Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/3230302e33392e3134302e302f32322d3332203d3e20323730373736.roa
File:                     3230302e33392e3134302e302f32322d3332203d3e20323730373736.roa (raw, json)
Hash identifier:          jaLW0MZ5nyK8aUJjiNu1XKPajhCvRUvP03N2vwv1jMw=
Subject key identifier:   FE:76:4E:E4:4F:22:A6:BB:43:9B:A0:34:86:D7:A4:E0:A1:95:4E:6C
Certificate issuer:       /CN=776410FE4FF1392B2F3571E75EAE3CE92208D632
Certificate serial:       122F1F78CDBB64D67F168870C706CCEE4D3EDE97
Authority key identifier: 77:64:10:FE:4F:F1:39:2B:2F:35:71:E7:5E:AE:3C:E9:22:08:D6:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/776410FE4FF1392B2F3571E75EAE3CE92208D632.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/3230302e33392e3134302e302f32322d3332203d3e20323730373736.roa
Signing time:             Fri 15 Mar 2024 19:04:00 +0000
ROA not before:           Fri 15 Mar 2024 18:59:00 +0000
ROA not after:            Fri 14 Mar 2025 19:04:00 +0000
asID:                     270776
IP address blocks:        200.39.140.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2f:1f:78:cd:bb:64:d6:7f:16:88:70:c7:06:cc:ee:4d:3e:de:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776410FE4FF1392B2F3571E75EAE3CE92208D632
        Validity
            Not Before: Mar 15 18:59:00 2024 GMT
            Not After : Mar 14 19:04:00 2025 GMT
        Subject: CN=FE764EE44F22A6BB439BA03486D7A4E0A1954E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:e7:fb:ed:20:62:d4:be:86:45:2d:54:62:
                    07:29:29:99:51:9c:05:3d:2b:f4:3f:91:b3:08:5e:
                    d0:f2:81:ea:da:bf:89:3f:af:1e:3d:c8:ca:96:f7:
                    d1:4c:b7:2e:c0:b9:eb:38:a4:6e:72:89:01:0f:15:
                    b2:0e:69:e3:7d:0b:19:a1:21:d5:7f:1c:87:f5:e0:
                    1a:5a:43:51:50:17:82:67:ab:4f:99:31:4e:78:35:
                    40:fc:1a:34:3d:50:82:5a:ce:b4:7e:7d:df:0d:31:
                    a6:8b:84:34:73:29:3b:29:ae:4c:a0:38:bf:47:51:
                    38:0c:f8:7c:0f:0d:d6:63:18:80:4f:63:ac:e3:18:
                    9f:81:e3:2e:d3:c6:b0:7f:b8:d0:3e:e3:e3:ba:42:
                    dd:b3:c2:36:0c:32:1d:35:bc:49:69:e1:d5:6e:df:
                    52:d8:95:ad:a9:f9:20:14:f9:f3:f1:ef:e7:94:65:
                    ed:82:9a:fa:6c:df:2f:9f:86:c7:48:a4:d9:47:51:
                    b3:dd:09:f0:59:f9:97:87:71:91:1d:fe:a6:71:5b:
                    63:77:a0:f3:4a:7e:f6:4a:79:ff:91:a9:ed:67:2b:
                    c0:a4:ab:a2:45:1c:52:73:7e:d1:50:c2:10:60:cd:
                    ae:4f:ab:8a:94:ba:70:f1:96:d7:82:cb:52:f8:2c:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:76:4E:E4:4F:22:A6:BB:43:9B:A0:34:86:D7:A4:E0:A1:95:4E:6C
            X509v3 Authority Key Identifier:
                keyid:77:64:10:FE:4F:F1:39:2B:2F:35:71:E7:5E:AE:3C:E9:22:08:D6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/776410FE4FF1392B2F3571E75EAE3CE92208D632.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/776410FE4FF1392B2F3571E75EAE3CE92208D632.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/3230302e33392e3134302e302f32322d3332203d3e20323730373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:ad:21:22:d4:73:d1:1d:75:ef:c1:13:ae:ad:a0:cf:50:
         a4:ce:f7:fe:56:95:00:9a:b5:d2:64:fd:c1:ba:79:2f:35:28:
         a6:ef:76:2f:2b:3a:1a:06:03:58:64:14:5c:61:ec:2f:46:18:
         49:ce:64:28:89:6f:86:51:fa:26:80:d1:68:5c:0c:6c:77:7b:
         8b:aa:17:b2:f6:01:4b:d6:14:66:bc:fe:95:f7:0c:cf:44:d8:
         9f:a0:39:3b:cc:30:b1:a4:87:62:ba:59:03:fe:69:59:d0:42:
         a5:1f:aa:c3:91:c6:d8:c1:3e:dd:02:ee:e2:5f:f5:f6:33:68:
         4c:2d:a7:0b:78:73:61:5e:ba:f9:bf:3a:e9:4b:2e:e8:fe:9c:
         3f:d2:55:d3:f6:cc:be:8b:60:34:84:6e:cd:79:91:7a:17:42:
         69:6a:d4:13:6c:f4:09:1b:c8:46:98:05:6e:e0:14:f9:be:e2:
         59:e2:76:20:59:b2:87:69:5e:45:16:5f:1e:f4:30:46:33:71:
         57:ba:b4:41:8f:d5:6e:66:2b:c9:f8:fe:27:37:3f:35:2a:2b:
         a6:31:39:df:bd:55:77:f8:b0:2b:f9:10:e8:fa:99:b1:8e:09:
         39:5e:3c:d6:3b:d7:d9:2e:a1:37:39:a7:77:8a:0b:5c:50:7b:
         aa:68:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org