Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
File:                     3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (raw, json)
Hash identifier:          G6A6IdVQnBp2P51cKdEDdNw3tKSZSUlJZkKWiYKjJMs=
Subject key identifier:   01:D5:58:45:92:F0:BE:ED:C5:DF:DE:36:0C:64:F1:B0:11:05:67:DE
Certificate issuer:       /CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
Certificate serial:       345F57182E5AC5607860CD21712D69999A91894C
Authority key identifier: BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
Signing time:             Mon 01 Apr 2024 17:08:49 +0000
ROA not before:           Mon 01 Apr 2024 17:03:49 +0000
ROA not after:            Mon 31 Mar 2025 17:08:49 +0000
asID:                     10881
IP address blocks:        200.17.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5f:57:18:2e:5a:c5:60:78:60:cd:21:71:2d:69:99:9a:91:89:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
        Validity
            Not Before: Apr  1 17:03:49 2024 GMT
            Not After : Mar 31 17:08:49 2025 GMT
        Subject: CN=01D5584592F0BEEDC5DFDE360C64F1B0110567DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:60:04:dd:b2:82:45:c0:33:79:5c:ac:25:
                    43:ed:92:6c:01:02:ed:b4:c3:a4:cf:9e:44:94:09:
                    fd:a4:c0:24:41:6c:25:a0:2e:58:40:39:08:4d:44:
                    26:00:8f:66:61:57:96:cb:10:94:39:88:51:aa:f5:
                    3f:8e:14:0c:da:df:f8:37:1c:b5:55:4f:98:9b:f9:
                    e6:38:a1:82:03:28:7c:8c:a3:88:5f:6a:bb:0b:04:
                    94:6c:10:74:14:e6:6a:b8:cf:b5:d5:bc:de:43:f7:
                    c2:b9:72:d6:d6:9a:ca:f1:44:32:5e:0f:b4:59:50:
                    3b:ad:e2:0a:75:cc:f5:64:7f:75:4c:79:04:5c:57:
                    e5:cb:43:cc:38:17:de:09:b2:74:a9:92:ba:57:56:
                    c1:32:05:77:ae:ba:27:70:31:a0:85:57:a3:22:30:
                    c1:c9:2e:f3:af:1e:a5:97:b3:4b:d9:f1:fa:20:85:
                    a1:83:d6:74:18:4b:c2:b4:5b:ae:34:c5:fa:a7:61:
                    c2:12:a7:ea:d0:ce:3b:fe:0c:67:5c:90:96:95:11:
                    a8:ec:99:a5:80:23:1c:22:61:c9:ab:95:64:f2:a8:
                    68:05:f5:d2:59:10:24:9c:9f:cd:0b:bd:71:40:bf:
                    ba:8b:2d:51:df:f5:62:9e:ea:de:9e:6a:d1:38:9f:
                    eb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:58:45:92:F0:BE:ED:C5:DF:DE:36:0C:64:F1:B0:11:05:67:DE
            X509v3 Authority Key Identifier:
                keyid:BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:0d:17:2a:a6:5a:80:5d:f9:d5:b9:95:9b:52:8a:6b:6e:
         9d:67:d8:f2:4c:56:f3:22:8a:e4:7c:ba:f2:85:03:f7:1c:38:
         7d:30:20:77:49:5b:24:84:16:a3:86:86:80:a8:d1:3f:35:5f:
         19:c1:90:44:30:2a:54:e3:0d:45:e4:8a:07:90:18:6e:50:78:
         e4:2f:59:dd:56:a7:f7:21:51:77:5f:14:1e:95:85:14:f3:49:
         d6:01:7b:f8:95:8f:68:f3:e6:59:27:54:4f:68:c0:7e:62:1a:
         1f:08:aa:ba:7e:22:a9:fd:03:b2:60:f2:9b:c7:bf:f8:e2:69:
         40:83:71:c0:2b:e0:57:92:7f:53:71:88:cc:a4:49:94:59:21:
         6b:3e:7c:2e:c8:05:c5:a7:bd:83:ce:5a:35:34:3e:f5:30:65:
         25:5c:99:e4:a6:9c:1c:da:78:0a:82:d2:d0:e6:33:d7:6a:82:
         66:2c:c4:3e:64:72:21:bb:f9:b1:a2:ec:0b:1f:5a:f5:50:20:
         d7:64:c5:86:c3:3f:85:f5:cc:b3:48:06:2a:fe:d3:2a:78:92:
         6c:97:7f:6c:f1:16:60:7e:c7:ee:46:c9:57:b2:d7:1f:2e:46:
         65:40:7e:74:cd:31:98:46:8e:59:0a:ba:57:59:95:8c:7d:52:
         7c:68:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org