Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/3230302e33392e3135302e302f32332d3234203d3e20323730373836.roa
File:                     3230302e33392e3135302e302f32332d3234203d3e20323730373836.roa (raw, json)
Hash identifier:          081ltWWbhURhz+gnQRVClGYBPwYTx/yjzb2Bd9Mtwek=
Subject key identifier:   BA:44:55:97:F8:C8:85:14:C6:A6:0F:78:19:B7:A4:DA:2C:EB:40:31
Certificate issuer:       /CN=A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1
Certificate serial:       33CE1888DA8F11241563A03C7270BD7B2FC76509
Authority key identifier: A9:B3:62:39:9E:C0:C7:60:B9:B9:D2:F3:CE:7F:93:D2:46:94:DB:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/3230302e33392e3135302e302f32332d3234203d3e20323730373836.roa
Signing time:             Mon 20 Nov 2023 14:27:52 +0000
ROA not before:           Mon 20 Nov 2023 14:22:52 +0000
ROA not after:            Mon 18 Nov 2024 14:27:52 +0000
asID:                     270786
IP address blocks:        200.39.150.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ce:18:88:da:8f:11:24:15:63:a0:3c:72:70:bd:7b:2f:c7:65:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1
        Validity
            Not Before: Nov 20 14:22:52 2023 GMT
            Not After : Nov 18 14:27:52 2024 GMT
        Subject: CN=BA445597F8C88514C6A60F7819B7A4DA2CEB4031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:91:a0:9c:81:0f:42:86:91:a7:ef:2a:93:
                    62:5a:ea:43:c8:24:ea:22:90:22:31:28:63:05:7f:
                    00:ac:55:5b:d1:02:fa:a0:d9:d6:a4:2d:4a:42:e0:
                    6d:b3:ea:f1:1a:02:a5:8d:a8:c8:25:83:83:e3:71:
                    98:71:d6:02:78:e8:87:32:91:8e:2e:b9:c0:13:ae:
                    90:44:dc:d7:c4:3d:e4:60:05:42:71:9f:7b:32:12:
                    7d:09:c2:5a:91:6c:83:00:c7:18:6d:3d:56:f0:90:
                    9a:2e:53:b8:42:df:2c:98:3b:74:4a:94:c5:1f:a4:
                    a3:6a:bc:9b:c7:da:62:35:98:d4:d5:2a:a7:2f:2f:
                    bb:6d:ec:3e:ca:e6:1b:cd:31:93:38:ec:0e:c7:d8:
                    a4:d8:36:29:53:a9:b1:9e:2b:bb:c4:33:9f:9b:5d:
                    e1:94:a1:98:72:b4:59:57:b3:80:c4:ba:03:f5:52:
                    85:38:30:ec:e6:b1:79:b5:6d:42:5a:28:6a:ad:98:
                    a4:6d:d1:62:59:f3:73:b1:0e:67:27:42:75:9d:82:
                    02:6d:94:7d:86:64:9a:b8:1c:6b:a6:e4:92:78:38:
                    ca:dc:24:a8:0a:7a:6e:87:b8:1b:cf:91:1f:c4:05:
                    57:4c:cf:f4:4b:24:c1:18:bc:b3:18:ee:86:45:76:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:44:55:97:F8:C8:85:14:C6:A6:0F:78:19:B7:A4:DA:2C:EB:40:31
            X509v3 Authority Key Identifier:
                keyid:A9:B3:62:39:9E:C0:C7:60:B9:B9:D2:F3:CE:7F:93:D2:46:94:DB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/3230302e33392e3135302e302f32332d3234203d3e20323730373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:80:0c:80:96:2c:45:f4:86:e4:40:de:39:e5:57:dd:28:
         12:0e:c1:ce:9f:9a:a3:1d:09:fd:0f:4a:4e:ee:7e:8b:da:98:
         ec:72:b5:67:56:90:d6:c2:92:da:23:59:ed:0b:6d:30:1a:6a:
         ad:5f:cd:dc:77:3f:0b:58:0f:30:f3:61:b4:d0:11:f7:11:37:
         6e:66:70:9c:aa:c1:f9:26:9d:90:8e:96:56:b5:3b:5a:2e:f6:
         db:a3:ec:d4:38:85:03:59:91:b8:bb:c2:f7:c4:38:aa:6d:52:
         ae:98:62:4e:4f:16:67:8e:ea:13:6f:fb:e1:1c:fa:83:48:c7:
         0d:2f:5b:6d:e3:a8:3f:fc:8b:b0:36:b1:b2:46:93:31:25:26:
         c6:9a:ca:98:6d:c4:22:86:59:fb:4f:4e:27:de:88:b3:8c:0f:
         91:19:a3:67:15:dd:3b:ae:11:26:9e:c1:cc:d5:62:a3:74:58:
         24:69:b6:8b:d1:85:6e:a3:b0:81:c8:30:3e:5f:8a:ed:a9:d8:
         7f:9c:b4:53:81:53:b7:37:4a:9d:56:db:1d:90:58:03:cc:ec:
         de:9e:45:09:c4:2f:ac:11:d9:e3:5d:94:e9:c2:5b:a6:6b:59:
         7c:7d:a1:c2:0e:4e:66:5c:25:15:e6:67:63:a8:84:6a:ab:7d:
         64:1e:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org