Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa
File:                     3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          FOrL/wWIjh5ofkteOGUblRHep1B6xp5r/1yd7LTmkv0=
Subject key identifier:   58:C8:C7:4E:1F:6F:37:78:29:38:32:9F:0F:02:E8:54:D2:03:DA:0E
Certificate issuer:       /CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
Certificate serial:       1FA42E69C726109AF1DA4D939B99C707A701C36A
Authority key identifier: CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa
Signing time:             Wed 03 Apr 2024 18:31:40 +0000
ROA not before:           Wed 03 Apr 2024 18:26:40 +0000
ROA not after:            Wed 02 Apr 2025 18:31:40 +0000
asID:                     22356
IP address blocks:        200.160.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a4:2e:69:c7:26:10:9a:f1:da:4d:93:9b:99:c7:07:a7:01:c3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
        Validity
            Not Before: Apr  3 18:26:40 2024 GMT
            Not After : Apr  2 18:31:40 2025 GMT
        Subject: CN=58C8C74E1F6F37782938329F0F02E854D203DA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:24:60:77:90:13:83:ac:9d:e3:d5:f4:22:
                    b2:0c:57:8d:1b:7b:3f:1c:ff:e3:5e:02:87:6b:79:
                    d7:c0:89:a1:3f:c9:a4:cd:1a:67:4b:b2:7d:9f:b1:
                    0a:32:4b:9e:ea:8c:48:8a:50:a2:5c:8d:4b:df:52:
                    36:4a:6f:84:d2:bb:7f:c9:f1:4b:2c:10:fd:38:0c:
                    f0:cf:cd:a3:20:94:f6:01:49:6e:aa:24:86:0e:8c:
                    7f:af:ef:46:1a:84:52:d1:95:fd:ce:28:99:47:02:
                    6c:05:48:c1:df:23:81:91:35:16:2d:da:a6:98:77:
                    06:04:fe:c1:54:5e:24:6e:e1:cd:ef:f4:dd:58:9d:
                    7a:27:8b:5d:bf:86:db:4a:02:1f:52:09:91:10:7f:
                    2b:f2:67:a6:b9:aa:8d:e3:e1:0d:01:c9:c4:78:4f:
                    7d:7d:be:eb:f0:4a:81:b8:42:9b:b1:2d:11:52:e7:
                    96:3a:a4:60:c0:0c:0d:4e:d9:1c:66:a2:45:fa:3e:
                    ec:25:b0:06:1f:7b:a7:5b:2b:3b:56:e1:d8:fd:6b:
                    3c:72:ca:d5:35:74:05:e1:c1:e4:09:b2:3f:f7:2c:
                    08:88:aa:62:fd:c7:36:55:10:ea:41:72:b8:ac:6f:
                    0f:90:f0:5f:13:9d:eb:ec:03:74:fc:29:46:99:5f:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C8:C7:4E:1F:6F:37:78:29:38:32:9F:0F:02:E8:54:D2:03:DA:0E
            X509v3 Authority Key Identifier:
                keyid:CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:3f:bb:c1:6f:57:aa:e3:c7:54:ef:7c:44:34:cd:8e:fb:af:
         21:43:42:1f:1a:f6:7b:f1:8b:b7:d1:54:64:ab:17:06:bf:1f:
         48:24:c5:41:ad:fd:f0:a0:4c:6e:09:89:e7:01:a4:92:51:ae:
         ff:55:ca:f4:4c:3a:79:42:89:b0:75:57:80:eb:56:e0:a8:b6:
         1c:93:12:fc:ae:02:d7:04:50:8e:c4:de:f7:fd:d0:1c:8d:f2:
         89:b0:11:7b:c3:4f:0d:c6:91:0a:33:7c:78:72:34:33:f9:ac:
         44:7d:3f:76:d8:b7:1b:8c:f2:38:10:48:cb:30:00:56:ac:b9:
         1c:80:74:81:a9:de:7e:20:c4:c9:b1:28:a4:02:ee:a4:47:c2:
         74:10:a9:07:51:08:41:e6:5f:4d:ce:40:a7:70:dc:a0:67:bb:
         4d:0b:0f:a3:20:19:f5:d8:35:73:0b:08:71:b7:7e:5f:7f:60:
         c8:0b:ad:8e:34:c8:a2:e2:8b:00:11:a5:74:e1:a2:fc:12:6b:
         69:65:92:41:82:2f:67:23:72:e1:5c:70:1c:a2:6a:e7:f1:08:
         9b:38:74:42:18:5d:74:b8:96:e9:f1:4f:70:68:62:16:0a:bd:
         bd:ed:79:88:8f:4c:55:1d:e1:94:a7:b3:a7:46:db:10:55:33:
         21:ce:9a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:30:38 2024 by rpki-client on console-fra.rpki-client.org