Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136342e302f32322d3232203d3e2031323339.roa
File:                     3230302e3232302e3136342e302f32322d3232203d3e2031323339.roa (raw, json)
Hash identifier:          Xf3Eiw/UcC/hwmI1s1OVMaNlSchGXllZq1HBMHIiPFs=
Subject key identifier:   46:71:B7:7C:B1:46:4E:EE:38:86:86:33:AA:E5:BF:1B:4F:B5:0B:BE
Certificate issuer:       /CN=09DB4A19059937507E1D222CDD031D6B802062DC
Certificate serial:       7FC11A4037516CAA1D6099680C7C5AE12923DAFA
Authority key identifier: 09:DB:4A:19:05:99:37:50:7E:1D:22:2C:DD:03:1D:6B:80:20:62:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09DB4A19059937507E1D222CDD031D6B802062DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136342e302f32322d3232203d3e2031323339.roa
Signing time:             Sat 21 May 2022 22:00:00 +0000
ROA not before:           Sat 21 May 2022 21:55:00 +0000
ROA not after:            Sat 20 May 2023 22:00:00 +0000
asID:                     1239
IP address blocks:        200.220.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c1:1a:40:37:51:6c:aa:1d:60:99:68:0c:7c:5a:e1:29:23:da:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09DB4A19059937507E1D222CDD031D6B802062DC
        Validity
            Not Before: May 21 21:55:00 2022 GMT
            Not After : May 20 22:00:00 2023 GMT
        Subject: CN=3082010A0282010100F379E1A7DCA23CABC57F08E3CF0AE78FE771F2015A5EF0F7794AC568580A7750F2249D3813B0C83C85E472102EFF703993BC17B27861F24E37BA809E4B05D87E7AA5B6D1B614DBEC98FFFA288188CFB0A7B8F2653C019111F563028186CAF8B5E163274AAEB87277C6FEA610299E1DB94D1A0275AC415C6985089F0F9350CFEBC362C4A03D147B249F9E8EA5394F3121F521ADB7F547ECF4F1CAA09A6C05B33015A4543C3AAD21150C0554525B7120B4589A98FC47C96896C6B14A1161ED707195F0E55EDE8FD76E9D6309DF75BC1CFC9D636DAFBFEF1D3C392A12D329A4A4F33AAA0DC978D4343AF82BEBB60188B2B882EB316FA4942FAB063A468AB38EE1370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:79:e1:a7:dc:a2:3c:ab:c5:7f:08:e3:cf:0a:
                    e7:8f:e7:71:f2:01:5a:5e:f0:f7:79:4a:c5:68:58:
                    0a:77:50:f2:24:9d:38:13:b0:c8:3c:85:e4:72:10:
                    2e:ff:70:39:93:bc:17:b2:78:61:f2:4e:37:ba:80:
                    9e:4b:05:d8:7e:7a:a5:b6:d1:b6:14:db:ec:98:ff:
                    fa:28:81:88:cf:b0:a7:b8:f2:65:3c:01:91:11:f5:
                    63:02:81:86:ca:f8:b5:e1:63:27:4a:ae:b8:72:77:
                    c6:fe:a6:10:29:9e:1d:b9:4d:1a:02:75:ac:41:5c:
                    69:85:08:9f:0f:93:50:cf:eb:c3:62:c4:a0:3d:14:
                    7b:24:9f:9e:8e:a5:39:4f:31:21:f5:21:ad:b7:f5:
                    47:ec:f4:f1:ca:a0:9a:6c:05:b3:30:15:a4:54:3c:
                    3a:ad:21:15:0c:05:54:52:5b:71:20:b4:58:9a:98:
                    fc:47:c9:68:96:c6:b1:4a:11:61:ed:70:71:95:f0:
                    e5:5e:de:8f:d7:6e:9d:63:09:df:75:bc:1c:fc:9d:
                    63:6d:af:bf:ef:1d:3c:39:2a:12:d3:29:a4:a4:f3:
                    3a:aa:0d:c9:78:d4:34:3a:f8:2b:eb:b6:01:88:b2:
                    b8:82:eb:31:6f:a4:94:2f:ab:06:3a:46:8a:b3:8e:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:71:B7:7C:B1:46:4E:EE:38:86:86:33:AA:E5:BF:1B:4F:B5:0B:BE
            X509v3 Authority Key Identifier:
                keyid:09:DB:4A:19:05:99:37:50:7E:1D:22:2C:DD:03:1D:6B:80:20:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/09DB4A19059937507E1D222CDD031D6B802062DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09DB4A19059937507E1D222CDD031D6B802062DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136342e302f32322d3232203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:ec:c7:78:c9:a8:e8:e4:59:f7:c2:64:a7:0d:63:09:60:
         ef:ef:7c:d7:f0:2a:0d:5d:6e:11:68:1a:db:75:c8:bc:65:fc:
         d2:64:cf:92:46:58:da:0b:80:ca:e8:9e:c6:34:ca:22:bb:52:
         8d:5c:60:5f:d5:c2:c4:7b:0e:7f:72:03:00:1e:f8:5f:52:ad:
         39:f2:54:4c:8e:36:85:4e:17:59:1d:c4:fc:b8:ac:33:57:12:
         c4:54:90:55:d2:33:5e:6a:e9:ad:b2:0d:ea:31:bb:bc:3e:c0:
         a6:af:26:f5:c4:24:72:e1:eb:18:99:d8:9c:04:8e:ae:1a:a5:
         e3:45:56:8a:73:7d:f2:67:0c:c2:7b:05:a6:9a:3a:8f:04:3e:
         98:4b:44:9e:39:2d:fd:84:a5:ea:f7:18:66:5f:d0:cc:e5:02:
         de:80:14:f1:72:29:54:3e:14:d8:45:f9:6e:e5:01:d4:a9:6d:
         78:55:36:a9:fe:5b:4f:08:3c:4c:75:5c:a2:02:1e:b9:e4:21:
         1b:e8:51:a4:25:de:4d:8a:bd:c9:0d:5f:92:3d:b1:5d:d0:c6:
         24:60:12:d6:46:8f:7f:25:75:41:61:d8:0f:09:89:e7:79:7e:
         b8:0a:ef:8e:eb:fe:e5:e0:81:01:7e:f2:20:e3:86:f4:9b:8f:
         4a:68:4b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org