Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31372e39362e302f32302d3234203d3e203130383831.roa
File:                     3230302e31372e39362e302f32302d3234203d3e203130383831.roa (raw, json)
Hash identifier:          8KyYB9ZVdkW9yDXeB8MDcZoxAqJps8Sk15Gj0WEvz/8=
Subject key identifier:   3F:FC:A5:36:9F:40:F4:53:BD:47:4A:79:A1:87:9E:96:F6:DF:F1:D7
Certificate issuer:       /CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
Certificate serial:       013B94AB913702FD88030E2611A733073CB8455A
Authority key identifier: BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31372e39362e302f32302d3234203d3e203130383831.roa
Signing time:             Mon 01 Apr 2024 17:08:49 +0000
ROA not before:           Mon 01 Apr 2024 17:03:49 +0000
ROA not after:            Mon 31 Mar 2025 17:08:49 +0000
asID:                     10881
IP address blocks:        200.17.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3b:94:ab:91:37:02:fd:88:03:0e:26:11:a7:33:07:3c:b8:45:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
        Validity
            Not Before: Apr  1 17:03:49 2024 GMT
            Not After : Mar 31 17:08:49 2025 GMT
        Subject: CN=3FFCA5369F40F453BD474A79A1879E96F6DFF1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:da:bb:9e:5e:6b:39:08:8e:b0:c7:4e:7d:
                    e2:10:55:4d:3f:46:e8:00:bc:5a:55:d2:37:17:f8:
                    1d:3b:f6:bd:ba:8a:69:d1:a6:67:56:3a:01:9d:60:
                    20:33:6b:ff:74:50:7c:8a:bd:cf:77:c5:d9:67:e0:
                    b6:b5:f5:0a:8f:76:cf:72:5e:48:90:42:28:0f:df:
                    73:1d:36:ea:7d:b8:a0:bb:d9:13:c5:ee:56:8d:ab:
                    8d:a1:ae:a8:bc:85:a9:81:d7:ee:d3:d9:7b:d9:a9:
                    d4:8b:e4:b6:7a:7a:f5:ad:ff:cf:98:7a:e3:3b:bd:
                    26:5e:11:7e:bd:51:04:c1:a8:30:69:3f:22:63:49:
                    89:5c:8a:ef:1c:21:04:40:ef:81:a4:15:95:ec:ee:
                    93:81:7e:61:ae:23:9c:d3:0c:34:40:5c:d4:0c:fc:
                    c2:77:70:49:0f:80:7b:82:0c:9a:5d:5b:4e:05:93:
                    57:dc:a7:f7:f5:93:75:08:d3:71:60:6e:3f:5c:d6:
                    5d:2b:67:13:23:c2:cb:11:0d:f3:bb:6a:09:ab:a0:
                    66:45:c1:04:01:ed:23:64:95:e4:3c:b5:7f:2a:71:
                    c3:c4:4c:a4:67:38:5e:eb:7e:0a:e7:b7:da:18:0c:
                    66:e3:c5:1c:38:bd:d0:3d:c5:c7:ab:85:c2:a3:8d:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FC:A5:36:9F:40:F4:53:BD:47:4A:79:A1:87:9E:96:F6:DF:F1:D7
            X509v3 Authority Key Identifier:
                keyid:BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31372e39362e302f32302d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:0d:55:98:a6:19:24:e6:7a:8b:70:a5:b2:04:e4:76:cb:8a:
         dd:4e:af:ad:f4:0f:7f:b1:b0:6e:b7:72:03:36:2a:77:ac:33:
         57:b1:36:9b:ff:8f:0e:a9:e0:a6:8f:7b:0c:c6:ca:16:e7:35:
         2d:00:cb:27:61:ad:63:61:d5:74:74:e4:b9:76:af:78:79:8f:
         d6:aa:72:d0:72:41:76:a1:2d:ce:c0:0d:a1:89:e1:a8:39:65:
         df:f6:ec:4e:6e:f7:b4:74:be:0c:fb:ee:b9:8f:2c:1d:6c:fa:
         8e:2c:7c:e0:01:2d:72:79:e9:c8:5a:1f:c3:99:ba:bb:42:35:
         f2:1e:2f:34:49:3f:0e:8a:8f:6b:2f:6f:84:fe:ad:ce:e2:7a:
         00:a7:ef:7e:e2:b5:48:1b:90:19:e8:9b:de:60:9e:8d:d2:d3:
         d1:45:d6:8e:9e:23:28:cf:70:59:ae:eb:f2:04:38:21:4d:88:
         da:3c:11:67:cb:02:07:f6:87:50:97:0a:75:cf:71:16:cf:6d:
         76:6e:d3:9d:dd:a9:a7:fe:6c:43:5d:c4:d7:46:06:82:8c:1b:
         f1:af:6d:5b:39:6c:6f:fe:0a:88:9e:38:12:e2:a7:52:78:fa:
         b3:96:ee:3c:80:72:bb:c8:b5:d5:8b:f6:a0:07:3b:88:80:0b:
         4d:64:6c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org