Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/3230302e31332e38362e302f32342d3234203d3e20323730343430.roa
File:                     3230302e31332e38362e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier:          IQE3CkhndANRxjyo5ztyeJd9AlWmQ0MmyC5VseDWp5U=
Subject key identifier:   FF:95:9E:AD:9D:51:EB:0B:B7:27:46:E2:19:5F:DC:3F:D6:78:55:9D
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       1C4D95FC38D4080844E407F56C15E553D1D619D4
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/3230302e31332e38362e302f32342d3234203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:29:30 +0000
ROA not before:           Tue 23 Apr 2024 13:24:30 +0000
ROA not after:            Tue 22 Apr 2025 13:29:30 +0000
asID:                     270440
IP address blocks:        200.13.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4d:95:fc:38:d4:08:08:44:e4:07:f5:6c:15:e5:53:d1:d6:19:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:24:30 2024 GMT
            Not After : Apr 22 13:29:30 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:f4:7e:09:80:9f:3e:e5:5a:be:7c:8c:f8:
                    25:b9:85:59:f7:4a:ae:2d:db:b7:0f:d4:9e:df:2f:
                    82:1d:49:85:ee:43:ac:bb:b3:95:24:7f:e8:b3:bc:
                    f3:1d:59:5e:36:a0:16:26:4c:e8:12:80:03:dd:bb:
                    69:f7:7b:ce:76:55:20:2e:e5:3e:25:01:3b:ef:fe:
                    ac:3f:6b:55:b1:2c:bd:f2:58:95:7e:25:43:49:b2:
                    04:d3:64:b5:0a:67:d0:41:14:e6:25:3a:6d:a6:01:
                    15:de:61:00:6c:7b:21:ba:59:a8:b5:e4:61:94:8c:
                    fb:ca:ec:07:9c:93:2a:33:0d:b9:84:50:df:54:74:
                    30:47:9a:a5:a5:48:27:43:f5:4c:10:a7:7f:70:af:
                    27:b5:97:67:7b:d3:b1:3b:d1:4f:54:cb:d1:3b:9b:
                    ba:02:52:f8:9c:46:78:ee:a4:e3:19:e1:bf:df:39:
                    98:e4:33:b6:39:ee:f3:ce:c1:03:50:6a:9d:c7:68:
                    55:e7:81:85:02:8b:a6:e2:8b:3b:89:3e:74:d6:73:
                    3a:f7:27:09:9e:65:4b:62:f6:8b:bf:d6:a1:0f:6a:
                    e2:4b:cd:8e:98:c9:ab:2c:52:d3:2f:c9:ec:fc:ee:
                    dc:60:ba:84:a2:3c:9f:c3:61:72:d4:41:04:41:27:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:9E:AD:9D:51:EB:0B:B7:27:46:E2:19:5F:DC:3F:D6:78:55:9D
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/3230302e31332e38362e302f32342d3234203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:4b:b6:ad:e2:67:f2:ca:6e:96:30:f9:fd:c7:d6:82:0c:b6:
         18:21:9c:88:25:a0:64:0c:6e:9c:a8:0f:8c:17:a6:6f:12:b0:
         79:be:80:1e:87:3e:85:df:ac:43:3b:5d:74:1c:a8:f8:ec:97:
         1b:72:d9:ba:57:81:8f:b7:10:26:ad:e0:49:de:4c:1a:fd:61:
         f6:49:3d:0c:81:87:53:f9:74:d3:b1:37:3e:ea:31:8a:7e:05:
         b2:87:54:dc:c4:21:8e:38:17:01:60:16:8e:6a:7d:f1:31:59:
         fe:ca:96:7c:e0:4f:8c:9f:b2:13:e1:cf:13:30:91:19:44:97:
         29:b0:22:c2:96:25:6e:70:73:f7:fa:ac:d0:29:81:ee:75:ab:
         5c:89:3c:e7:e8:53:70:20:60:a3:bc:f7:fa:f6:73:93:92:4e:
         0b:33:c4:c7:91:8c:14:b2:c3:e9:d9:f9:ad:e5:7f:7e:f5:09:
         05:5c:c4:7f:0b:07:bd:d1:4c:2b:bc:ae:7d:ed:8b:1f:22:5e:
         8a:77:32:22:81:f7:e8:1d:60:27:13:b4:71:d8:a4:98:3b:5e:
         6d:ce:69:f0:a1:ff:ab:62:d6:9e:b5:32:da:ef:d0:d4:6a:e3:
         58:78:05:b6:47:4e:ac:ab:18:8b:e1:d2:e7:10:8c:e6:4a:45:
         cb:41:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org