Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32312e302f32342d3234203d3e20323731333335.roa
File:                     3230372e3234382e32312e302f32342d3234203d3e20323731333335.roa (raw, json)
Hash identifier:          2m+QGu6wLM0QXY74FttOATuRcjl9+xH1NeFfciN24lk=
Subject key identifier:   3D:89:03:9A:47:00:2A:EC:82:9E:19:8D:C0:93:47:81:EA:BA:31:DD
Certificate issuer:       /CN=F480C4379294C536904F68B3310E84F3A994704C
Certificate serial:       34D2D5F990C22B7E5445A18C64F7BA01FEB15210
Authority key identifier: F4:80:C4:37:92:94:C5:36:90:4F:68:B3:31:0E:84:F3:A9:94:70:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F480C4379294C536904F68B3310E84F3A994704C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32312e302f32342d3234203d3e20323731333335.roa
Signing time:             Sat 11 Nov 2023 13:49:01 +0000
ROA not before:           Sat 11 Nov 2023 13:44:01 +0000
ROA not after:            Sat 09 Nov 2024 13:49:01 +0000
asID:                     271335
IP address blocks:        207.248.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d2:d5:f9:90:c2:2b:7e:54:45:a1:8c:64:f7:ba:01:fe:b1:52:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F480C4379294C536904F68B3310E84F3A994704C
        Validity
            Not Before: Nov 11 13:44:01 2023 GMT
            Not After : Nov  9 13:49:01 2024 GMT
        Subject: CN=3D89039A47002AEC829E198DC0934781EABA31DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:e3:46:03:00:87:aa:37:45:a9:e2:74:a7:
                    35:6f:c7:ad:fc:ac:7e:7b:41:88:51:80:d5:b9:1b:
                    77:09:4d:79:2a:4e:96:12:c8:33:0c:19:b7:0a:ad:
                    f8:d1:cb:8b:38:86:1c:39:e7:f0:1e:9b:34:8b:da:
                    bf:9e:93:af:d0:07:c2:de:31:46:13:43:bb:dc:08:
                    19:3b:cc:b5:43:87:22:bb:18:6a:6a:db:b7:88:96:
                    3d:46:07:d6:10:ff:e3:47:87:44:3b:f5:74:82:96:
                    48:55:65:00:e9:7c:c9:48:9f:f2:58:7a:db:41:32:
                    a4:dc:2f:18:77:bd:6a:b0:04:5c:55:32:79:36:12:
                    4d:de:22:b1:ff:f0:67:5c:f4:92:ef:ee:50:78:7d:
                    a4:a3:60:8d:6a:8f:f3:f9:38:27:93:c7:c0:95:c2:
                    98:06:9e:ae:f4:74:d7:5d:bf:b9:98:38:d0:2a:47:
                    f0:01:ab:81:87:59:13:27:85:13:5c:52:27:03:1e:
                    8e:5d:16:fc:e1:9f:3b:59:07:fc:8a:31:e1:b2:a1:
                    82:59:87:ca:b9:fe:a8:f5:59:c3:a7:ed:b0:6d:0e:
                    f7:08:d8:62:74:83:f6:51:06:9d:9e:5f:4d:e0:56:
                    07:f7:d3:3d:96:db:f4:1a:c5:26:70:15:eb:d7:74:
                    7a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:89:03:9A:47:00:2A:EC:82:9E:19:8D:C0:93:47:81:EA:BA:31:DD
            X509v3 Authority Key Identifier:
                keyid:F4:80:C4:37:92:94:C5:36:90:4F:68:B3:31:0E:84:F3:A9:94:70:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/F480C4379294C536904F68B3310E84F3A994704C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F480C4379294C536904F68B3310E84F3A994704C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32312e302f32342d3234203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:ae:bd:72:c1:e6:fa:ec:04:8c:db:c4:13:5f:9c:ba:46:58:
         56:23:39:10:f1:5e:d7:3c:1f:6e:1e:ca:bb:f6:3d:59:29:0f:
         5e:4c:e0:32:67:ea:39:33:aa:ce:2b:d5:ec:bb:a8:e6:12:ef:
         82:91:f1:d5:37:61:27:0f:69:34:c6:cc:a3:65:c6:6e:4d:d0:
         10:c3:57:b9:14:85:cd:c8:82:bd:df:b1:48:67:21:3b:a1:a6:
         00:3f:bb:79:89:74:f6:47:8a:0a:d3:72:50:18:ba:cb:b8:cd:
         54:f8:24:f9:ac:27:68:af:b0:85:bb:2e:2f:40:b8:97:12:74:
         cb:b2:dd:a9:01:ca:00:4c:ca:a0:0b:13:1a:d7:e2:06:fd:c2:
         31:2d:b9:78:16:af:f1:e5:64:2a:7b:24:6a:74:99:d1:bb:a5:
         07:81:2f:b7:0d:b8:f1:2c:87:37:5f:26:35:b2:50:7f:8b:79:
         e4:66:a6:13:60:b5:5f:5e:52:13:2c:36:62:fd:ea:04:e4:20:
         1c:d9:2f:0a:cc:4c:0f:a3:85:98:6e:6b:3d:ab:68:78:1b:ea:
         98:b1:40:a3:86:95:3e:38:55:a1:7f:32:78:ea:f6:ff:6a:d3:
         6d:2c:39:bd:1f:e6:71:51:a9:bb:28:25:64:43:ca:1f:cf:ee:
         79:59:2f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org