Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230302e302f32322d3232203d3e20323634393534.roa
File:                     3136382e3233322e3230302e302f32322d3232203d3e20323634393534.roa (raw, json)
Hash identifier:          cV7tSi3moYhXMhYPJtAJXhD+pT6gtb+CS0WddtVkV8Y=
Subject key identifier:   9A:D6:7B:01:45:CC:39:A2:2B:05:63:9D:EB:FB:25:E0:70:B9:EF:BC
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       70BD39C0783787992DAA46CA090D3C1542754D7E
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230302e302f32322d3232203d3e20323634393534.roa
Signing time:             Tue 26 Sep 2023 20:01:48 +0000
ROA not before:           Tue 26 Sep 2023 19:56:48 +0000
ROA not after:            Tue 24 Sep 2024 20:01:48 +0000
asID:                     264954
IP address blocks:        168.232.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bd:39:c0:78:37:87:99:2d:aa:46:ca:09:0d:3c:15:42:75:4d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Sep 26 19:56:48 2023 GMT
            Not After : Sep 24 20:01:48 2024 GMT
        Subject: CN=9AD67B0145CC39A22B05639DEBFB25E070B9EFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2f:81:94:a3:2f:7c:7e:e8:d9:93:41:ca:9d:
                    57:1d:6d:6a:1c:8b:2c:f8:d6:7f:99:25:63:fc:0d:
                    a9:4d:6b:d9:b1:02:31:27:9b:b9:bb:86:f5:07:78:
                    c7:28:97:c6:fd:3a:81:a5:98:90:ce:65:2d:89:d2:
                    b1:21:c1:70:97:de:9f:27:e2:bc:88:69:c9:7a:5a:
                    5c:82:35:6e:c3:2a:e1:32:69:ea:d0:c3:c6:ae:3a:
                    2b:c0:e7:3c:28:58:4f:99:4d:09:f6:95:1d:c6:38:
                    53:7f:12:bb:76:36:ef:ac:85:06:e3:64:48:c3:aa:
                    2a:5c:dc:45:b5:f5:d2:0b:45:d0:c2:c3:b8:b6:ca:
                    f8:98:ad:da:2c:82:a1:c0:9b:0a:d9:48:15:9c:75:
                    8b:28:6b:67:53:cc:fc:87:a3:54:93:8c:f7:5d:fb:
                    d7:54:5d:21:b6:96:65:24:2a:9f:d8:56:dd:18:10:
                    6c:ba:bc:80:e5:6a:8d:08:9e:3a:42:b2:e7:92:6f:
                    2c:22:1f:97:a5:91:bf:23:0f:66:4c:e4:28:83:98:
                    20:a5:cc:5b:23:c7:1f:1f:70:ed:bf:51:d8:df:98:
                    3b:65:1b:bd:11:3c:c5:6a:47:08:ca:3a:bc:5c:76:
                    df:b6:68:07:a5:a9:79:41:4b:ac:f6:33:69:fb:d9:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D6:7B:01:45:CC:39:A2:2B:05:63:9D:EB:FB:25:E0:70:B9:EF:BC
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230302e302f32322d3232203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:87:42:03:f0:c5:21:b6:d0:c8:0f:74:08:98:0b:12:4e:52:
         bc:c2:e5:a9:cf:97:4d:4e:9c:40:d7:1e:a2:43:6a:53:9a:b7:
         9f:cf:ba:23:35:33:fa:2a:6a:6f:dd:70:fb:76:b9:06:ad:64:
         7d:3f:4d:4a:46:de:96:bc:cb:f9:17:41:f9:58:e9:10:e0:d1:
         8c:40:c3:9b:90:de:c4:0d:5d:66:41:5e:17:43:c0:9d:3c:0c:
         df:b5:7f:d5:a4:e6:fe:28:da:da:ca:1e:f5:2e:fb:d5:e4:15:
         b8:b9:d5:a8:c8:33:5d:a6:5c:8c:5e:a4:29:81:a3:f7:19:de:
         0a:19:1d:fd:5d:01:89:f2:7c:ef:9c:6c:dc:c2:71:0e:b0:b2:
         ef:2d:81:4e:f6:21:10:48:37:6f:a0:c7:88:32:59:fc:35:af:
         35:c1:ef:c2:f0:c9:7b:d1:ff:78:37:66:9d:42:97:99:a9:fd:
         f7:3c:17:1d:48:3e:3b:85:b3:ad:88:10:e2:a3:7d:72:70:c4:
         8a:e5:bf:5a:fe:21:79:13:31:61:83:60:06:c0:7f:53:f9:a5:
         94:b3:65:75:b6:fe:e5:d5:0a:b3:b7:b8:a1:75:b1:56:87:93:
         bd:64:d0:86:18:4b:78:0b:3d:cf:6b:c5:10:51:2b:fc:89:9f:
         40:e7:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org