Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa
File:                     3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa (raw, json)
Hash identifier:          MqhFAG7J4pKgmadjDZjygShOrmNFxLHXoQ38X5q/LHE=
Subject key identifier:   9C:1E:15:B0:C4:05:85:09:9A:A5:31:D4:31:DB:6C:60:89:98:AD:4A
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       3EDE8EFBAA8E75DF4D9DA5A42E6923C1CA07CCE3
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa
Signing time:             Thu 20 Jul 2023 20:00:00 +0000
ROA not before:           Thu 20 Jul 2023 19:55:00 +0000
ROA not after:            Thu 18 Jul 2024 20:00:00 +0000
asID:                     27652
IP address blocks:        200.146.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:de:8e:fb:aa:8e:75:df:4d:9d:a5:a4:2e:69:23:c1:ca:07:cc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Jul 20 19:55:00 2023 GMT
            Not After : Jul 18 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:43:77:a9:6a:f4:18:6d:35:dd:4b:76:28:
                    f8:c4:3a:b8:58:fb:2a:0f:79:e7:5b:e3:e5:c4:6e:
                    9a:19:f7:ee:2e:87:91:19:bd:2d:7f:a1:81:30:9a:
                    27:bb:76:54:66:55:d1:5c:92:11:99:fe:c6:b5:67:
                    8e:ce:9e:ee:26:13:a9:44:1f:22:b5:a5:56:af:e2:
                    bf:cb:7f:91:49:e8:b0:f3:c3:f7:85:98:3f:99:53:
                    15:d2:37:55:60:db:89:50:0f:1a:2c:29:50:dd:2a:
                    d8:64:af:ce:bb:5c:03:a8:ec:00:24:6e:4a:18:9b:
                    fc:76:b8:b0:a9:48:b7:e7:1d:5c:05:27:fd:dd:e5:
                    6a:8d:c2:1b:55:7a:19:b5:9c:f3:77:f0:9f:5c:2d:
                    c3:d4:42:cb:9f:59:89:14:70:0d:c9:ed:f8:1e:87:
                    64:3b:95:96:d3:4b:85:eb:74:c5:ca:69:e4:22:8c:
                    4f:63:67:7d:27:0e:62:88:fd:63:f3:9e:d8:76:8a:
                    89:00:5d:3a:86:63:ec:be:48:0a:ab:be:ed:e4:85:
                    e8:50:70:bb:cf:e2:11:cd:39:6b:78:0a:a6:b7:e7:
                    5a:96:37:ba:fd:46:75:1d:6d:50:61:32:b6:9b:66:
                    3b:b8:5e:aa:bd:db:28:fa:08:de:6e:01:1a:e6:4b:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1E:15:B0:C4:05:85:09:9A:A5:31:D4:31:DB:6C:60:89:98:AD:4A
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230302e3134362e3132382e302f31382d3234203d3e203237363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.146.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:06:bd:75:97:e5:15:6d:a5:63:81:13:d6:e5:ee:b1:c1:2a:
         ad:cf:0a:6b:f7:18:7c:8b:a7:06:9d:de:2e:18:90:1a:ec:81:
         a1:cd:2c:6d:84:e2:59:38:fe:0d:99:d2:e7:6f:25:f0:df:b5:
         81:62:d9:03:c4:1c:da:6b:08:85:2d:ef:ab:36:41:c0:ff:f9:
         cf:b4:59:65:54:d6:16:8a:f0:09:fe:9f:dd:14:05:47:37:da:
         06:20:7c:0d:01:76:90:b8:5e:1a:20:10:0a:e5:2b:83:cf:d8:
         92:81:4b:de:2e:08:10:81:d1:dc:44:c2:78:5b:f3:d5:cb:5e:
         1d:95:b1:04:5e:f3:ff:82:a4:1f:da:16:38:8e:87:d3:f2:6e:
         33:71:14:dd:6f:fd:fb:14:84:ad:2d:fa:46:6f:6e:78:0a:35:
         2d:64:43:5e:f8:5d:96:60:32:da:0b:a1:7d:db:f5:39:d3:a7:
         ab:bd:4a:be:ea:80:18:8d:29:5d:15:b1:74:43:68:54:e5:86:
         29:cf:cf:0c:4f:c5:f0:8f:73:00:50:f6:75:b4:d4:17:b3:e9:
         e2:7e:a8:53:66:e3:64:8d:56:3a:6a:86:b7:d3:cc:66:1a:63:
         e1:ec:8c:f4:be:2d:38:1e:bc:75:7c:bc:ea:a7:31:ee:24:e0:
         e0:4a:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org