Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233342e302f32332d3233203d3e20323730323838.roa
File:                     3230302e3132332e3233342e302f32332d3233203d3e20323730323838.roa (raw, json)
Hash identifier:          joa/EBKmS0+Ce/fOj11iltLSEnhzL2/DUoAlUj3w9FY=
Subject key identifier:   E0:2D:C3:1B:FA:90:8C:D8:A5:2E:26:B4:73:F0:5F:FC:94:2F:AC:6B
Certificate issuer:       /CN=3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72
Certificate serial:       4BE1341BB201345B42DCEFEFD9226C1ABE0729BC
Authority key identifier: 3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233342e302f32332d3233203d3e20323730323838.roa
Signing time:             Thu 12 Oct 2023 19:36:00 +0000
ROA not before:           Thu 12 Oct 2023 19:31:00 +0000
ROA not after:            Thu 10 Oct 2024 19:36:00 +0000
asID:                     270288
IP address blocks:        200.123.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e1:34:1b:b2:01:34:5b:42:dc:ef:ef:d9:22:6c:1a:be:07:29:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72
        Validity
            Not Before: Oct 12 19:31:00 2023 GMT
            Not After : Oct 10 19:36:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:ec:a8:8d:09:ca:ae:0b:cb:07:d2:ae:8a:
                    b5:a4:c6:1d:7a:fa:19:33:c9:31:8d:14:21:75:53:
                    f5:8d:34:dc:96:77:6a:c8:49:a4:0d:47:85:72:63:
                    1d:67:e5:36:d6:cc:fd:fb:cf:fd:c0:85:c4:37:a6:
                    1b:bd:b2:e4:a1:6c:01:06:00:75:92:72:bb:e1:e7:
                    19:8f:7b:b7:86:dc:25:d8:df:de:21:d1:05:a4:71:
                    ee:ed:6d:ea:2f:98:61:af:de:ce:42:7d:ff:d2:fa:
                    e9:5e:07:8c:b8:9f:f2:77:98:f4:ee:e1:36:ca:2b:
                    db:a6:2f:50:ce:50:58:bb:14:d0:6c:af:a7:f9:39:
                    3f:5b:97:99:5e:be:62:2b:f6:3b:7f:3b:66:0b:4e:
                    d7:ea:52:bd:c0:fe:b2:40:f3:87:0d:5b:ba:27:8f:
                    0a:a1:48:63:0c:20:5a:b2:5c:76:f2:b7:e7:8e:ea:
                    09:96:db:d3:8d:8d:0f:1e:57:e8:2c:ab:c7:99:27:
                    a8:a3:f1:a0:2c:14:ae:e4:4c:6f:c8:20:7e:9c:b3:
                    39:aa:8a:e7:14:17:14:84:93:72:ce:46:f0:dc:cc:
                    2b:8c:59:ea:8e:f6:e2:28:02:fe:52:35:7f:87:d1:
                    9a:9f:5f:c0:4e:c8:60:20:3e:3a:c6:ec:41:78:55:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2D:C3:1B:FA:90:8C:D8:A5:2E:26:B4:73:F0:5F:FC:94:2F:AC:6B
            X509v3 Authority Key Identifier:
                keyid:3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233342e302f32332d3233203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:ed:d0:ea:48:0b:57:c9:5c:4f:6d:9d:b3:19:f0:d3:8c:
         ba:4e:c4:b0:03:a0:ac:f1:94:09:8d:4e:d1:99:51:46:2f:78:
         13:5d:bd:58:35:1b:af:1d:32:a4:8d:f4:19:32:6c:cc:aa:6a:
         57:b9:66:60:ff:4a:70:ad:93:a1:72:f3:71:72:92:7e:15:ea:
         19:fe:76:e0:13:82:b0:d6:50:af:31:3b:86:9e:b9:15:2b:2a:
         17:57:34:ef:94:c7:18:f1:72:fe:d6:cd:58:30:18:5c:0c:17:
         ba:ff:62:1e:d2:63:3e:24:9b:b7:36:cf:fc:fa:b6:c6:3e:33:
         d7:27:bc:f9:fd:6b:81:6f:48:04:1d:8c:68:3f:1d:9d:7a:6b:
         b4:fd:3f:4f:d6:65:d6:b4:33:6c:bc:0b:18:3c:63:2a:00:e9:
         37:09:6b:f9:e9:54:d0:bc:af:c2:01:c4:88:50:2a:98:8c:88:
         f8:f5:2a:bf:d5:cf:87:ba:91:42:9a:ab:b8:49:cf:93:b1:86:
         ed:e8:bf:71:8c:7a:78:a0:ba:59:65:b2:bc:4e:aa:d8:8b:96:
         bb:d2:38:98:77:39:ff:4e:f7:ba:b5:bb:b1:b1:eb:e3:0c:7e:
         bc:b8:b2:7c:c3:10:c7:bc:72:66:2a:4f:6d:33:b1:93:dc:22:
         6d:9c:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org