Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa
File:                     3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa (raw, json)
Hash identifier:          a21QwKT8FKPWOihCUq7FGcEXm6FbkqPA+WIIA3KjWkM=
Subject key identifier:   27:9D:26:54:FC:61:97:27:F1:44:34:C6:C3:73:25:C6:C8:2C:45:CC
Certificate issuer:       /CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
Certificate serial:       358DE79841FB4E5C0FCDD4AF858F03F9CEDF7930
Authority key identifier: 8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa
Signing time:             Fri 16 Feb 2024 18:38:37 +0000
ROA not before:           Fri 16 Feb 2024 18:33:37 +0000
ROA not after:            Fri 14 Feb 2025 18:38:37 +0000
asID:                     270615
IP address blocks:        200.215.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8d:e7:98:41:fb:4e:5c:0f:cd:d4:af:85:8f:03:f9:ce:df:79:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
        Validity
            Not Before: Feb 16 18:33:37 2024 GMT
            Not After : Feb 14 18:38:37 2025 GMT
        Subject: CN=279D2654FC619727F14434C6C37325C6C82C45CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:64:18:76:df:0f:c3:18:08:21:44:59:f8:
                    da:ca:d5:26:1a:69:4a:d7:eb:33:35:92:a7:9c:95:
                    aa:ef:84:a1:68:24:89:ad:5d:79:cc:29:76:a4:c8:
                    9a:ff:09:89:5e:ff:0b:f3:57:d7:e0:78:bb:58:28:
                    08:38:41:7a:b3:ca:b8:72:d0:8c:1c:cd:ea:67:22:
                    eb:04:58:4e:0c:7c:fb:a6:e3:20:fa:99:79:bb:1a:
                    9b:fc:4a:22:52:cc:99:ff:a9:a2:2e:4e:bd:1f:da:
                    62:aa:65:e9:43:37:55:54:c4:ef:17:c2:1a:3e:70:
                    d8:62:21:33:38:5e:d6:5f:ed:47:58:a0:92:b3:4d:
                    27:c8:6d:de:fd:0f:ee:c9:98:0e:3b:9c:9b:ed:6b:
                    01:6c:0b:b4:a8:71:4e:54:11:f8:7d:0f:da:cf:f5:
                    58:0b:50:90:c1:8c:f1:e0:6d:0a:e4:04:7b:94:90:
                    aa:50:39:b7:5b:bd:b2:6b:59:57:fd:72:80:93:27:
                    5e:f2:8b:6e:93:8d:0a:e0:4d:13:d9:3f:6f:5f:6b:
                    67:73:df:d6:4f:3c:b8:1c:84:ba:3b:9f:d8:90:65:
                    1d:f4:b0:69:d6:45:23:0a:95:62:9b:53:86:cd:05:
                    1b:49:e3:60:e9:56:bc:b7:bc:2d:1a:de:af:a1:9f:
                    c1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9D:26:54:FC:61:97:27:F1:44:34:C6:C3:73:25:C6:C8:2C:45:CC
            X509v3 Authority Key Identifier:
                keyid:8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:93:1d:82:e7:59:36:aa:8c:d1:a1:6c:82:e1:b6:fd:db:c9:
         e5:dd:fe:59:e9:71:50:59:59:ed:1f:e6:59:bd:f2:27:09:eb:
         4b:ad:24:9f:c1:21:9f:5e:f2:18:d9:c3:77:90:5c:2d:49:5f:
         86:00:90:96:a0:db:e4:44:a9:1d:30:96:88:cd:9c:2a:2f:8a:
         49:e0:af:54:39:60:02:b5:9d:4d:22:6a:14:5c:1b:03:08:f3:
         59:dc:77:b0:e3:e9:77:0a:41:7a:03:eb:47:9a:b2:e2:b9:3d:
         11:7e:d2:3e:ec:3d:6d:e7:2f:ab:87:c7:66:9b:45:ac:ea:b5:
         d6:57:a8:72:c2:12:1e:53:55:ea:7d:2b:55:f5:6a:a2:37:d0:
         5e:4d:23:f3:24:9e:67:0b:3a:f5:db:fd:09:9d:64:63:00:f1:
         83:87:f5:9a:c2:c9:65:80:56:8f:4f:17:14:9b:45:d8:76:86:
         c0:3f:55:37:6e:4b:09:06:a8:49:0e:66:fc:8e:78:fa:a2:1d:
         4b:7b:71:81:51:a8:cc:01:7b:33:48:ac:f1:57:90:68:a6:e5:
         50:70:55:4f:2b:d9:c5:eb:e4:06:73:82:de:16:e9:24:3c:dc:
         99:8b:cd:a1:9d:58:d3:70:d7:57:0d:9e:49:eb:3c:4b:f7:b5:
         6a:47:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org