Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/3230302e3130382e3137322e302f32342d3234203d3e20323730323536.roa
File:                     3230302e3130382e3137322e302f32342d3234203d3e20323730323536.roa (raw, json)
Hash identifier:          C2KZoVccYKV9BJumSpZ1zy4Pfd46tva7Pd1kbiOmhPM=
Subject key identifier:   B8:0D:AB:1A:F7:4F:8F:74:03:94:C7:C2:AA:72:7F:24:BA:AF:70:BC
Certificate issuer:       /CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
Certificate serial:       557397EBA6B950F23BE31C4164AA8F81FB4A6C90
Authority key identifier: E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/3230302e3130382e3137322e302f32342d3234203d3e20323730323536.roa
Signing time:             Mon 30 Jan 2023 18:09:26 +0000
ROA not before:           Mon 30 Jan 2023 18:04:26 +0000
ROA not after:            Mon 29 Jan 2024 18:09:26 +0000
asID:                     270256
IP address blocks:        200.108.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:73:97:eb:a6:b9:50:f2:3b:e3:1c:41:64:aa:8f:81:fb:4a:6c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
        Validity
            Not Before: Jan 30 18:04:26 2023 GMT
            Not After : Jan 29 18:09:26 2024 GMT
        Subject: CN=B80DAB1AF74F8F740394C7C2AA727F24BAAF70BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:bc:13:c0:44:4c:de:c1:1c:6a:1d:18:51:
                    d1:e1:a3:1d:f2:85:c1:90:1e:69:69:fa:4a:db:d5:
                    fa:a1:61:5d:e7:2a:73:9c:69:e0:ad:fe:fd:ab:a5:
                    00:f1:21:f7:36:aa:ff:6b:a5:c1:94:3e:78:7f:01:
                    e5:02:42:30:4f:06:57:f1:37:c4:0b:32:1e:24:a6:
                    7f:79:0c:b7:cb:33:a4:0d:a6:db:0b:6a:6a:f1:17:
                    bc:0c:c7:2e:b0:e4:42:3d:f8:c6:52:3e:62:0c:3e:
                    74:c4:a5:b7:aa:41:e0:3d:79:d9:4a:73:00:69:e1:
                    bc:0e:c9:10:d5:14:c6:68:04:4b:26:dc:e1:3b:59:
                    35:b4:6a:be:28:a8:73:65:a1:6c:19:38:92:5a:ac:
                    bc:73:8b:53:b8:18:a4:de:44:ff:21:3a:b7:39:00:
                    a7:78:7b:26:1a:a1:d8:de:2f:8e:ee:e3:1d:46:f9:
                    50:d3:a1:be:11:e2:7a:65:50:4a:61:12:bd:a0:b4:
                    51:56:d6:86:64:f2:fe:94:90:a7:bc:60:3d:af:90:
                    80:91:44:fb:10:0f:b3:67:f0:25:37:81:d4:5e:3e:
                    4c:49:c4:4b:bf:23:03:04:de:99:67:ba:6a:b8:d8:
                    43:5b:31:42:d2:10:6d:47:63:47:c8:c1:6f:7c:59:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0D:AB:1A:F7:4F:8F:74:03:94:C7:C2:AA:72:7F:24:BA:AF:70:BC
            X509v3 Authority Key Identifier:
                keyid:E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/3230302e3130382e3137322e302f32342d3234203d3e20323730323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:56:26:ca:27:25:d5:92:3c:84:93:00:3a:b4:de:f9:a6:20:
         e0:6c:ef:2f:5f:56:4c:fc:c6:c6:4b:5a:f6:fc:2a:bc:b0:89:
         7d:70:16:9c:37:b6:65:51:a6:a6:36:8d:56:dc:17:97:cc:3d:
         fe:fc:a2:a4:96:82:e0:34:3b:63:5b:1d:58:db:ce:6d:31:01:
         46:2c:07:fe:a9:27:a6:66:1e:61:9c:20:00:fc:4d:4e:6d:a7:
         18:7b:b9:6c:29:26:11:7d:fb:a0:4c:52:f5:a1:7d:8a:fb:56:
         99:09:9e:58:ea:50:6e:a3:07:4e:ad:69:ab:75:08:da:04:9b:
         6a:31:d6:09:36:51:83:86:0c:41:88:e0:9a:07:37:5b:4d:a2:
         67:cc:42:97:81:0e:22:36:6b:bf:0e:38:1e:40:d2:ca:be:0a:
         e3:4a:32:85:8e:72:57:80:6a:03:aa:71:90:a6:ea:11:2c:34:
         46:dd:90:fd:62:b1:1d:94:6f:30:a6:c5:f6:dd:33:95:6c:dc:
         73:f8:d7:6e:84:b8:00:7a:93:83:56:d8:4e:ad:d7:41:a5:39:
         c2:aa:6d:3b:ba:75:fb:c8:35:9d:56:97:2d:1c:f0:d6:31:e2:
         74:ab:b8:fc:72:3f:9a:e5:e4:40:66:fb:27:20:e8:6f:1c:fa:
         18:87:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org