Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233362e33322e302f31392d3139203d3e2032373136.roa
File:                     3230302e3233362e33322e302f31392d3139203d3e2032373136.roa (raw, json)
Hash identifier:          leCBGIfb9tNAZL2Rjs+oY8EwtLOKMf3T3ZVZHBR+52c=
Subject key identifier:   85:51:75:33:23:5C:0C:92:CF:62:F5:DF:D2:EA:FF:26:44:50:41:47
Certificate issuer:       /CN=71712024E7C984B82DF5E8204BB161EDF9843B50
Certificate serial:       49CA94EC0EBEDD9A2E93EE0371B56270C6949C37
Authority key identifier: 71:71:20:24:E7:C9:84:B8:2D:F5:E8:20:4B:B1:61:ED:F9:84:3B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71712024E7C984B82DF5E8204BB161EDF9843B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233362e33322e302f31392d3139203d3e2032373136.roa
Signing time:             Fri 07 Jul 2023 15:00:00 +0000
ROA not before:           Fri 07 Jul 2023 14:55:00 +0000
ROA not after:            Fri 05 Jul 2024 15:00:00 +0000
asID:                     2716
IP address blocks:        200.236.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ca:94:ec:0e:be:dd:9a:2e:93:ee:03:71:b5:62:70:c6:94:9c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71712024E7C984B82DF5E8204BB161EDF9843B50
        Validity
            Not Before: Jul  7 14:55:00 2023 GMT
            Not After : Jul  5 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:fb:26:cf:a8:fb:40:04:73:06:58:f3:89:
                    6c:33:0e:90:dc:bc:5a:04:59:bf:1b:fb:aa:a6:41:
                    66:e3:e6:fa:14:b0:0e:0d:89:db:ca:8a:9f:f8:02:
                    ed:b1:21:86:e1:2e:7d:1c:95:32:6d:66:24:cf:ab:
                    36:6f:ab:2f:33:cc:fa:5c:ba:1b:21:40:8b:2d:3f:
                    fa:74:36:d7:79:d9:7b:aa:f3:df:e6:27:1c:d5:99:
                    76:3e:1a:5e:2e:f2:1b:19:91:fe:cf:ce:11:8d:ad:
                    e8:ba:4f:65:a3:34:00:ae:cc:19:89:bd:47:ef:8c:
                    0f:49:22:43:b0:fd:3e:e4:b7:ec:5a:dc:17:de:67:
                    72:02:63:98:4c:73:04:cb:87:5d:37:4a:8d:40:8e:
                    20:c7:c8:5d:c9:26:a1:87:26:c7:7d:32:82:22:ed:
                    b4:ee:a8:e8:b0:51:b3:60:52:72:a9:43:5d:36:19:
                    23:5b:5c:1a:8f:61:06:3a:1c:d5:c2:a2:5a:48:fe:
                    e4:50:1a:a1:1b:b1:1b:ec:3f:c4:32:13:49:b7:e3:
                    46:ff:76:fb:99:ef:2b:d8:70:0a:3d:98:ce:c1:c9:
                    d4:1a:4c:c7:00:8b:70:dd:e7:34:29:71:15:52:e1:
                    fd:94:58:27:40:9e:0c:62:a1:ee:87:1c:f9:18:e1:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:75:33:23:5C:0C:92:CF:62:F5:DF:D2:EA:FF:26:44:50:41:47
            X509v3 Authority Key Identifier:
                keyid:71:71:20:24:E7:C9:84:B8:2D:F5:E8:20:4B:B1:61:ED:F9:84:3B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/71712024E7C984B82DF5E8204BB161EDF9843B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71712024E7C984B82DF5E8204BB161EDF9843B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233362e33322e302f31392d3139203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:1e:c8:94:7c:1a:38:50:b7:a1:f8:0f:9f:4f:cd:b6:6a:18:
         10:de:53:7e:d5:56:1b:19:cf:35:53:79:43:ce:95:de:35:55:
         38:fe:93:17:39:6f:b6:a5:47:20:53:e0:e0:12:58:74:29:64:
         e5:2a:a7:48:0f:9f:b8:65:f5:fb:7f:aa:b9:43:6c:4c:20:54:
         e0:fe:59:75:34:1d:ae:9c:d4:83:22:f2:80:c3:ce:ea:84:09:
         7e:cd:de:8b:50:24:a4:eb:8a:d1:f0:d8:17:d4:a9:ee:3a:6d:
         2c:dd:b4:f3:61:83:db:11:bc:a1:ea:99:ec:10:29:ed:c8:36:
         eb:c7:9c:c9:51:d1:47:5d:96:c0:26:38:d1:7c:38:05:80:cf:
         86:f7:e8:26:7e:f1:b4:bb:60:30:fc:34:c3:26:5d:9e:8e:c4:
         73:b8:f0:50:4a:64:4b:d6:63:11:4c:55:f8:a0:ff:a6:11:8a:
         07:99:b3:1e:fa:35:2c:31:4e:a8:26:bb:b5:25:02:00:22:77:
         ab:da:25:56:97:31:7c:69:e6:6a:3a:48:8b:ef:ab:5d:c6:4d:
         7a:27:db:c2:cf:1f:cb:21:41:0f:21:97:0c:41:6e:41:63:5e:
         7f:fe:4c:63:4c:e8:fd:64:9e:06:d4:89:4c:f8:19:ce:4a:e0:
         9c:7b:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org