Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235332e302f32342d3234203d3e20323730363135.roa
File:                     3230302e3231352e3235332e302f32342d3234203d3e20323730363135.roa (raw, json)
Hash identifier:          reqarpVbdd+G64EdgSEe6Alczj1y+v2wHNX3OigwTtw=
Subject key identifier:   BD:1E:27:A3:08:8B:EA:3E:A6:E3:94:E1:01:3B:E4:8F:C0:24:BE:14
Certificate issuer:       /CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
Certificate serial:       3BA25328506714ECF5C3809B97FB9A6B70E33CAE
Authority key identifier: 8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235332e302f32342d3234203d3e20323730363135.roa
Signing time:             Fri 16 Feb 2024 18:38:40 +0000
ROA not before:           Fri 16 Feb 2024 18:33:40 +0000
ROA not after:            Fri 14 Feb 2025 18:38:40 +0000
asID:                     270615
IP address blocks:        200.215.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a2:53:28:50:67:14:ec:f5:c3:80:9b:97:fb:9a:6b:70:e3:3c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
        Validity
            Not Before: Feb 16 18:33:40 2024 GMT
            Not After : Feb 14 18:38:40 2025 GMT
        Subject: CN=BD1E27A3088BEA3EA6E394E1013BE48FC024BE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:61:f0:4c:d8:0e:1e:d6:72:50:e7:55:25:
                    33:2b:ee:0d:08:4a:47:f2:51:93:39:91:4a:85:63:
                    bf:48:68:07:6d:bc:f1:31:85:65:95:03:04:6f:9f:
                    b7:9a:1f:1e:c9:6c:cc:78:5d:ce:95:45:fa:49:88:
                    38:3b:ff:cc:30:1a:90:e6:a2:b6:1c:9b:3c:8d:e0:
                    be:68:5b:09:f3:81:ff:78:88:2e:d4:e8:f7:d0:08:
                    9d:30:ea:91:0b:4d:5e:42:5d:47:ba:c5:81:ca:dc:
                    5b:f0:d1:48:95:b5:04:76:4a:42:71:c3:5c:5d:35:
                    07:9a:bf:1d:a0:4c:cf:13:ae:48:a8:7d:6e:f4:eb:
                    30:97:93:d6:fc:78:b5:2b:a2:f2:f6:d2:43:e4:14:
                    9d:42:98:59:97:03:f9:bc:d8:2e:b5:85:36:85:de:
                    6f:86:79:5c:6c:74:be:30:fb:0e:a0:fd:07:b5:78:
                    06:ee:3b:66:c8:69:10:16:fa:04:8a:15:c9:0c:04:
                    22:2a:b3:4c:c9:48:72:e9:6c:3f:fc:31:4b:80:a2:
                    06:69:01:64:49:77:d3:53:2c:07:c2:02:99:5f:9f:
                    e3:c4:be:81:72:4f:23:42:df:f8:05:1a:4f:2b:41:
                    8e:8c:3c:e8:84:2c:28:35:04:4d:11:8b:a5:4e:8d:
                    ef:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1E:27:A3:08:8B:EA:3E:A6:E3:94:E1:01:3B:E4:8F:C0:24:BE:14
            X509v3 Authority Key Identifier:
                keyid:8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235332e302f32342d3234203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:e8:5b:06:98:6a:61:92:be:d2:5c:e7:59:4d:4b:69:88:
         d1:6f:2d:1b:63:43:6e:5a:47:cc:88:39:70:af:c0:58:2f:11:
         7a:6f:83:0e:66:67:e3:39:94:b9:16:0c:f3:b3:f7:79:be:01:
         d3:85:19:ba:c4:0f:cb:5f:72:8e:eb:12:c5:1f:02:e4:6a:f4:
         26:da:99:9b:0e:6d:14:b9:39:11:23:07:b7:ed:b9:13:d5:5a:
         a0:c1:9b:2b:24:d0:59:78:43:f0:0e:85:ad:3c:49:c6:a0:74:
         59:fc:cd:37:08:21:4a:3f:1b:8f:39:6f:69:c2:5d:10:e7:cf:
         36:42:66:69:06:2b:26:52:25:b9:e7:67:4f:78:ce:6b:fa:6c:
         50:6f:9f:ee:73:a6:28:cf:5c:66:af:56:84:12:d1:a5:a1:cd:
         17:5c:27:03:fe:4b:fe:34:88:1c:11:47:cf:2e:a0:a0:26:41:
         4c:12:01:6a:5a:9f:4d:34:a3:ae:08:5f:f5:fa:ed:c7:06:49:
         d4:a4:96:8e:79:c0:b2:4b:37:f8:21:18:d2:7a:49:d9:36:7d:
         99:60:24:c1:4e:b3:db:f5:b1:48:5c:bc:1f:66:d4:88:8f:bd:
         d7:2d:1f:a2:9b:1e:ca:d4:0c:0d:44:cd:7c:2b:9e:16:56:26:
         82:5b:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org