Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3230302e3139382e3139322e302f31382d3234203d3e203130393534.roa
File:                     3230302e3139382e3139322e302f31382d3234203d3e203130393534.roa (raw, json)
Hash identifier:          jr9C8EArtQyIC44kpoOcvn+QV8H8CGSxrFFSxqAPyfc=
Subject key identifier:   A5:73:D9:7B:FF:99:6B:1E:09:61:A7:93:DF:C6:D6:F8:A8:C2:4D:64
Certificate issuer:       /CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
Certificate serial:       0892C3A8DA44BBBCF0F5BAAA60BE2EF2D2CD73C9
Authority key identifier: 7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3230302e3139382e3139322e302f31382d3234203d3e203130393534.roa
Signing time:             Thu 22 Jun 2023 18:19:31 +0000
ROA not before:           Thu 22 Jun 2023 18:14:31 +0000
ROA not after:            Thu 20 Jun 2024 18:19:31 +0000
asID:                     10954
IP address blocks:        200.198.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:92:c3:a8:da:44:bb:bc:f0:f5:ba:aa:60:be:2e:f2:d2:cd:73:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
        Validity
            Not Before: Jun 22 18:14:31 2023 GMT
            Not After : Jun 20 18:19:31 2024 GMT
        Subject: CN=A573D97BFF996B1E0961A793DFC6D6F8A8C24D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:73:21:74:84:64:2d:36:9f:66:05:1d:e2:
                    5d:10:56:cf:86:df:b1:2f:bb:0a:a0:7e:e4:3a:92:
                    31:12:32:4f:61:39:1e:8b:9e:9d:52:1b:27:b3:d2:
                    55:d8:8c:6f:5a:b6:a6:0a:91:07:8e:a4:e6:37:91:
                    76:98:03:9b:64:9f:19:41:c2:32:db:df:6b:37:55:
                    17:e1:d8:e9:1d:b9:a4:b6:73:bb:7b:e5:57:14:d9:
                    3e:84:35:00:c5:de:f4:52:dc:03:36:b0:db:14:9a:
                    49:d4:fb:49:78:70:0e:b0:43:7e:c7:c5:32:8d:c8:
                    91:60:e5:ed:b8:5b:41:61:7f:5c:9d:4c:0a:5d:c2:
                    fc:5f:22:fd:17:64:87:2b:6d:87:ef:8e:16:87:23:
                    d6:0d:4e:42:95:3a:80:b9:68:55:72:a2:0f:16:d0:
                    73:f2:83:a0:2a:df:c8:3d:ab:cd:16:7b:43:82:1c:
                    31:0d:ec:ac:f5:60:62:42:4a:97:08:91:97:69:1a:
                    b0:45:a4:ef:71:20:88:0b:9f:20:c1:da:fe:f8:ce:
                    d0:58:df:84:26:fb:19:00:79:ed:bf:5b:d6:ef:0b:
                    0a:4d:39:f4:ba:75:67:1e:70:32:e1:cb:5b:9c:08:
                    3e:e2:d1:5a:07:a7:8e:71:40:24:4b:34:c2:50:98:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:73:D9:7B:FF:99:6B:1E:09:61:A7:93:DF:C6:D6:F8:A8:C2:4D:64
            X509v3 Authority Key Identifier:
                keyid:7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3230302e3139382e3139322e302f31382d3234203d3e203130393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.198.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6a:2a:c9:d7:3e:a0:c1:77:be:61:ab:11:e9:2d:ca:f5:10:bb:
         23:41:eb:c2:a3:cf:b8:a8:7a:a1:91:ec:04:36:14:ea:5d:b3:
         33:42:93:97:e1:f2:6d:22:2a:80:af:f2:b3:58:98:74:3e:a2:
         d6:47:47:e9:9d:41:46:8b:58:29:00:5e:bc:0f:0c:54:db:c2:
         d4:3d:74:06:46:5d:e6:95:03:94:8f:43:f1:33:58:08:42:7e:
         99:f5:d8:6e:48:86:94:a9:0d:6b:f7:06:10:ba:44:be:1b:97:
         82:8d:aa:ae:8d:cb:d3:76:d4:f2:dc:9e:f8:f5:69:de:52:d1:
         c6:33:e3:5f:dd:91:f9:a5:e1:38:80:67:e7:80:f4:22:e4:47:
         db:90:4a:bd:ef:73:c8:0a:5c:7c:60:95:dc:5a:5a:07:d1:6f:
         2e:b6:23:75:fc:61:04:69:ac:e3:09:4d:c9:82:12:8e:f8:d7:
         3b:8d:bc:22:ce:23:91:8d:3e:1a:fb:7f:23:fc:60:a3:cb:06:
         6f:a4:e1:ed:3f:fd:4b:a2:49:f7:26:bd:2c:37:65:2b:6a:ca:
         bf:3d:58:b3:7e:93:84:9d:ed:6a:c4:d2:2d:21:7c:98:22:7b:
         be:39:a9:6a:69:c8:1e:02:8d:55:bb:7c:d6:b6:7f:43:56:01:
         4b:b1:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org