Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32332d3233203d3e20323731343233.roa
File:                     3230302e33362e3139362e302f32332d3233203d3e20323731343233.roa (raw, json)
Hash identifier:          c7gF2TyMvVEuF4oYyspZ9UF1ms8P5P/cyUfmia4CCVk=
Subject key identifier:   71:0D:36:02:C1:BF:F9:03:E4:B4:13:9F:21:4C:9E:A7:D7:C4:7E:C4
Certificate issuer:       /CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
Certificate serial:       3917D4B9EDD0AB3703595D021636C9976AD99361
Authority key identifier: D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32332d3233203d3e20323731343233.roa
Signing time:             Wed 10 Jan 2024 13:58:56 +0000
ROA not before:           Wed 10 Jan 2024 13:53:56 +0000
ROA not after:            Wed 08 Jan 2025 13:58:56 +0000
asID:                     271423
IP address blocks:        200.36.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:17:d4:b9:ed:d0:ab:37:03:59:5d:02:16:36:c9:97:6a:d9:93:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
        Validity
            Not Before: Jan 10 13:53:56 2024 GMT
            Not After : Jan  8 13:58:56 2025 GMT
        Subject: CN=710D3602C1BFF903E4B4139F214C9EA7D7C47EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:8e:8b:ca:f3:aa:1d:2a:b6:19:b0:b4:62:
                    1a:f2:3a:9a:51:05:da:0f:a9:06:33:71:78:69:91:
                    8c:64:81:f3:1e:83:59:ff:10:ba:e7:b0:0e:54:95:
                    3b:d1:46:20:f3:f9:b0:d9:b9:e1:bb:4f:2c:f0:bd:
                    99:4a:e6:a0:f4:fb:cc:6a:b6:29:44:8c:b3:76:29:
                    5a:95:1f:06:2d:3e:c4:53:5b:55:f4:4c:b7:78:4f:
                    01:a3:2d:b9:2e:08:9c:4b:d9:f5:bd:54:54:0b:03:
                    46:70:ee:66:cb:79:3a:b2:18:82:8b:c9:bb:6d:a2:
                    85:0e:f2:06:1a:e1:4e:d4:82:2c:14:c5:8e:ce:63:
                    09:61:3c:28:b0:3c:e1:83:45:41:b5:a1:e6:e9:33:
                    e5:4d:5b:97:27:64:46:0a:c0:e6:67:f2:89:4b:ef:
                    9a:a1:c8:92:51:e7:91:b7:50:91:1a:99:d9:da:c3:
                    de:0f:03:50:a1:b4:fb:49:a0:ff:45:a5:60:14:f4:
                    cb:16:37:51:03:89:c4:7b:ad:42:fd:ef:fa:3f:73:
                    b6:74:c1:d6:ce:91:63:ff:0e:e5:7a:5b:e1:f6:92:
                    b7:ed:20:44:50:52:25:3a:f7:d4:cc:22:3f:f9:b1:
                    4c:a7:fd:ee:78:e8:3b:8c:3f:a4:49:26:d6:6f:4d:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0D:36:02:C1:BF:F9:03:E4:B4:13:9F:21:4C:9E:A7:D7:C4:7E:C4
            X509v3 Authority Key Identifier:
                keyid:D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139362e302f32332d3233203d3e20323731343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:8b:9b:f4:98:c8:b7:b0:ea:be:fd:16:28:37:bd:e2:06:
         f4:78:f3:f5:f8:fa:ca:db:b2:ba:22:8c:97:33:50:c0:9a:13:
         d6:02:68:ff:c4:4e:59:43:68:dc:62:66:d2:7b:08:4f:38:84:
         f1:bc:73:30:13:c1:ca:50:bc:ef:ab:d4:c0:54:50:93:1c:4e:
         71:be:74:89:90:06:37:d9:87:36:60:c8:88:86:36:36:cb:47:
         88:39:60:35:9c:47:65:45:0b:fe:77:97:98:f0:b0:ee:9a:dc:
         15:f8:b9:7e:03:66:fa:f4:9b:51:b8:f5:e6:4c:ad:79:88:57:
         d6:3a:72:ac:85:e4:ae:40:54:46:ab:0c:6f:d1:e3:57:ad:2d:
         83:92:58:1e:9d:a8:98:ab:be:52:34:64:60:d9:af:be:fc:31:
         53:cf:d8:e6:23:38:cc:c9:ad:e7:d6:0a:cb:e1:99:b7:71:8c:
         1e:1f:73:80:ef:ee:78:ff:c6:37:a7:11:c8:89:19:69:76:d6:
         3b:c5:4f:01:ab:4d:f3:65:31:90:c1:f9:0e:4b:62:b5:ae:5c:
         c7:9b:40:4f:3e:98:7c:dd:fb:c3:32:05:87:3c:0b:09:ef:7a:
         f8:d6:84:3a:b0:ef:6b:1e:85:e3:b7:42:bd:8a:12:72:54:cc:
         78:4d:88:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org