Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230302e302f32332d3233203d3e20323634393534.roa
File:                     3136382e3233322e3230302e302f32332d3233203d3e20323634393534.roa (raw, json)
Hash identifier:          8jYdE9AStAmgFIHzZsB3utbm/AUOkjTq8LI2R+QM2Vo=
Subject key identifier:   D3:89:77:AC:1B:FA:A5:86:D1:C2:6E:7B:AF:A8:DB:AC:BB:41:9E:0B
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       64A32137F16AEC92DB0E5E19BB2CB0EFDB605D48
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230302e302f32332d3233203d3e20323634393534.roa
Signing time:             Tue 26 Sep 2023 20:01:48 +0000
ROA not before:           Tue 26 Sep 2023 19:56:48 +0000
ROA not after:            Tue 24 Sep 2024 20:01:48 +0000
asID:                     264954
IP address blocks:        168.232.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a3:21:37:f1:6a:ec:92:db:0e:5e:19:bb:2c:b0:ef:db:60:5d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Sep 26 19:56:48 2023 GMT
            Not After : Sep 24 20:01:48 2024 GMT
        Subject: CN=D38977AC1BFAA586D1C26E7BAFA8DBACBB419E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:f0:60:8d:09:06:fc:49:25:dd:d4:17:68:
                    5b:cd:9b:8f:e8:e6:8f:6e:39:e9:72:6e:6a:1e:80:
                    72:0b:a8:bd:c4:4e:35:90:28:6d:ac:f3:b9:48:60:
                    32:ac:dd:68:a4:af:30:c4:f4:40:92:71:ca:5c:00:
                    5c:d5:9e:71:4f:4d:e3:95:8c:d7:b9:2c:d0:9f:40:
                    a5:03:f5:d5:f2:7d:9d:90:88:cf:32:4d:cd:e8:ce:
                    99:86:44:65:58:fe:bf:2b:42:83:d3:12:64:db:91:
                    ba:43:b5:cd:55:7d:fe:f4:d3:e7:92:90:45:00:d3:
                    4f:20:06:f4:e3:4d:0b:33:a6:94:40:26:61:63:48:
                    56:fe:6c:70:0b:cc:d1:66:17:07:58:68:68:ef:78:
                    af:9e:25:0a:80:cb:ac:24:09:4b:aa:12:f9:4c:bb:
                    3d:7e:53:ff:d6:ea:2c:b7:be:3e:34:65:17:03:df:
                    44:40:00:d2:df:dd:87:34:74:dd:c7:05:4a:3a:e7:
                    cd:3e:89:0e:42:da:89:de:50:0b:26:7c:e7:63:5d:
                    65:fd:c1:a8:30:51:97:d1:7d:06:ad:9b:e1:8a:45:
                    1d:85:d2:69:eb:e7:5e:dd:ae:a4:7d:88:08:73:14:
                    c9:13:41:3b:05:7b:31:dc:78:68:8d:a0:87:d8:a2:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:89:77:AC:1B:FA:A5:86:D1:C2:6E:7B:AF:A8:DB:AC:BB:41:9E:0B
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/3136382e3233322e3230302e302f32332d3233203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:95:98:73:47:84:c8:5e:c3:94:a8:a8:7c:19:ee:20:c3:a3:
         3a:01:9d:ff:47:44:e7:a9:d7:7f:b8:da:fb:a7:9a:37:55:f7:
         5b:0d:16:cb:ec:77:6c:d8:7f:a8:be:e7:c5:52:be:66:74:e7:
         fd:7f:30:d7:13:39:8a:69:2b:08:08:96:60:da:60:5d:ca:c9:
         d0:27:a2:71:fc:59:17:25:5f:47:0f:5c:7b:5e:ef:47:81:0a:
         09:9f:ad:1b:bd:a0:1b:0e:65:ff:1b:7b:6f:12:4c:95:65:8d:
         7c:d1:0a:06:15:51:c6:80:fb:00:af:8c:ad:29:38:63:45:9c:
         34:14:a1:6b:6f:80:26:d1:25:12:f6:37:d3:8a:2a:55:22:b4:
         14:db:1d:7d:59:11:23:f4:0a:62:93:f6:03:62:3a:c0:97:5a:
         49:23:66:6b:ef:a7:e7:a6:fd:d3:74:6a:5c:7e:59:60:be:20:
         68:83:c3:ba:9a:10:9b:11:93:08:50:04:ff:fe:57:69:89:92:
         1b:cf:6f:17:db:72:52:d7:15:4c:e8:76:6d:14:d0:26:88:13:
         57:fc:f0:02:87:20:8f:bc:74:d9:06:6a:d9:89:4f:2a:ad:39:
         72:3a:13:43:53:ea:f8:99:57:4f:1d:a0:f3:29:8b:fa:ef:21:
         e1:3b:e5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org