Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/3230302e35322e3233302e302f32332d3234203d3e20323731303138.roa
File:                     3230302e35322e3233302e302f32332d3234203d3e20323731303138.roa (raw, json)
Hash identifier:          ot+BzuXCd7FUS7YY92uikLqVf/huLQuUup1xWgEQIsw=
Subject key identifier:   8E:34:EF:13:0E:DE:A8:B6:99:CD:FF:79:C2:A8:8D:9B:01:A5:1C:F4
Certificate issuer:       /CN=A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA
Certificate serial:       5486F5FF7DFC06A9989658CCCAF94C346839C0A1
Authority key identifier: A8:F0:6D:A0:50:A8:DB:E7:89:78:1D:3C:7D:3F:37:06:CB:AA:58:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/3230302e35322e3233302e302f32332d3234203d3e20323731303138.roa
Signing time:             Fri 22 Mar 2024 18:19:28 +0000
ROA not before:           Fri 22 Mar 2024 18:14:28 +0000
ROA not after:            Fri 21 Mar 2025 18:19:28 +0000
asID:                     271018
IP address blocks:        200.52.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:86:f5:ff:7d:fc:06:a9:98:96:58:cc:ca:f9:4c:34:68:39:c0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA
        Validity
            Not Before: Mar 22 18:14:28 2024 GMT
            Not After : Mar 21 18:19:28 2025 GMT
        Subject: CN=8E34EF130EDEA8B699CDFF79C2A88D9B01A51CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:7a:14:aa:c7:1b:ca:a1:d0:ac:f2:2e:fb:
                    ce:b7:d2:b9:f5:80:25:ab:94:38:79:cd:ea:52:1f:
                    75:6a:e5:ff:a9:38:40:74:24:df:5e:50:af:26:f4:
                    9b:60:6f:99:19:d9:28:c6:ae:78:0c:a8:4e:c7:e6:
                    c5:b0:9d:d3:64:29:5a:1f:39:7d:0c:51:36:19:e6:
                    f8:cd:1a:a6:62:a5:e7:66:7b:7c:17:ea:15:c0:62:
                    e1:6f:44:af:c3:24:2c:77:35:f4:d8:45:e8:32:54:
                    de:c1:2d:4b:8b:96:8b:20:ff:bb:c8:e1:39:36:bb:
                    75:d2:4e:0d:78:78:5c:3d:92:b1:8f:80:9e:7a:bb:
                    f2:f6:a9:b8:81:46:df:98:cd:15:36:2a:58:cb:4f:
                    e0:2b:10:4a:93:3d:8d:52:86:c2:bc:84:c0:28:89:
                    44:6f:48:e1:7b:cc:10:bc:56:6c:23:fd:52:1f:23:
                    bd:19:0b:76:6c:c9:c9:69:dd:05:ad:f0:3c:0a:a9:
                    b4:47:ef:cf:f1:e6:f1:50:d9:49:b9:29:5f:bb:af:
                    7d:d2:a2:01:00:f4:9c:96:8f:d3:fa:06:e9:36:8d:
                    89:9e:27:a0:4a:7a:62:79:37:2a:fa:1d:64:94:1a:
                    d7:a9:6b:8e:8a:4e:27:38:83:df:31:ec:f3:c6:ae:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:34:EF:13:0E:DE:A8:B6:99:CD:FF:79:C2:A8:8D:9B:01:A5:1C:F4
            X509v3 Authority Key Identifier:
                keyid:A8:F0:6D:A0:50:A8:DB:E7:89:78:1D:3C:7D:3F:37:06:CB:AA:58:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8F06DA050A8DBE789781D3C7D3F3706CBAA58BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/3230302e35322e3233302e302f32332d3234203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:7f:be:35:43:26:ec:41:91:c6:4f:d9:39:e2:38:cb:c8:
         b3:ef:de:fd:ca:75:93:9a:81:a1:a1:8b:b6:c9:0b:5a:89:b0:
         6b:a2:18:26:5e:db:e1:b5:64:11:15:16:b5:e4:8f:5e:7c:74:
         5e:19:1d:2c:e9:e8:b3:7f:2a:74:7b:0f:8b:b0:68:07:e3:dc:
         38:89:24:37:f2:85:a0:51:04:73:d1:f2:66:f3:c7:15:8b:7e:
         2b:81:38:f2:af:ac:21:c2:ff:45:06:00:fa:15:e8:b9:d6:d6:
         20:5e:a8:8d:17:e4:ae:db:20:b1:2b:8c:0c:7e:01:ef:dc:66:
         3e:b8:8e:d2:75:b9:99:60:e1:96:93:6a:ed:cb:cf:e9:c7:cd:
         cf:4a:c0:ab:73:81:29:6f:1c:20:03:c3:80:13:8e:04:37:bf:
         38:74:9f:dd:38:97:42:5f:0b:8e:29:16:59:7d:fc:e1:4a:78:
         11:b8:16:b7:e9:60:51:e7:e4:9d:b5:66:5a:81:e1:6b:62:ae:
         ba:99:64:81:4f:7a:37:0c:7a:a2:90:de:37:32:d1:6c:e9:1a:
         51:36:13:c0:09:d0:f1:24:8e:0a:4d:34:ed:54:d9:db:0d:cd:
         06:26:68:2a:55:02:6a:64:d8:bf:f9:52:73:92:dc:96:be:66:
         fb:ae:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org