Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133342e302f32342d3234203d3e20323730373537.roa
File:                     3230302e33392e3133342e302f32342d3234203d3e20323730373537.roa (raw, json)
Hash identifier:          SzFYVDCPcgHSTZRS+uL0GbLD33/IsSiAIAp4jlSUXb0=
Subject key identifier:   5C:AB:ED:16:62:DF:23:4F:9D:12:B4:77:BF:27:79:01:3C:29:25:45
Certificate issuer:       /CN=978C058CACCF9405ABB1475ABC54573C186268F7
Certificate serial:       4C7ACD46BF10725F4AFC3E99E05F3D4E990346BF
Authority key identifier: 97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/978C058CACCF9405ABB1475ABC54573C186268F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133342e302f32342d3234203d3e20323730373537.roa
Signing time:             Sat 04 Mar 2023 17:16:25 +0000
ROA not before:           Sat 04 Mar 2023 17:11:25 +0000
ROA not after:            Sat 02 Mar 2024 17:16:25 +0000
asID:                     270757
IP address blocks:        200.39.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7a:cd:46:bf:10:72:5f:4a:fc:3e:99:e0:5f:3d:4e:99:03:46:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978C058CACCF9405ABB1475ABC54573C186268F7
        Validity
            Not Before: Mar  4 17:11:25 2023 GMT
            Not After : Mar  2 17:16:25 2024 GMT
        Subject: CN=5CABED1662DF234F9D12B477BF2779013C292545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:c4:6b:df:e2:ce:a3:99:19:19:6f:b7:4f:
                    4e:d4:a9:3e:00:a6:28:13:b4:78:e9:10:9a:a5:93:
                    ac:5f:4f:e5:6b:85:d3:df:8f:44:4e:a2:cd:ec:a2:
                    f2:45:7b:c5:7a:eb:8b:5c:61:a1:4b:5a:d2:5a:7e:
                    66:c3:50:df:85:19:53:f5:f3:3f:d9:cc:f3:2d:40:
                    36:15:00:f5:cf:d2:19:be:0d:e2:5c:c2:03:50:88:
                    cf:5a:18:eb:0d:66:7e:f3:3c:eb:c2:81:5e:7c:65:
                    f5:3a:c6:9e:35:5d:06:1a:21:47:73:47:30:6f:52:
                    28:23:d4:68:e1:c1:17:bc:bc:eb:fa:38:77:a3:ae:
                    03:ca:da:24:14:a0:ad:bc:19:db:ae:26:e8:97:5a:
                    6b:55:e1:39:30:1d:05:f4:d5:90:43:28:44:a8:0e:
                    aa:a7:74:c9:89:6f:08:aa:b8:e2:8a:aa:3f:55:8b:
                    86:5a:88:bc:cf:0e:2a:9c:4c:22:62:d0:58:ef:b6:
                    ae:da:69:e1:d9:6a:57:cc:bb:54:85:40:d2:61:35:
                    b2:74:15:54:9a:95:f1:71:6d:5c:5f:b3:6e:cb:79:
                    75:30:87:36:74:9d:c1:c0:a8:f4:c3:6b:a1:e0:ce:
                    6f:ff:a2:a1:e4:a7:aa:58:78:f9:21:40:e4:3e:59:
                    4a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AB:ED:16:62:DF:23:4F:9D:12:B4:77:BF:27:79:01:3C:29:25:45
            X509v3 Authority Key Identifier:
                keyid:97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/978C058CACCF9405ABB1475ABC54573C186268F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/978C058CACCF9405ABB1475ABC54573C186268F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133342e302f32342d3234203d3e20323730373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:f3:c2:f7:0a:1b:a0:da:82:3a:c3:63:20:7f:64:8c:45:
         a1:c2:db:12:92:1c:3f:c7:92:3f:8d:bf:ff:e3:22:43:75:77:
         a5:ec:fa:62:27:87:61:2e:3b:7d:68:6e:df:e3:2b:eb:de:e7:
         ed:4f:d8:a0:1d:44:77:64:f0:eb:63:6b:12:65:74:39:5b:ab:
         86:6f:51:28:0e:7c:cb:78:1a:4c:72:d8:76:ed:19:73:b3:0b:
         7b:2b:6b:fc:3b:ee:16:77:7b:b4:cb:10:00:f5:90:32:61:77:
         67:30:a7:7c:a8:dc:91:3f:2f:b3:40:03:43:56:70:cb:15:a5:
         84:c4:a9:2d:2c:6b:0c:11:79:0e:71:c3:72:35:c2:5d:bd:7c:
         cc:c2:2b:3d:a0:48:b0:90:62:27:46:0f:68:34:4d:c7:52:83:
         e9:93:51:f9:f2:75:92:fc:ae:e8:52:b5:a9:8a:0d:27:a1:0b:
         a3:8f:7f:a0:5a:81:18:85:74:5b:21:cb:9a:b2:be:26:b8:ba:
         5b:63:0a:68:bb:11:d3:79:e6:cc:d1:36:e2:8c:7b:83:3a:93:
         2b:46:de:ed:d8:37:41:24:05:22:3e:9d:f6:e6:c4:10:84:73:
         2f:04:44:21:97:6b:f2:48:8d:1e:6e:9f:47:61:bb:10:e7:9e:
         8f:6c:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:23 2023 by rpki-client on console.sobornost.net