Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3234203d3e20323633343431.roa
File:                     3230302e3232352e3130382e302f32322d3234203d3e20323633343431.roa (raw, json)
Hash identifier:          N9+7OaheN39t9Ac60Cj8hvwLjqxkrU3tjvKoIT0N2l4=
Subject key identifier:   F8:ED:72:C0:91:4A:C3:D3:C8:90:2F:1B:EE:AB:70:72:F4:42:45:A0
Certificate issuer:       /CN=9AF759E568BE2FC7F28D74D12598B32A1F937C25
Certificate serial:       6105C54FD4433B902FCF0887FC65C9BA331E2A1C
Authority key identifier: 9A:F7:59:E5:68:BE:2F:C7:F2:8D:74:D1:25:98:B3:2A:1F:93:7C:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3234203d3e20323633343431.roa
Signing time:             Fri 02 Jun 2023 02:46:32 +0000
ROA not before:           Fri 02 Jun 2023 02:41:32 +0000
ROA not after:            Fri 31 May 2024 02:46:32 +0000
asID:                     263441
IP address blocks:        200.225.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:05:c5:4f:d4:43:3b:90:2f:cf:08:87:fc:65:c9:ba:33:1e:2a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF759E568BE2FC7F28D74D12598B32A1F937C25
        Validity
            Not Before: Jun  2 02:41:32 2023 GMT
            Not After : May 31 02:46:32 2024 GMT
        Subject: CN=F8ED72C0914AC3D3C8902F1BEEAB7072F44245A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:cf:95:a1:de:4f:94:ec:6c:00:25:c2:6f:
                    b4:4b:ed:ec:ed:48:30:8a:af:cd:86:bd:04:10:37:
                    20:a4:62:40:49:20:62:f4:5d:9d:6d:60:0c:32:08:
                    65:71:b9:1b:c5:82:e3:4a:08:95:0f:56:85:67:fe:
                    73:77:16:ad:47:18:b5:a8:1f:2d:77:da:f5:40:7e:
                    22:65:34:74:ad:47:c8:65:ff:d2:27:8d:c8:10:57:
                    66:aa:b2:89:12:25:9f:9b:39:17:7e:75:83:8a:a5:
                    45:86:40:49:c9:cd:b3:7e:c4:e1:b0:20:9a:08:49:
                    4c:f1:d3:d8:a5:2c:16:89:5b:1f:78:7e:ed:44:2f:
                    eb:49:d8:e8:1e:62:51:56:40:e7:30:3d:9d:2d:c2:
                    13:75:ae:46:b1:83:98:3e:89:ec:ce:3c:ad:2e:ed:
                    81:92:71:62:3f:d5:fb:50:59:07:a8:69:44:58:8e:
                    9e:99:a9:4c:2d:b0:22:43:48:64:72:7e:0c:e7:67:
                    14:d8:e9:66:b9:b8:f1:28:94:c7:f4:cb:09:1b:43:
                    bc:09:c2:47:8c:ab:9f:bb:95:4c:9e:58:38:d6:aa:
                    44:48:a3:a1:3a:5c:a9:4c:f6:88:43:5b:d0:4b:f2:
                    14:4e:2e:2e:62:35:c1:9d:8f:2c:f4:cb:ce:32:73:
                    58:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:ED:72:C0:91:4A:C3:D3:C8:90:2F:1B:EE:AB:70:72:F4:42:45:A0
            X509v3 Authority Key Identifier:
                keyid:9A:F7:59:E5:68:BE:2F:C7:F2:8D:74:D1:25:98:B3:2A:1F:93:7C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3234203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:7c:91:a0:b4:c6:ce:d0:fe:f0:03:e3:ff:22:f6:83:f5:
         10:3e:ea:f3:ad:e9:3e:b5:8c:74:6a:78:56:f4:3d:8c:c1:20:
         64:8b:69:d1:7a:46:c3:53:d9:45:fe:af:00:36:fc:33:57:bb:
         cd:b9:9f:cf:06:6a:8c:12:c7:47:93:61:a4:91:cc:ea:2a:5a:
         f8:5e:7b:6d:2d:cc:3a:66:65:61:55:c0:f6:1a:db:7b:0b:46:
         71:ef:f1:17:0c:bd:f4:5d:52:5d:f8:91:ed:ce:96:95:f2:2c:
         42:57:a0:79:ca:a4:9c:34:d3:5b:97:21:dd:1d:f2:42:3a:8a:
         d8:e4:c9:7d:39:3a:57:fa:c8:13:c1:1f:53:96:22:48:8f:f6:
         98:c9:80:e2:8f:b8:e7:a1:84:f4:22:1a:6b:5a:7a:07:f7:ad:
         50:a9:de:68:e1:38:db:c4:3a:bb:16:f6:49:18:9f:1f:39:6f:
         26:02:0f:a5:ff:1f:8e:43:34:b5:5f:dd:01:2d:e7:1f:24:41:
         70:79:9c:1e:95:95:86:68:73:39:e4:84:4b:4e:f2:23:5e:f1:
         b4:8d:f1:fe:f8:66:f1:96:b8:ac:ad:35:e4:07:98:19:9e:b9:
         7b:60:9b:63:cb:e4:e9:ac:b8:eb:44:dd:7e:12:45:1e:b7:45:
         a7:3e:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org