Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230302e3136392e3131322e302f32302d3230203d3e203232303835.roa
File:                     3230302e3136392e3131322e302f32302d3230203d3e203232303835.roa (raw, json)
Hash identifier:          DraEUkh6q/Ss8PZ6fb3K/k0UnBz71EzwSH4YORT8wZM=
Subject key identifier:   C9:3F:F3:0D:3D:7C:BD:2E:83:4F:7F:78:5B:32:B4:DA:6E:58:08:45
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       0590D9A270842E3F1A0F6DDE202424BCB37B9879
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230302e3136392e3131322e302f32302d3230203d3e203232303835.roa
Signing time:             Wed 14 Feb 2024 20:00:00 +0000
ROA not before:           Wed 14 Feb 2024 19:55:00 +0000
ROA not after:            Wed 12 Feb 2025 20:00:00 +0000
asID:                     22085
IP address blocks:        200.169.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:90:d9:a2:70:84:2e:3f:1a:0f:6d:de:20:24:24:bc:b3:7b:98:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Feb 14 19:55:00 2024 GMT
            Not After : Feb 12 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a0:48:ec:1c:15:16:13:67:39:be:c1:53:44:
                    54:10:6e:b9:5a:f0:53:15:1f:05:e5:e9:92:e1:75:
                    ed:34:9d:90:4e:b5:b9:d0:bf:f3:58:f5:c4:bf:8d:
                    a1:c1:54:b6:11:ec:1f:a0:92:0b:24:a9:fd:cd:d3:
                    bd:0b:8b:02:78:8a:9f:f0:53:a9:68:4e:52:9f:96:
                    d3:cc:2a:b9:a6:d5:50:1d:22:28:a4:0f:20:c7:06:
                    a4:50:89:42:21:00:f1:1a:db:4f:10:a5:f8:9d:f4:
                    b6:4e:33:b1:90:2e:af:a6:05:bf:d5:4e:a6:52:7f:
                    9b:4e:12:ff:fa:0e:2e:e2:fc:a9:26:fe:09:89:f9:
                    ff:44:66:88:d3:71:02:d3:41:42:28:34:0f:f2:01:
                    19:41:5c:11:f5:07:1b:89:40:06:e0:e4:c1:2a:58:
                    aa:fb:e4:9d:ea:74:38:63:9d:d8:a2:1c:14:d8:e9:
                    d8:bd:6f:b5:2a:30:1b:e0:d8:de:95:96:87:18:ab:
                    9d:b9:0d:47:36:6a:6b:20:8b:22:8a:18:51:5e:ce:
                    de:99:de:66:c7:44:20:8a:e8:73:e1:ce:4f:c3:3c:
                    58:52:a5:a0:6b:52:50:ba:ed:f9:43:4f:4b:00:5e:
                    28:9d:6d:8e:e0:ec:00:72:75:1d:ca:f5:cb:ad:c6:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3F:F3:0D:3D:7C:BD:2E:83:4F:7F:78:5B:32:B4:DA:6E:58:08:45
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230302e3136392e3131322e302f32302d3230203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.169.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:d4:85:b8:c1:0f:97:1f:c4:86:d7:7f:65:76:f7:dc:f7:00:
         5e:e2:8a:d1:65:a5:53:d2:ee:67:f4:0a:0c:b1:81:5d:14:98:
         ad:b8:b0:bc:b8:f2:9b:c7:4b:7b:74:e2:bc:89:ef:fb:75:b9:
         d3:6f:df:a7:3e:d4:79:0d:f2:38:d7:bc:35:89:d4:8b:33:20:
         fc:74:88:9b:79:ac:41:6e:c2:37:dd:3e:db:e0:cc:a1:8e:a3:
         81:4b:12:e9:eb:1d:f9:0a:40:c1:fb:94:95:2d:23:6f:9d:e3:
         a8:2c:fc:69:cc:c5:f8:9c:3e:b3:cb:25:39:5f:58:d0:d9:d8:
         5a:7b:e8:15:74:bb:01:15:1c:a0:76:27:5b:58:23:6d:28:53:
         4c:19:1b:85:81:c9:0f:0f:f1:da:cd:70:6c:db:3c:02:29:80:
         a2:8f:d1:4f:7a:a2:1a:34:89:4c:e9:8b:74:3e:9d:76:98:e5:
         b2:e5:ec:e3:bd:e3:36:7e:54:38:50:ea:d4:d1:d7:ff:39:0d:
         56:22:05:38:dc:e3:6f:0b:80:6a:05:af:6b:cd:55:20:2d:f5:
         ea:9b:be:85:ef:ce:34:6a:6d:d5:5d:16:0e:ea:41:98:fc:fa:
         76:13:ef:67:14:60:b8:4f:16:78:e4:d2:2f:cc:c3:2e:16:fd:
         4d:d6:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org