Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa
File:                     3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa (raw, json)
Hash identifier:          tgdMy9vE0V8fOL/Rmey2z9VzgBmktsgvpCzdE8kbjvA=
Subject key identifier:   2D:8C:91:8C:9C:97:AD:C6:E2:D3:96:15:78:00:AB:E7:A2:F2:D0:BB
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       788F5A27F248DF811D6BE3A9631D44C28D8D800A
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa
Signing time:             Mon 16 Oct 2023 19:00:52 +0000
ROA not before:           Mon 16 Oct 2023 18:55:52 +0000
ROA not after:            Mon 14 Oct 2024 19:00:52 +0000
asID:                     264954
IP address blocks:        168.232.200.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8f:5a:27:f2:48:df:81:1d:6b:e3:a9:63:1d:44:c2:8d:8d:80:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Oct 16 18:55:52 2023 GMT
            Not After : Oct 14 19:00:52 2024 GMT
        Subject: CN=2D8C918C9C97ADC6E2D396157800ABE7A2F2D0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:0a:8b:8f:1b:63:b4:5f:5a:e3:96:60:ce:
                    52:9f:c6:ac:2e:48:6c:ea:4f:ca:92:74:12:c1:5f:
                    a6:59:e8:df:f2:16:99:ff:97:33:0a:59:e6:da:36:
                    bf:96:3f:eb:96:64:48:bf:95:9c:ad:06:72:5c:82:
                    85:9c:07:6d:e0:3b:d3:c5:a4:27:bf:20:c2:60:2c:
                    f9:c1:43:96:83:00:a9:9b:07:9b:f9:a9:75:63:eb:
                    06:5b:2e:ca:51:f0:04:a2:33:e6:9d:d5:91:d2:0a:
                    55:81:72:12:c5:64:90:d6:75:ef:f1:99:4e:3f:25:
                    98:f7:eb:fb:17:52:86:82:13:1d:0e:06:26:3f:a8:
                    2d:86:c1:00:1d:ae:3a:e1:38:72:61:44:21:e0:14:
                    d0:a5:16:28:ca:9f:f1:d9:17:97:97:bd:4b:50:03:
                    b2:bf:a7:b3:ca:d1:e2:65:b1:d2:7f:7f:9e:f0:a2:
                    85:98:e8:e2:71:54:6e:78:24:bd:61:b8:df:09:19:
                    2c:4d:83:9c:98:e9:c0:d1:41:6e:45:61:0b:55:d6:
                    41:a0:72:d0:96:39:d0:e9:1d:17:fe:63:3c:a4:10:
                    c0:aa:71:6c:07:82:f0:93:0c:7e:25:65:8f:af:74:
                    66:fe:1b:b9:89:17:50:d5:2b:2b:1c:70:19:dc:b6:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:91:8C:9C:97:AD:C6:E2:D3:96:15:78:00:AB:E7:A2:F2:D0:BB
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:94:a8:34:16:47:cc:15:79:13:49:6e:84:a9:6c:22:9b:
         54:6f:94:58:87:69:00:e4:8c:fd:ef:8f:aa:bc:79:8b:b0:50:
         3a:84:3a:1e:ab:ff:f5:38:9a:d0:0b:04:ab:43:9b:98:f6:24:
         37:c5:02:e4:9e:42:c7:61:dc:80:f7:48:83:44:ab:67:07:a6:
         b2:eb:54:b7:74:6b:a5:85:cb:18:7e:d3:38:b2:39:12:a8:a7:
         09:c7:53:6b:e5:00:e7:d4:c5:9e:eb:aa:b5:09:eb:a3:45:54:
         a6:7f:c2:7b:f4:71:2f:a1:3a:78:6a:28:0e:64:ac:26:76:28:
         8d:c7:dd:66:a0:60:94:f6:c5:a8:8a:11:ad:a1:6d:74:b8:58:
         e4:e3:1c:d6:87:bf:a7:f5:40:06:8d:3c:c2:46:cb:69:83:de:
         65:df:af:48:e8:74:d5:d0:3a:90:46:02:ad:d9:87:af:f4:85:
         f3:56:53:c4:4b:5e:80:1d:80:07:f1:3d:b9:3a:39:0f:cf:34:
         72:78:b3:43:82:2a:06:20:54:83:9d:fc:b5:b2:c5:5c:88:7c:
         a7:87:e2:6c:e2:16:df:b8:24:60:0b:c0:17:dd:d5:f1:5e:fa:
         3d:e9:34:b0:c5:8d:ed:0a:93:0d:6d:66:27:c4:66:b6:c1:88:
         38:58:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org