Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3137322e302f32332d3233203d3e203631333137.roa
File:                     3230302e3232302e3137322e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          fH+HNWZ5Khjz9ut/YVsb+i9iZTZycIBrT4qfpM1Oi3U=
Subject key identifier:   39:B2:12:92:A4:16:6A:E0:35:D3:7E:33:D9:3D:3D:FF:0D:D5:48:0D
Certificate issuer:       /CN=09DB4A19059937507E1D222CDD031D6B802062DC
Certificate serial:       48BECF88422930A6BF047C5B0DB51A784E648863
Authority key identifier: 09:DB:4A:19:05:99:37:50:7E:1D:22:2C:DD:03:1D:6B:80:20:62:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09DB4A19059937507E1D222CDD031D6B802062DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3137322e302f32332d3233203d3e203631333137.roa
Signing time:             Sat 21 May 2022 22:00:00 +0000
ROA not before:           Sat 21 May 2022 21:55:00 +0000
ROA not after:            Sat 20 May 2023 22:00:00 +0000
asID:                     61317
IP address blocks:        200.220.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:be:cf:88:42:29:30:a6:bf:04:7c:5b:0d:b5:1a:78:4e:64:88:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09DB4A19059937507E1D222CDD031D6B802062DC
        Validity
            Not Before: May 21 21:55:00 2022 GMT
            Not After : May 20 22:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8a:d0:cd:ca:64:64:b3:2c:98:a1:55:76:99:
                    3b:73:db:d9:be:e2:6c:2f:8f:37:16:fb:09:88:a8:
                    8c:43:6d:c7:12:48:37:4b:03:5d:c5:18:fe:71:db:
                    be:80:6f:55:ea:84:56:24:c2:f7:a4:e5:7d:46:01:
                    2a:6c:4f:24:56:fc:2c:b7:bc:17:8c:50:09:c4:74:
                    cb:d1:3c:db:97:82:06:cc:93:2a:91:7f:27:eb:2d:
                    f1:b7:d7:ec:ba:db:56:c8:32:d7:fc:4e:45:62:66:
                    2b:d9:22:bc:52:d3:6e:b7:65:4f:e9:09:b4:2d:c7:
                    fa:5d:09:b0:39:c2:e7:43:c3:a2:19:63:a6:20:2e:
                    85:87:28:a9:ae:dc:47:e6:5d:d8:bd:9b:b7:d5:f0:
                    1a:a8:87:3d:4c:ae:08:85:7e:03:6f:4c:32:e2:e9:
                    a5:0e:31:01:b8:09:d1:c3:51:87:15:ed:17:fb:7b:
                    49:b2:51:bb:1c:53:9c:9a:4b:77:ee:05:c0:75:96:
                    19:fa:2b:16:84:01:f8:cc:84:8f:fb:37:e6:17:41:
                    1f:fc:64:b1:d7:c2:c1:e9:50:58:9a:f8:ad:d9:93:
                    d4:08:2a:5a:38:dc:2c:9e:18:26:e0:68:6e:b2:e6:
                    2b:9e:ba:8f:6d:c7:69:c6:56:55:93:1a:56:44:f2:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B2:12:92:A4:16:6A:E0:35:D3:7E:33:D9:3D:3D:FF:0D:D5:48:0D
            X509v3 Authority Key Identifier:
                keyid:09:DB:4A:19:05:99:37:50:7E:1D:22:2C:DD:03:1D:6B:80:20:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/09DB4A19059937507E1D222CDD031D6B802062DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09DB4A19059937507E1D222CDD031D6B802062DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3137322e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:6c:51:00:4a:ef:94:b8:5d:ef:5a:99:d5:3a:4a:bf:8f:a5:
         2e:29:e6:1b:02:cc:e6:0c:05:3b:95:6a:ed:5e:63:49:c6:10:
         a6:d3:8a:8c:f0:f5:a9:b3:96:c6:2a:1d:c0:cd:b9:83:1d:0e:
         d6:a1:e5:ea:10:fa:d3:20:d8:fe:02:3f:39:83:db:ce:7e:37:
         2c:d4:f9:11:a5:03:1b:f3:97:0f:da:d6:25:85:3e:ee:97:b0:
         0b:15:de:57:d4:1c:1c:91:7a:82:5e:fb:8a:cd:c7:19:a0:dc:
         29:1b:66:b0:a9:89:b6:df:36:6e:76:9d:9b:e7:ad:46:0d:24:
         ec:d7:b4:fd:b6:6e:87:56:bb:89:ac:a9:99:8d:d5:8e:04:68:
         60:ee:a1:f9:9b:1a:59:8d:86:87:f0:63:17:35:45:97:d5:3b:
         c4:3c:74:0b:35:3a:36:09:aa:16:2e:fa:4b:91:8f:93:76:c1:
         d0:17:ee:23:e0:ee:73:39:cf:c6:bf:56:8f:06:dd:b0:e2:1b:
         26:a5:b3:25:12:b6:87:c0:12:db:2a:0c:44:ef:53:44:6a:f4:
         9b:60:d7:93:b3:e5:a1:26:f8:e9:ef:68:eb:af:c7:49:ed:dc:
         d5:e1:f0:86:68:00:a1:13:29:38:a7:fd:74:55:14:bf:50:f9:
         d3:2b:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org