Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
File:                     3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (raw, json)
Hash identifier:          iNIwOC9ml02eZelB6hmXVArnFtp2EEkdONJdGRfjmKY=
Subject key identifier:   A4:7B:DA:32:39:5F:F0:48:CF:2A:B6:3E:D2:CC:09:46:C3:24:7E:95
Certificate issuer:       /CN=34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C
Certificate serial:       5FF8E5567817435694CE2F224BEC3627D0E41F18
Authority key identifier: 34:78:12:68:AC:D3:16:DE:26:79:A9:F8:A0:0E:8B:7B:F1:CE:AF:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
Signing time:             Mon 27 Nov 2023 05:50:41 +0000
ROA not before:           Mon 27 Nov 2023 05:45:41 +0000
ROA not after:            Mon 25 Nov 2024 05:50:41 +0000
asID:                     271343
IP address blocks:        200.39.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f8:e5:56:78:17:43:56:94:ce:2f:22:4b:ec:36:27:d0:e4:1f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C
        Validity
            Not Before: Nov 27 05:45:41 2023 GMT
            Not After : Nov 25 05:50:41 2024 GMT
        Subject: CN=A47BDA32395FF048CF2AB63ED2CC0946C3247E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:fd:5f:6c:0f:85:a7:c1:94:70:f0:79:bb:
                    39:90:22:42:2c:69:61:fd:4a:50:59:d3:77:23:96:
                    48:c8:bb:5a:a0:a5:c1:d6:87:2f:69:d5:f2:6c:66:
                    b3:89:30:7f:cd:23:06:3d:07:b0:24:f6:13:a6:69:
                    0d:7c:7f:4c:70:24:43:f0:b5:b8:3d:34:09:7c:ab:
                    74:57:d2:12:ab:79:d9:51:24:79:db:d2:e6:f6:91:
                    93:77:8e:38:a7:25:3d:db:8a:cb:38:79:0c:c6:35:
                    83:6d:e2:40:7d:ec:90:9f:f5:4b:98:ff:a3:fb:7f:
                    cb:44:9e:c5:a5:e6:dd:78:9c:7b:91:ec:00:9d:75:
                    58:2a:9a:f5:62:15:1b:cf:ba:a2:85:dc:24:92:f6:
                    4d:bc:cd:3c:e2:59:34:2a:41:2a:ee:84:86:96:3e:
                    ad:5f:d0:53:e4:ea:6f:65:66:9e:df:4b:89:d0:9f:
                    a8:54:53:97:31:43:b7:0a:47:24:1e:e4:bf:e4:4c:
                    91:35:c2:c9:c2:66:a9:df:85:12:ac:8e:24:80:57:
                    0b:54:2b:f8:7d:8c:c3:4f:88:3f:a8:49:99:fa:1e:
                    b0:2e:d8:54:72:be:87:0d:af:d6:ae:e7:9f:cf:33:
                    d5:c6:97:e1:f4:14:da:ec:17:e6:ee:2a:4b:26:a8:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7B:DA:32:39:5F:F0:48:CF:2A:B6:3E:D2:CC:09:46:C3:24:7E:95
            X509v3 Authority Key Identifier:
                keyid:34:78:12:68:AC:D3:16:DE:26:79:A9:F8:A0:0E:8B:7B:F1:CE:AF:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:01:5d:cf:ce:12:6a:8c:33:ed:2c:00:74:2b:f8:f4:67:88:
         1a:70:30:21:d7:ac:1c:5c:7b:5b:40:fc:e2:39:79:3d:f5:c3:
         c6:67:09:ca:5e:b7:17:24:ce:02:0c:db:f2:a5:85:64:c7:6c:
         a8:ae:fe:88:fd:28:69:c9:69:86:8b:f9:ab:19:8f:94:6a:1c:
         66:81:e6:df:b4:09:58:0b:38:ab:2a:db:87:15:9f:ad:f5:e8:
         cb:92:84:9d:48:81:7c:10:d7:dd:cf:b9:b7:04:8b:70:75:a4:
         81:15:45:b0:2e:bb:ae:97:0f:63:37:20:fc:49:96:a6:6c:26:
         b1:fd:8d:19:fd:06:79:fd:f3:1e:a9:d2:bd:49:3b:f1:2d:52:
         5e:67:7e:97:99:3c:10:30:c6:cf:b3:65:89:cc:b7:b8:a0:af:
         6d:7e:44:10:36:d4:49:8f:02:a5:9f:e7:0c:5d:f7:5a:02:2d:
         26:9b:8c:df:4c:1b:4d:e7:99:3a:e4:d8:56:c7:00:50:9e:b1:
         72:19:3d:af:b0:14:fd:1a:a5:bd:1f:0b:97:5c:48:7f:19:d4:
         79:84:bd:24:83:5b:fc:df:30:97:1b:b5:0c:2c:43:18:4e:b9:
         0d:f3:b3:61:fa:d7:64:60:a7:7b:0a:84:b8:9b:96:01:3f:5a:
         3c:3b:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org