Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230302e3232302e3230362e302f32332d3234203d3e20323632353839.roa
File:                     3230302e3232302e3230362e302f32332d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          CtDbtqhmxoFmiRixVvR+urQJqXl7b1OtnZ84oCr4SoM=
Subject key identifier:   CA:53:03:D5:6C:00:4A:86:08:63:79:73:2B:BB:99:74:BF:AA:38:6B
Certificate issuer:       /CN=F44EDF36C881BC97A766BDEEFF070251613E095D
Certificate serial:       583FFBA9382ED203C404FC1082E958CDF60851D0
Authority key identifier: F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230302e3232302e3230362e302f32332d3234203d3e20323632353839.roa
Signing time:             Tue 28 Nov 2023 00:15:18 +0000
ROA not before:           Tue 28 Nov 2023 00:10:18 +0000
ROA not after:            Tue 26 Nov 2024 00:15:18 +0000
asID:                     262589
IP address blocks:        200.220.206.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3f:fb:a9:38:2e:d2:03:c4:04:fc:10:82:e9:58:cd:f6:08:51:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F44EDF36C881BC97A766BDEEFF070251613E095D
        Validity
            Not Before: Nov 28 00:10:18 2023 GMT
            Not After : Nov 26 00:15:18 2024 GMT
        Subject: CN=CA5303D56C004A86086379732BBB9974BFAA386B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:72:dd:ef:f0:8d:b4:61:30:bc:5b:8a:ba:
                    0f:e3:b3:34:fc:09:e5:12:b5:f9:aa:25:86:34:4e:
                    2d:dc:48:b8:28:7d:8d:44:55:dd:e3:eb:dc:38:58:
                    80:2b:35:03:c3:0e:0a:39:a6:b4:d8:59:b8:bb:ea:
                    51:25:84:0c:92:80:f2:bd:4c:83:6b:c9:e4:81:8b:
                    38:af:1e:da:a9:39:d4:10:0e:5e:fb:89:d1:3f:19:
                    0a:ff:da:20:27:4f:cc:68:c3:7c:47:c1:21:ae:47:
                    bd:64:b8:0a:53:8b:c6:e3:fd:94:1c:18:72:99:d3:
                    bf:d1:27:53:55:f5:42:9a:86:07:c8:00:a8:b0:4b:
                    61:c0:19:b8:aa:e6:45:a5:55:38:8b:1c:10:5a:83:
                    56:27:9a:c7:ea:ef:b7:68:b6:3c:8b:14:b1:17:4d:
                    df:ca:79:ee:8f:97:4d:34:e4:24:79:4d:2f:51:a1:
                    4f:5e:75:41:0e:9c:7e:a9:ac:f3:95:ac:64:ae:93:
                    94:e8:89:c3:a2:38:d8:9f:3b:03:e4:36:e1:8b:be:
                    35:94:85:66:6d:63:b1:11:ae:73:f8:23:d6:ba:47:
                    2f:c3:17:9c:98:ad:b4:09:7a:53:2c:e3:a0:83:ca:
                    53:b0:10:69:52:6e:9f:7c:9b:bb:02:b5:f5:5a:85:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:53:03:D5:6C:00:4A:86:08:63:79:73:2B:BB:99:74:BF:AA:38:6B
            X509v3 Authority Key Identifier:
                keyid:F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230302e3232302e3230362e302f32332d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:55:e3:65:83:1e:23:6b:a6:9d:36:b6:a9:e3:41:85:db:fc:
         cc:de:02:27:05:d9:40:f2:c4:76:32:94:a2:f6:f8:9f:7b:a5:
         cd:03:49:91:e8:fc:fd:c7:c1:33:02:be:f7:31:e6:8c:f1:e4:
         0d:a1:3f:5a:ef:c6:db:f6:8e:f9:ea:97:5d:b6:4f:21:64:02:
         ff:1b:70:84:e7:dc:e4:81:e3:95:e5:6b:bf:92:96:0d:de:15:
         f4:fa:a7:7d:3e:54:fd:22:87:5b:ba:cf:52:5c:fb:d4:d9:b8:
         f8:6a:2f:f3:67:5d:af:c0:72:1a:4c:f9:9d:77:e2:06:43:c6:
         5e:95:45:25:c6:91:68:62:eb:c0:4b:cf:09:f3:8b:00:cf:98:
         01:1e:22:fe:03:5d:1d:f9:47:c3:f7:97:84:ee:8b:95:50:91:
         8a:20:88:11:fe:97:b5:97:56:5a:85:3e:6e:89:f4:d9:fa:96:
         2c:e2:a1:49:ec:f6:7e:f4:06:60:0a:85:c5:22:08:e1:fa:c8:
         23:58:dd:70:74:b2:93:2d:22:54:2a:b1:14:d6:76:cb:3f:4c:
         f1:82:67:c7:95:12:02:a1:fb:43:84:02:7c:1e:53:af:54:dc:
         8e:45:b2:ff:69:62:df:12:8b:d4:38:e5:90:70:dc:ba:de:f0:
         f4:ae:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org