f:50:a8:fa:85:48:6b:ba:29:
                    67:1b:35:12:32:55:0f:85:10:27:b6:03:eb:a6:0b:
                    8d:56:a7:32:03:3e:fb:d1:5b:d4:5f:a1:7e:c1:ed:
                    6d:0a:63:11:52:73:57:f3:f5:51:24:da:cd:93:17:
                    a0:2e:5e:47:47:de:81:84:c7:82:a0:9b:0f:40:d6:
                    24:bb:90:34:fb:c8:be:b6:ee:60:89:da:23:ee:1d:
                    74:c9:93:f3:45:7d:f8:94:3e:6f:27:53:2b:32:1b:
                    87:35:17:cf:c7:16:f1:54:43:e8:8a:0d:3a:ec:27:
                    24:62:4d:1e:85:e8:51:a5:a1:f3:5a:62:bb:78:50:
                    68:3a:8f:8b:09:84:7c:f7:e2:6f:dc:09:5c:91:fa:
                    97:50:b0:6a:65:53:a7:92:b1:64:2e:f6:b4:d4:77:
                    a9:26:dd:cb:ae:3c:01:ee:02:0c:4f:5a:b4:eb:ca:
                    ff:1b:ce:1b:69:6f:ab:e2:ef:19:c4:21:5a:73:43:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6E:F9:4D:FE:37:A2:17:A4:A8:9C:F6:3A:E4:E7:3C:BD:32:A3:59
            X509v3 Authority Key Identifier:
                keyid:A9:55:97:45:47:A0:FE:77:6F:E5:98:42:FE:40:95:48:6B:66:93:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/A955974547A0FE776FE59842FE4095486B6693E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A955974547A0FE776FE59842FE4095486B6693E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/3230302e3139362e302e302f31392d3234203d3e203130373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:45:0d:72:aa:17:24:4d:45:5b:35:34:f8:96:12:83:a0:00:
         33:86:fb:29:cf:69:c3:2d:89:78:bd:ae:38:75:b7:33:ff:a3:
         d1:c3:f7:5c:4c:78:9b:e9:2c:1a:26:22:18:02:cc:9c:b8:82:
         71:05:39:fc:a4:cf:0d:83:81:42:57:5c:58:d2:00:ce:8e:3e:
         ca:f1:12:1c:2e:5e:81:c1:25:ba:27:a5:42:a6:48:9b:bc:87:
         df:5d:d3:f7:6f:19:30:2a:a0:3b:cb:84:f0:3d:50:bc:95:e0:
         37:f5:a1:9d:30:bd:e4:dd:97:6a:72:b1:6c:74:0a:92:b8:84:
         6d:21:dd:4d:03:ac:f7:8f:cb:29:d9:f3:ed:66:f7:e6:29:6c:
         2a:33:6e:af:d6:d3:a3:d8:7c:5e:99:a2:ac:83:dd:cf:c1:00:
         eb:14:2c:4a:20:0e:8d:67:32:47:e4:86:b9:26:94:6d:d6:eb:
         15:d7:9f:48:27:4a:4b:a1:26:62:7a:22:8e:42:a7:d6:cd:4c:
         21:fa:a8:82:2a:20:67:74:74:b4:75:d3:a2:8a:60:03:60:23:
         b1:24:ba:30:08:39:bc:b2:6a:c6:59:b5:47:91:dd:1c:a0:5c:
         fa:9c:71:b5:3b:2d:e0:3f:53:fe:c1:15:4b:b5:0c:43:8a:8c:
         e9:ad:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:19 2024 by rpki-client on console-ams.rpki-client.org