Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/3230302e37312e36362e302f32332d3233203d3e20323636313931.roa
File:                     3230302e37312e36362e302f32332d3233203d3e20323636313931.roa (raw, json)
Hash identifier:          JwANuTlFvTKrn1AdOxEoO/uqcFVI9/dx4xeWoLoczc8=
Subject key identifier:   F6:F4:4E:9E:D7:AA:DB:98:28:02:9B:CF:D9:2F:18:41:6E:E3:3E:A2
Certificate issuer:       /CN=A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF
Certificate serial:       585417D461C0B808BB18CA7F8D1295DC1F1A3F1F
Authority key identifier: A1:6B:CE:F6:31:94:7F:5E:E2:C8:F6:80:7E:B5:1C:84:AB:1F:9C:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/3230302e37312e36362e302f32332d3233203d3e20323636313931.roa
Signing time:             Wed 09 Aug 2023 18:00:00 +0000
ROA not before:           Wed 09 Aug 2023 17:55:00 +0000
ROA not after:            Wed 07 Aug 2024 18:00:00 +0000
asID:                     266191
IP address blocks:        200.71.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:54:17:d4:61:c0:b8:08:bb:18:ca:7f:8d:12:95:dc:1f:1a:3f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF
        Validity
            Not Before: Aug  9 17:55:00 2023 GMT
            Not After : Aug  7 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:21:42:35:0c:e4:6f:7c:19:46:a2:e9:39:
                    a8:c5:1d:14:b8:ff:ed:1b:fa:97:81:b2:c2:f6:b2:
                    9b:8d:53:d4:31:43:67:96:50:a0:74:b9:97:b2:a0:
                    2f:fe:3c:93:60:4b:dd:8f:bc:2e:40:eb:1d:5f:7e:
                    a0:de:fd:ec:25:65:db:bd:de:ed:04:1b:6e:17:ad:
                    fb:88:5e:1b:db:aa:5b:49:64:dc:24:ef:06:56:08:
                    54:f0:09:4e:c0:77:59:f8:71:99:26:5a:bb:45:58:
                    2c:f4:b8:6e:7c:e2:c2:99:7d:54:35:6e:e9:b8:a7:
                    b4:54:29:7b:f7:1c:ff:06:b2:5d:5b:10:d6:01:cd:
                    99:8f:43:12:0e:0c:b3:5b:53:7c:99:9f:32:fa:77:
                    4c:18:1a:f2:cd:ec:40:66:a7:fc:92:38:2e:74:ea:
                    93:0b:44:7d:6f:71:60:5c:13:3c:2a:5d:32:80:70:
                    1f:ed:ab:0c:f1:9b:f4:c5:85:54:6c:9c:75:c7:cd:
                    3a:13:fd:75:05:4b:93:79:65:76:3f:e5:cd:d6:7d:
                    d2:d7:06:6c:d3:62:e5:d5:e4:c1:b6:e8:50:b4:2e:
                    0f:92:2e:92:ce:d6:19:89:2f:b1:b5:d3:00:ff:bc:
                    a6:b8:84:e6:9e:a1:08:2e:12:3c:f8:08:9c:4f:4d:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F4:4E:9E:D7:AA:DB:98:28:02:9B:CF:D9:2F:18:41:6E:E3:3E:A2
            X509v3 Authority Key Identifier:
                keyid:A1:6B:CE:F6:31:94:7F:5E:E2:C8:F6:80:7E:B5:1C:84:AB:1F:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/3230302e37312e36362e302f32332d3233203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:eb:02:57:93:b8:36:09:30:07:33:b4:4c:a7:ac:b5:66:2f:
         99:7d:88:8e:f8:66:3d:f2:dc:43:0b:1b:72:35:3e:cd:2d:16:
         70:dc:95:e5:61:87:0c:50:01:79:f7:aa:53:82:14:86:58:3a:
         e4:c2:96:5b:ea:45:e8:e0:f2:04:06:fb:b9:49:be:f5:55:60:
         13:27:c1:f6:54:dd:e9:28:3a:2d:cc:b4:e0:47:f2:57:30:2d:
         0b:2b:73:9b:11:00:43:cd:89:c8:75:86:62:31:c8:0d:8d:64:
         c4:cc:a5:3c:67:92:1d:ff:9a:1d:c8:0d:07:b5:69:b6:24:aa:
         2a:ce:06:a7:a6:d1:ba:82:75:68:9b:8d:13:c9:44:71:26:be:
         8a:7c:38:af:17:8f:64:d2:b8:d7:11:ef:18:69:2b:10:41:ee:
         70:d1:3f:96:76:6c:d0:be:b9:f1:01:c5:32:ee:af:24:e5:c2:
         6a:23:3d:ea:f7:3b:30:51:e9:28:dc:dd:20:b9:7c:55:3d:5a:
         bc:b5:26:d4:94:7d:53:fb:36:e2:08:cf:ce:da:bf:5e:21:06:
         bb:eb:60:23:c3:54:de:26:de:ec:1c:86:ff:0d:3b:4a:f2:ee:
         c6:7a:18:f0:a5:58:cb:18:8e:09:9c:ae:bb:e5:c4:6b:a4:d4:
         15:00:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org