Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/3230302e35302e3232302e302f32332d3234203d3e20323730343630.roa
File:                     3230302e35302e3232302e302f32332d3234203d3e20323730343630.roa (raw, json)
Hash identifier:          8ABLfCpNnRjCikLsxagjWJnesFbll5jxnhoZoqzX74A=
Subject key identifier:   9D:A5:2D:87:6D:77:FD:67:4C:40:F5:F1:7D:77:1F:C5:CF:FF:58:CE
Certificate issuer:       /CN=780F596920B023D27CC4D953A13A9C8DAA3CC182
Certificate serial:       79A7865EF5861BD57ABBFF8768C4AB262F561836
Authority key identifier: 78:0F:59:69:20:B0:23:D2:7C:C4:D9:53:A1:3A:9C:8D:AA:3C:C1:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/780F596920B023D27CC4D953A13A9C8DAA3CC182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/3230302e35302e3232302e302f32332d3234203d3e20323730343630.roa
Signing time:             Fri 24 Nov 2023 19:40:06 +0000
ROA not before:           Fri 24 Nov 2023 19:35:06 +0000
ROA not after:            Fri 22 Nov 2024 19:40:06 +0000
asID:                     270460
IP address blocks:        200.50.220.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a7:86:5e:f5:86:1b:d5:7a:bb:ff:87:68:c4:ab:26:2f:56:18:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780F596920B023D27CC4D953A13A9C8DAA3CC182
        Validity
            Not Before: Nov 24 19:35:06 2023 GMT
            Not After : Nov 22 19:40:06 2024 GMT
        Subject: CN=9DA52D876D77FD674C40F5F17D771FC5CFFF58CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:c0:75:91:33:48:9b:3e:18:d7:ac:69:81:
                    59:11:48:07:da:60:84:5b:ee:34:f9:02:92:a8:d3:
                    60:cb:75:6f:a6:76:03:d7:bd:0d:21:c8:6a:6c:e7:
                    20:5c:de:22:78:92:f7:27:93:86:d8:e7:9e:68:b4:
                    c1:26:bf:b3:9a:85:64:3e:15:6e:55:32:3d:39:c1:
                    8b:60:83:fa:99:ba:ab:11:18:1e:2b:34:e1:39:ee:
                    80:f3:97:25:23:de:45:56:45:6b:cc:f1:3c:63:23:
                    0f:c8:31:31:1e:9a:93:e8:0f:51:83:1b:a2:5c:69:
                    69:f9:08:1e:e4:02:de:de:60:cd:3c:4d:08:c9:8b:
                    a2:f7:49:12:d6:d8:2c:b1:e2:cc:58:90:dc:dd:5e:
                    76:61:1b:f3:b1:17:1d:42:fc:74:16:30:4b:24:cc:
                    e7:12:f2:1a:68:21:ec:ac:08:75:fa:3c:ec:fd:1c:
                    5d:fb:81:e7:83:54:f4:be:13:9b:4e:8c:01:f1:d6:
                    de:67:1e:5a:f4:77:f2:82:38:4d:4f:79:4d:15:5f:
                    39:e3:1c:16:2a:9a:76:77:9e:45:cd:c7:c1:b4:15:
                    b7:74:aa:75:52:38:55:c4:15:6b:81:f1:fd:fb:2a:
                    9a:73:b3:74:ed:d6:b4:89:a1:ee:4c:6e:ee:be:3f:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A5:2D:87:6D:77:FD:67:4C:40:F5:F1:7D:77:1F:C5:CF:FF:58:CE
            X509v3 Authority Key Identifier:
                keyid:78:0F:59:69:20:B0:23:D2:7C:C4:D9:53:A1:3A:9C:8D:AA:3C:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/780F596920B023D27CC4D953A13A9C8DAA3CC182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/780F596920B023D27CC4D953A13A9C8DAA3CC182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/3230302e35302e3232302e302f32332d3234203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:7c:70:2d:98:08:0c:a5:b7:b4:6f:eb:76:4e:e6:29:46:b0:
         ff:12:41:94:bb:e2:e1:bf:35:7f:f9:59:6e:af:54:c9:72:b8:
         4c:bc:61:15:e4:f0:f7:92:d5:90:4f:33:42:90:c6:67:ef:87:
         91:68:9e:5f:f2:f9:73:39:43:a4:e3:c2:27:bf:3f:a7:8b:04:
         77:20:d0:d3:9d:c0:59:15:e7:56:f8:f2:15:f1:0a:5f:76:5c:
         85:90:72:80:ef:60:f2:81:40:25:f5:d0:06:c1:0b:9b:f2:7d:
         0f:af:02:45:61:68:50:17:14:5c:9c:d6:6b:21:62:99:d4:1b:
         b7:ca:8b:a9:dd:9d:12:7f:4c:ef:3f:55:0e:ab:66:a7:06:9c:
         fc:40:34:a3:ae:7b:bf:7d:5d:f9:32:c1:41:ca:f0:fd:d0:5a:
         97:d3:62:3b:2a:c6:03:3a:00:ea:bc:59:d9:fb:a6:23:44:ef:
         9a:5b:be:00:a9:1a:d6:7a:a1:20:20:a1:d6:4a:d8:80:46:0c:
         0b:35:8f:92:80:35:4e:7b:fe:0b:f0:1a:ab:95:77:5a:aa:ca:
         a7:e5:fb:13:c0:96:63:f1:b8:ef:ce:57:76:24:ba:ef:94:61:
         9c:21:39:97:45:50:2c:3b:e1:5e:f7:bf:39:a6:ac:ef:20:e1:
         02:e8:93:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org