Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e2031323339.roa
File:                     3230302e3232302e3136302e302f32322d3232203d3e2031323339.roa (raw, json)
Hash identifier:          li9t+ZQdyWWw0Gt3ABhvThgN7s4zw2ViRYcA/X/qmrY=
Subject key identifier:   17:63:0C:F0:5A:D4:77:05:79:04:62:04:3D:73:67:30:09:9B:18:3C
Certificate issuer:       /CN=09DB4A19059937507E1D222CDD031D6B802062DC
Certificate serial:       0D3FCE2118EB902B35EA0BDAB1122BA52C5494E8
Authority key identifier: 09:DB:4A:19:05:99:37:50:7E:1D:22:2C:DD:03:1D:6B:80:20:62:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09DB4A19059937507E1D222CDD031D6B802062DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e2031323339.roa
Signing time:             Sat 19 Jun 2021 21:23:08 +0000
ROA not before:           Sat 19 Jun 2021 21:18:08 +0000
ROA not after:            Sat 18 Jun 2022 21:23:08 +0000
asID:                     1239
IP address blocks:        200.220.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3f:ce:21:18:eb:90:2b:35:ea:0b:da:b1:12:2b:a5:2c:54:94:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09DB4A19059937507E1D222CDD031D6B802062DC
        Validity
            Not Before: Jun 19 21:18:08 2021 GMT
            Not After : Jun 18 21:23:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:3d:0f:bf:f3:23:72:f6:bc:8d:fb:b2:a5:
                    33:82:88:a1:9c:9c:f2:93:e9:43:c0:fd:63:a7:dc:
                    e5:4c:28:00:0f:9e:d1:7e:59:98:be:f2:b3:d1:a8:
                    31:24:b6:d9:70:53:db:32:4e:79:f6:2e:8b:65:ee:
                    bc:34:5a:a8:d9:bd:ce:b7:3a:c5:4e:37:e3:34:c4:
                    42:4e:d8:b5:52:a8:c6:ab:19:cd:99:64:fd:e9:31:
                    d8:f1:14:b9:56:e2:74:1a:fb:94:09:9c:7e:a8:bf:
                    3a:7a:38:55:1b:c4:b2:4c:43:fc:b5:8a:0e:7b:2c:
                    49:86:98:5d:c5:26:9e:cf:69:47:72:7e:f0:3a:3a:
                    d1:03:0a:ce:50:c5:e7:58:00:87:ae:38:31:ed:c4:
                    ab:b9:ba:23:bb:ad:1e:c9:13:6e:3d:4f:76:03:b6:
                    6c:42:30:7f:e1:12:46:40:5e:3a:42:b1:fc:72:cc:
                    0b:90:c4:15:d3:d8:eb:70:c0:71:35:00:cb:9f:f6:
                    52:3f:b4:46:0a:ad:91:be:7c:fc:d2:72:31:b2:99:
                    76:9d:1d:be:42:69:ef:af:0b:df:12:df:92:33:6b:
                    fe:76:2d:92:c4:b1:5b:02:4a:a2:0c:be:6c:e3:5b:
                    99:e8:da:2a:ce:1a:00:24:c7:e8:5e:9a:6e:46:6f:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:63:0C:F0:5A:D4:77:05:79:04:62:04:3D:73:67:30:09:9B:18:3C
            X509v3 Authority Key Identifier:
                keyid:09:DB:4A:19:05:99:37:50:7E:1D:22:2C:DD:03:1D:6B:80:20:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/09DB4A19059937507E1D222CDD031D6B802062DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09DB4A19059937507E1D222CDD031D6B802062DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:80:31:63:6b:34:eb:a1:22:ef:82:1c:f9:81:66:dc:da:48:
         1f:74:56:71:d3:8d:be:1f:3e:77:71:63:a6:53:d8:3f:b1:9b:
         c4:7e:7f:ce:37:c8:6b:ed:a6:ee:98:1f:52:2e:c6:ba:05:ef:
         d8:5d:a8:35:a9:9b:9e:99:d7:e2:39:f9:c3:87:06:05:ea:31:
         6b:a2:3c:dd:c9:27:0a:47:0f:94:68:30:8f:a7:2a:a4:77:fc:
         81:bd:52:27:53:58:a4:ba:88:3e:3b:82:ab:46:a5:50:7e:cb:
         7e:64:af:47:9a:26:1f:26:49:1d:66:14:e4:ea:f4:cc:e0:67:
         9c:9d:a5:18:8f:8b:c3:bd:bd:86:3c:3b:ad:dd:3a:4e:db:bf:
         85:11:a3:4a:91:34:2f:e4:7c:fc:22:7a:21:4b:80:fe:4a:20:
         6c:22:e8:36:e2:8c:75:ca:2a:fa:72:e5:8a:47:44:a7:3b:10:
         54:8f:2b:83:3b:a8:ea:87:fa:b6:82:03:ca:c9:be:9e:e3:55:
         c4:9c:aa:59:12:6a:23:d4:d2:14:eb:2d:2d:9c:06:ad:7a:04:
         65:97:5f:dc:24:a4:82:2f:1a:71:4e:25:c2:ca:5b:6b:bd:e0:
         ab:05:2b:16:62:05:26:cf:42:d7:cd:52:39:c3:80:31:7d:38:
         4d:bf:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org