Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3230302e3231352e3137332e302f32342d3234203d3e20323632363938.roa
File:                     3230302e3231352e3137332e302f32342d3234203d3e20323632363938.roa (raw, json)
Hash identifier:          6a5Op1+D5UCH55zxGZWODycIkUZmyzU9Lye1017sB1s=
Subject key identifier:   31:1A:80:7A:E6:C2:EC:0E:BA:FA:9D:0A:A8:56:A2:60:57:76:37:F8
Certificate issuer:       /CN=12D902AA004E1396EDA97BD4212288390A55D9A9
Certificate serial:       51383E7A4211326F7A0ABB9501E018163768FF0C
Authority key identifier: 12:D9:02:AA:00:4E:13:96:ED:A9:7B:D4:21:22:88:39:0A:55:D9:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D902AA004E1396EDA97BD4212288390A55D9A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3230302e3231352e3137332e302f32342d3234203d3e20323632363938.roa
Signing time:             Wed 29 Nov 2023 20:38:41 +0000
ROA not before:           Wed 29 Nov 2023 20:33:40 +0000
ROA not after:            Wed 27 Nov 2024 20:38:40 +0000
asID:                     262698
IP address blocks:        200.215.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:38:3e:7a:42:11:32:6f:7a:0a:bb:95:01:e0:18:16:37:68:ff:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12D902AA004E1396EDA97BD4212288390A55D9A9
        Validity
            Not Before: Nov 29 20:33:40 2023 GMT
            Not After : Nov 27 20:38:40 2024 GMT
        Subject: CN=311A807AE6C2EC0EBAFA9D0AA856A260577637F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:ea:f5:ef:47:03:42:54:a8:bf:65:53:ec:
                    49:d3:5a:85:18:29:66:3b:65:c4:ba:6d:2c:13:40:
                    8b:8e:b1:85:bf:3b:06:cf:53:8d:09:d4:b2:ae:dc:
                    2b:ef:09:e1:a9:51:6d:e7:ca:7d:a1:c5:cf:45:88:
                    20:c4:0c:16:1d:00:7f:90:a8:6a:10:6c:8c:2e:05:
                    38:ba:b1:5d:b4:06:25:d9:b7:0b:2f:a3:ff:af:c8:
                    cc:34:49:73:fc:2a:f6:c7:8a:fd:23:23:04:bf:82:
                    b0:a2:9b:04:2e:e3:bb:4e:95:7e:c2:4f:85:c0:95:
                    76:d0:f1:80:60:86:84:49:5a:42:92:a0:90:5b:4c:
                    ce:f8:8a:f5:78:06:cd:fc:d6:bf:98:bd:0d:0e:88:
                    13:15:0e:0f:65:71:10:3c:83:b7:5b:82:bf:eb:14:
                    37:34:a0:76:6d:86:b4:32:3b:4a:35:ec:45:7e:52:
                    c2:81:4d:70:f9:0e:36:ed:3c:f4:2e:4c:bc:75:cd:
                    a3:0a:73:ce:e1:c0:fc:f8:6a:81:09:04:8d:fc:9b:
                    3a:2b:ee:18:86:37:db:7a:67:1e:e0:c2:a5:6b:90:
                    81:8b:39:4f:ad:00:20:ac:56:b9:87:c7:bb:23:0a:
                    ea:fa:2c:c9:33:98:a3:16:c8:cf:87:38:8f:ea:87:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1A:80:7A:E6:C2:EC:0E:BA:FA:9D:0A:A8:56:A2:60:57:76:37:F8
            X509v3 Authority Key Identifier:
                keyid:12:D9:02:AA:00:4E:13:96:ED:A9:7B:D4:21:22:88:39:0A:55:D9:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/12D902AA004E1396EDA97BD4212288390A55D9A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D902AA004E1396EDA97BD4212288390A55D9A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3230302e3231352e3137332e302f32342d3234203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:cc:2e:8f:a2:54:6d:48:06:18:a7:e9:68:8a:97:ce:93:7b:
         2e:d7:f5:7d:19:0a:00:4b:30:1d:3b:6e:cf:87:09:68:3a:59:
         10:cd:4e:e4:4a:5b:2a:d0:44:8a:8a:87:62:74:96:c4:f4:25:
         5c:ce:2e:6b:c5:52:a7:b7:b1:ca:94:ad:68:2f:d5:79:fb:47:
         1d:e8:e0:4e:0f:93:b7:fc:0a:a2:7f:b2:1f:58:65:95:16:46:
         55:09:af:66:59:27:12:a8:4c:c9:07:dd:b1:f9:08:0e:c9:73:
         09:f8:81:7b:cf:1d:d8:2c:5e:c9:92:e7:fe:97:ff:3b:a5:5f:
         71:b6:f6:3e:60:c1:12:cf:15:68:58:07:8f:32:84:b9:73:6e:
         2e:9b:55:af:5b:67:80:a6:cf:df:19:4f:2d:21:bc:6e:f3:7d:
         a7:00:ca:7a:68:d1:f1:07:99:cc:aa:e0:fe:48:11:63:ec:6f:
         fb:44:64:60:91:53:48:6c:94:0b:7a:11:2c:01:13:3f:31:bf:
         d5:c9:00:56:fb:e6:a2:7e:60:02:24:6d:0a:38:4a:16:6a:de:
         7e:06:9f:26:b2:42:8b:d8:21:5b:e8:ea:4e:73:2b:b8:09:b2:
         42:85:e0:aa:25:8f:d1:4c:d3:30:aa:b7:b8:8c:fe:80:42:ab:
         9f:b8:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org