Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139372e302f32342d3234203d3e20323731343233.roa
File:                     3230302e33362e3139372e302f32342d3234203d3e20323731343233.roa (raw, json)
Hash identifier:          cypkz26S1WWFHu5dVEJeLcV4bs/2hYF9dMScVOdw1vc=
Subject key identifier:   48:B3:BA:21:66:25:DA:1F:4F:97:B7:1C:CD:AE:F3:6F:3D:75:55:10
Certificate issuer:       /CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
Certificate serial:       21FC983F30002E2BA013CAE152E6E98793DF8AE9
Authority key identifier: D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139372e302f32342d3234203d3e20323731343233.roa
Signing time:             Wed 10 Jan 2024 13:59:53 +0000
ROA not before:           Wed 10 Jan 2024 13:54:53 +0000
ROA not after:            Wed 08 Jan 2025 13:59:53 +0000
asID:                     271423
IP address blocks:        200.36.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fc:98:3f:30:00:2e:2b:a0:13:ca:e1:52:e6:e9:87:93:df:8a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74
        Validity
            Not Before: Jan 10 13:54:53 2024 GMT
            Not After : Jan  8 13:59:53 2025 GMT
        Subject: CN=48B3BA216625DA1F4F97B71CCDAEF36F3D755510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:2f:86:66:a9:f2:4e:67:5c:7a:5e:94:6e:
                    a4:ad:9b:8d:9a:93:f7:cc:94:23:3b:d2:a0:8f:d6:
                    be:43:a3:02:f5:dd:48:54:10:6d:a4:15:cb:7e:ff:
                    ca:8f:34:fb:21:de:ef:57:17:09:5c:44:b6:8d:78:
                    37:fd:5b:73:ba:bb:81:5d:39:78:9e:a9:8d:24:4d:
                    d1:69:44:44:22:85:84:e1:ee:a9:d0:2f:e3:e9:ec:
                    bf:67:1c:62:26:20:82:4f:96:b2:b6:11:e0:b9:9d:
                    69:4f:34:84:3f:74:9e:40:8b:0f:b2:7e:0c:11:06:
                    44:a4:d2:f5:2c:81:77:77:9b:a9:7d:57:74:58:85:
                    b9:b5:c5:bb:89:6f:51:ac:d0:5f:4c:cb:10:ef:e6:
                    9d:ad:52:cc:e5:ee:ca:62:b9:36:56:15:51:b3:5d:
                    c1:e8:50:9b:1c:b1:05:98:25:79:d5:1a:68:3d:68:
                    1c:e2:2a:91:d2:1e:45:0c:aa:bf:de:fa:48:e8:23:
                    be:2f:42:9a:c4:58:49:df:3a:8f:92:7a:9e:1a:9c:
                    25:d4:4a:9e:ae:5a:4d:16:40:90:8c:f1:1a:45:36:
                    10:15:97:2b:c8:20:ed:ea:c4:d3:b6:5e:70:df:dc:
                    94:e0:10:f6:98:b4:55:b6:ba:07:ed:99:9c:de:38:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B3:BA:21:66:25:DA:1F:4F:97:B7:1C:CD:AE:F3:6F:3D:75:55:10
            X509v3 Authority Key Identifier:
                keyid:D0:EF:0D:E2:C9:A8:B3:47:D2:F9:1A:1A:82:A7:B5:53:AF:6B:0A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EF0DE2C9A8B347D2F91A1A82A7B553AF6B0A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/3230302e33362e3139372e302f32342d3234203d3e20323731343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:95:8e:c2:e8:b5:df:df:70:61:fe:a8:d2:48:ed:ef:82:fb:
         4f:f5:ff:d5:25:ea:11:5b:7f:0c:7a:05:b0:a0:a1:89:d2:0f:
         aa:b4:6e:42:b1:ef:bb:60:18:84:f8:ab:47:7f:fc:a4:ef:bb:
         27:8c:f4:76:51:a0:b0:51:d0:18:10:15:a1:b8:0f:95:28:81:
         8b:10:45:be:e5:51:98:75:1a:24:74:e7:f2:45:2f:94:43:69:
         12:84:ab:68:e0:26:5f:e2:e7:fc:af:4a:45:a2:d8:d1:6f:66:
         c1:dc:04:d0:d5:93:dd:4f:58:e7:48:38:e1:eb:17:12:e4:ae:
         3c:26:e4:dc:e1:4a:6b:b5:51:7e:0f:8c:e4:18:7c:8c:2e:a7:
         93:68:c1:5a:e1:14:68:9e:70:f1:18:77:aa:e7:9f:50:36:25:
         85:1e:ff:11:a8:89:53:2b:55:59:ea:71:a8:a2:84:37:56:49:
         e8:78:81:ae:6d:cf:a3:44:33:ed:3a:b1:b7:17:63:f6:5a:28:
         65:2e:47:fd:38:44:b6:19:20:a1:e7:16:53:4f:c7:6c:61:47:
         55:3b:bc:a2:0f:04:ee:9f:a6:7f:e5:ac:0b:6d:b7:bd:e8:5a:
         77:10:71:fb:fa:b3:fe:06:b1:fc:96:90:3b:ff:68:c0:55:d8:
         a7:1c:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org