Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230302e3232302e3139322e302f31392d3234203d3e20323632353839.roa
File:                     3230302e3232302e3139322e302f31392d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          EnGy15zw3crvI7gKsP9pCoWY6t4ebNHPhs3qZ/WgueE=
Subject key identifier:   04:F7:53:F9:CC:31:FE:86:C0:3F:49:E5:E6:35:D6:2E:EE:97:93:CC
Certificate issuer:       /CN=F44EDF36C881BC97A766BDEEFF070251613E095D
Certificate serial:       2AC088B8E8B8519A8DC23552B81A0A8CBC451929
Authority key identifier: F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230302e3232302e3139322e302f31392d3234203d3e20323632353839.roa
Signing time:             Tue 28 Nov 2023 20:33:52 +0000
ROA not before:           Tue 28 Nov 2023 20:28:52 +0000
ROA not after:            Tue 26 Nov 2024 20:33:52 +0000
asID:                     262589
IP address blocks:        200.220.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c0:88:b8:e8:b8:51:9a:8d:c2:35:52:b8:1a:0a:8c:bc:45:19:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F44EDF36C881BC97A766BDEEFF070251613E095D
        Validity
            Not Before: Nov 28 20:28:52 2023 GMT
            Not After : Nov 26 20:33:52 2024 GMT
        Subject: CN=04F753F9CC31FE86C03F49E5E635D62EEE9793CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:2e:84:42:61:04:bc:51:99:09:17:22:ac:
                    e2:bc:86:7d:a5:42:2a:bd:bb:21:fb:e6:01:7d:3f:
                    40:af:42:8a:48:0c:48:da:d1:72:1a:e8:fd:51:2c:
                    33:73:0c:e3:ed:94:4c:09:eb:3a:49:c6:50:99:26:
                    da:ad:55:f3:81:5f:f0:bd:cd:a0:99:30:f2:2a:49:
                    bd:e6:60:8d:f5:ca:86:80:08:4f:f0:29:a1:10:f0:
                    84:e6:be:70:f8:49:28:23:b3:a6:a9:4a:3f:fb:a6:
                    87:6d:70:97:36:5c:84:c0:ac:a0:af:43:30:f4:9b:
                    26:a9:8c:12:cd:b8:76:25:99:fb:c4:e9:d8:56:cb:
                    80:5c:d8:cb:5c:0a:e4:08:23:e0:0d:32:bb:c5:b3:
                    22:a9:a5:06:19:05:d7:d7:25:d6:0e:41:c1:24:2b:
                    f7:be:c5:ad:d1:65:9e:25:5a:53:a7:e3:42:55:b1:
                    21:fb:0c:6e:3e:83:22:35:8f:5f:45:fe:e4:61:2c:
                    80:6c:2a:83:b2:5d:be:61:ab:88:7a:4b:6a:a1:b1:
                    19:b3:e8:ec:0f:ac:e9:db:56:45:42:40:25:11:df:
                    41:7d:29:c2:6c:cf:f8:af:b3:f9:b4:9e:99:ce:ac:
                    fc:68:8d:e9:4c:4d:bc:6d:07:43:7b:99:fb:6b:1c:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F7:53:F9:CC:31:FE:86:C0:3F:49:E5:E6:35:D6:2E:EE:97:93:CC
            X509v3 Authority Key Identifier:
                keyid:F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230302e3232302e3139322e302f31392d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:94:93:aa:3e:2d:c5:94:46:1c:67:1b:c5:76:ae:1b:d6:d5:
         0b:21:70:c3:b1:d5:e9:1f:1d:73:a8:9e:29:de:32:1d:30:e3:
         b1:5b:93:90:d4:e3:cf:b1:8f:c9:bf:e5:32:04:b9:df:70:3c:
         a2:9f:36:70:84:4e:51:1a:a4:fc:28:b9:52:18:b3:0c:54:e5:
         22:50:b9:22:5b:76:d2:51:9b:ad:b9:8b:bb:70:c1:3c:77:92:
         a2:b9:5b:f1:72:21:bd:dc:d0:2c:38:4c:7d:9e:9f:84:d6:c9:
         01:a5:fc:45:d9:c2:eb:83:10:61:51:0c:be:50:16:d4:c7:6b:
         15:c9:fd:93:e1:41:95:58:f8:9f:d0:32:2c:55:49:c3:f8:41:
         c2:97:51:ce:0d:ff:64:2c:63:9a:d0:ee:b7:71:7f:5b:37:b4:
         38:ab:48:bd:b2:83:94:77:a7:b5:9a:d1:bf:7f:bd:bc:9f:1e:
         2d:32:e4:3b:dc:56:b3:0b:e0:2e:22:3c:b5:b3:e8:b6:2c:ea:
         5e:7b:33:23:43:b0:1a:ac:1e:eb:45:25:c7:b1:33:7a:34:55:
         fc:3e:03:26:73:7e:33:7c:57:ba:0d:c0:f1:0c:61:1f:9a:9f:
         ef:61:a6:df:11:77:40:ad:82:46:fe:57:0b:e6:be:61:48:be:
         80:51:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org