Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3234203d3e20323730373538.roa
File:                     3230302e33392e3134342e302f32322d3234203d3e20323730373538.roa (raw, json)
Hash identifier:          NbSp/yHDuSBvbNiek5g993Mul33FUD4czIHX9rvWVhI=
Subject key identifier:   FE:44:9A:CD:8C:10:BB:A9:10:9F:60:15:5C:E7:D3:44:C5:4A:FA:B2
Certificate issuer:       /CN=08C92BC58BB628B33C4C78C3BA366A49ED3E10EA
Certificate serial:       664A73271CE7CE0D087D137B65A1A288CD56016A
Authority key identifier: 08:C9:2B:C5:8B:B6:28:B3:3C:4C:78:C3:BA:36:6A:49:ED:3E:10:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C92BC58BB628B33C4C78C3BA366A49ED3E10EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3234203d3e20323730373538.roa
Signing time:             Thu 02 Jun 2022 13:37:59 +0000
ROA not before:           Thu 02 Jun 2022 13:32:59 +0000
ROA not after:            Thu 01 Jun 2023 13:37:59 +0000
asID:                     270758
IP address blocks:        200.39.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4a:73:27:1c:e7:ce:0d:08:7d:13:7b:65:a1:a2:88:cd:56:01:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C92BC58BB628B33C4C78C3BA366A49ED3E10EA
        Validity
            Not Before: Jun  2 13:32:59 2022 GMT
            Not After : Jun  1 13:37:59 2023 GMT
        Subject: CN=FE449ACD8C10BBA9109F60155CE7D344C54AFAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:83:43:64:01:83:a9:ad:af:9c:a5:fb:0c:
                    83:66:20:5b:35:cf:2f:8a:54:3d:a4:d6:2d:67:be:
                    ad:bf:7b:77:65:63:18:96:b9:36:66:3f:ce:36:90:
                    2f:df:f0:a5:e6:ea:8a:fa:c0:27:35:3e:10:7c:34:
                    ab:a7:a4:75:f7:aa:a4:71:7f:52:76:3c:c4:7a:50:
                    f7:65:55:a7:eb:4d:b6:a5:6d:73:24:ab:0c:a9:df:
                    2e:bc:b0:5a:f7:4a:a7:43:5f:7b:72:86:f4:c2:52:
                    90:c5:60:3b:a6:9b:bc:a4:55:74:04:9c:96:06:2c:
                    88:dd:71:e9:06:af:43:78:b9:73:7e:a3:e3:47:60:
                    7a:37:7e:f8:f4:1c:92:f8:94:7b:b7:24:ed:6d:d2:
                    9d:e4:4e:00:a6:8c:83:45:18:9c:53:c4:5d:41:2b:
                    55:25:d6:95:29:b9:e9:8b:a9:fe:ff:c6:c2:62:be:
                    f4:fd:41:68:a5:e2:b7:5e:c3:52:9a:c3:00:82:e4:
                    78:f3:ab:52:e4:b8:3d:0c:7d:b8:e9:18:a9:a0:62:
                    d3:5a:5a:08:60:43:06:45:97:e7:92:a1:5f:db:1b:
                    43:cf:85:34:56:51:f0:b1:af:eb:11:ea:5b:ae:77:
                    14:6b:03:f4:60:db:8e:c4:5c:0e:87:d6:f9:68:83:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:44:9A:CD:8C:10:BB:A9:10:9F:60:15:5C:E7:D3:44:C5:4A:FA:B2
            X509v3 Authority Key Identifier:
                keyid:08:C9:2B:C5:8B:B6:28:B3:3C:4C:78:C3:BA:36:6A:49:ED:3E:10:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/08C92BC58BB628B33C4C78C3BA366A49ED3E10EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C92BC58BB628B33C4C78C3BA366A49ED3E10EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3234203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:9f:6a:bc:ef:aa:dd:fd:a7:48:d7:25:55:7f:21:3e:21:11:
         a7:16:64:c6:3f:fa:e3:db:e5:45:9a:e5:13:44:02:57:2b:8c:
         a7:2e:af:54:15:a4:9f:7d:61:e7:fa:62:02:88:c6:b2:bc:8a:
         61:11:9f:b0:76:68:22:0d:3a:11:67:df:1a:ac:ea:3d:a6:fd:
         f8:fe:81:94:ea:0e:9f:a3:f3:ac:83:f1:41:5f:ee:d0:e8:fb:
         d9:f7:ed:f5:c5:9c:d2:09:6c:2a:31:41:c4:7a:ef:19:dc:61:
         d0:3f:8d:62:19:88:02:87:01:a4:ca:5d:7c:f5:19:f0:ed:85:
         df:1e:62:6e:d9:8b:d7:31:e1:1a:ae:96:ab:17:58:f3:45:d6:
         dd:73:43:84:f7:2b:ed:cc:20:4c:20:af:dd:05:5d:07:60:cf:
         a4:42:94:c6:bb:79:98:a5:b7:0e:ae:c5:be:ac:2b:94:28:5b:
         ae:c8:58:ac:3f:9d:1f:fa:48:04:00:59:74:4f:00:dc:ed:0e:
         a7:d4:74:5c:05:da:aa:d6:98:75:25:5f:c8:f9:53:f3:17:42:
         dd:46:3c:a5:a3:e0:6b:5f:d4:2d:13:31:6e:4c:e5:66:3d:62:
         ca:e7:72:54:2d:1f:f4:07:cc:c2:cc:eb:57:41:5b:70:eb:51:
         48:23:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org