Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230302e3134362e3132382e302f31382d3138203d3e203237363532.roa
File:                     3230302e3134362e3132382e302f31382d3138203d3e203237363532.roa (raw, json)
Hash identifier:          jYHQXazpMbQfWD7KJk4AmzS8Im14Z0auxGOvcJH8J74=
Subject key identifier:   19:62:C8:E9:C1:78:CF:35:2B:FD:92:E5:96:E4:BC:EB:72:E4:52:E8
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       0209857BE4D9B49A3AAC3E07DB616C0FFFC0B118
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230302e3134362e3132382e302f31382d3138203d3e203237363532.roa
Signing time:             Wed 17 Aug 2022 18:12:27 +0000
ROA not before:           Wed 17 Aug 2022 18:07:27 +0000
ROA not after:            Wed 16 Aug 2023 18:12:27 +0000
asID:                     27652
IP address blocks:        200.146.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:09:85:7b:e4:d9:b4:9a:3a:ac:3e:07:db:61:6c:0f:ff:c0:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Aug 17 18:07:27 2022 GMT
            Not After : Aug 16 18:12:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:cc:54:20:2a:93:2c:1d:87:e6:99:70:c6:
                    31:8f:e6:d5:25:f3:bf:1e:50:46:7c:da:f3:7f:72:
                    71:98:0a:80:24:f2:67:87:76:4a:03:cc:ad:5b:b3:
                    b0:12:e7:62:7c:83:a5:db:99:cf:b5:67:c3:ec:42:
                    b9:7d:af:86:aa:e7:6c:30:41:1e:0c:58:b3:c3:5a:
                    81:36:18:aa:11:e0:15:29:7b:c8:a2:39:70:70:1a:
                    5b:98:93:70:1a:d6:b8:e6:6e:cc:97:d2:cc:2b:b3:
                    71:68:5f:5c:2c:fa:f2:40:e4:6c:8f:64:88:47:94:
                    bd:b7:b0:b5:98:f5:a7:96:07:e2:a1:b5:7d:52:51:
                    50:42:ff:23:25:f5:b6:5e:aa:b3:b7:da:6d:83:08:
                    5f:b8:7c:69:21:1c:f2:16:7e:ab:f4:59:55:2c:83:
                    d9:32:22:e3:cd:96:d1:06:32:34:8a:24:27:e9:c9:
                    e7:c0:4f:15:c5:d5:6b:f7:ef:9f:38:e2:45:a2:04:
                    2a:61:7d:e1:a1:73:0a:c6:2b:94:77:8b:0f:50:b9:
                    09:d6:6a:7a:74:db:01:6b:3f:7f:7e:b7:ad:a3:56:
                    c8:07:e9:7f:ba:91:85:cf:1d:ac:e6:ed:db:ec:29:
                    45:55:0c:21:29:55:d2:c3:fd:64:50:b9:0e:8f:45:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:C8:E9:C1:78:CF:35:2B:FD:92:E5:96:E4:BC:EB:72:E4:52:E8
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230302e3134362e3132382e302f31382d3138203d3e203237363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.146.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         50:93:15:60:83:d4:24:84:e7:5e:35:0c:79:c8:56:82:6a:90:
         32:a2:0b:fe:3b:30:8a:6e:fa:3b:e8:23:fd:88:07:7b:52:3e:
         7e:db:d5:a6:4d:18:5c:20:eb:79:29:a5:d5:97:4e:aa:34:4b:
         34:32:5d:92:90:1b:86:d3:a0:07:58:c5:21:58:1a:d0:14:f9:
         f1:a4:33:d7:f2:38:28:ae:ef:34:31:cf:76:15:1b:88:57:8e:
         e1:10:dd:b0:da:6d:f2:ab:17:63:20:b6:88:0c:99:ba:ee:54:
         c0:84:7f:dd:57:57:9d:61:3b:a6:6e:7e:47:9e:02:70:cc:dd:
         6c:a4:3f:23:8d:04:6e:64:ec:61:9c:e2:54:03:c6:c0:fa:c5:
         f5:25:35:72:77:c4:09:b2:4e:19:b4:d2:f7:33:c6:60:a0:16:
         24:45:5f:f3:db:9e:c6:2c:3d:d0:af:e1:04:1b:00:54:5c:69:
         b3:fe:65:be:b9:a7:8e:af:6d:c4:11:2e:7f:5a:ad:e5:2a:67:
         43:d2:cb:fa:4a:96:cb:90:13:aa:7b:ee:1a:f1:c8:c5:9c:62:
         70:fb:82:eb:e6:29:47:1f:77:97:9b:4c:b9:dc:3f:e4:b9:85:
         e5:62:c2:a0:95:c4:4c:22:d6:54:00:62:4e:94:f5:bb:a8:c7:
         b2:cf:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org