Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e38382e302f32332d3233203d3e20323730323735.roa
File:                     3230302e3132342e38382e302f32332d3233203d3e20323730323735.roa (raw, json)
Hash identifier:          acdjLBHf2Ucnik5uwy9EADgNwK9Ir5Pnc1kJqcNgHe0=
Subject key identifier:   9A:F3:1D:42:A7:5C:93:C3:DD:BB:B1:D4:F2:7B:8E:C0:7E:A4:C8:B7
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       4DF9809DF416A14579305A6A1DE8079CB2F7B944
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e38382e302f32332d3233203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:14:11 +0000
ROA not before:           Mon 26 Jun 2023 16:09:11 +0000
ROA not after:            Mon 24 Jun 2024 16:14:11 +0000
asID:                     270275
IP address blocks:        200.124.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f9:80:9d:f4:16:a1:45:79:30:5a:6a:1d:e8:07:9c:b2:f7:b9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:09:11 2023 GMT
            Not After : Jun 24 16:14:11 2024 GMT
        Subject: CN=9AF31D42A75C93C3DDBBB1D4F27B8EC07EA4C8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:f1:45:4c:b9:52:98:68:06:e2:8b:66:7b:
                    dc:26:b4:43:f7:a5:3b:83:a5:ce:1a:80:a8:6a:68:
                    6c:66:ed:08:ca:74:d2:92:7c:1e:43:a8:4d:2b:cd:
                    48:4d:fb:ee:f4:e8:32:b3:aa:41:6f:9f:b6:96:c0:
                    f2:f8:e7:6b:28:2c:58:09:05:f5:94:61:06:33:96:
                    99:a0:15:3b:63:24:df:e4:1d:18:bb:2a:54:54:46:
                    82:ab:86:25:8e:79:e8:12:64:5e:e1:80:12:1a:b4:
                    7d:17:54:2f:3d:11:e9:10:36:e2:03:f1:f9:60:3f:
                    fa:ef:c0:7a:44:18:55:86:ee:ba:81:fd:ff:e9:81:
                    1b:b7:5b:f3:7b:bf:28:12:26:48:4f:1b:9f:d3:81:
                    d9:17:f3:1e:d6:00:31:9e:39:6d:57:c9:8b:37:4f:
                    97:44:97:f9:9f:2c:49:9b:f3:1e:63:1f:5d:ec:5f:
                    d9:ea:03:2a:0b:87:9d:0b:38:87:1f:2d:74:01:ec:
                    b0:5a:14:ef:b9:ab:a1:a4:cc:36:87:8f:e3:e7:5d:
                    da:96:90:50:e4:95:1f:25:e6:ce:4c:1e:8e:d7:56:
                    3b:b4:9b:06:0a:e8:e4:fd:a1:41:9d:6d:e8:89:81:
                    dd:c2:56:a1:32:ca:11:00:25:e4:6a:8a:ab:c1:1b:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:1D:42:A7:5C:93:C3:DD:BB:B1:D4:F2:7B:8E:C0:7E:A4:C8:B7
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e38382e302f32332d3233203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:8e:58:af:8f:af:ef:a1:ee:6a:f0:9b:5f:5b:13:2c:c4:66:
         e6:2e:77:0d:69:91:73:e0:e9:55:26:47:2f:3f:d2:fc:5d:74:
         5f:d2:7e:76:f2:df:4c:72:c1:2f:09:d7:e2:2d:f0:0c:ce:18:
         9a:e8:8e:0f:fe:a6:d1:f4:3e:6f:09:51:71:23:ef:e1:fe:79:
         fc:50:02:00:0a:2b:6f:8d:0e:48:d9:71:c1:d6:98:d4:f7:67:
         ab:36:20:d7:1e:cf:00:6d:62:2a:70:24:f9:18:e1:0a:78:f8:
         73:c8:73:31:8f:34:f5:e0:e1:d2:ab:32:43:93:b4:8e:ff:f2:
         4f:65:cd:18:3c:37:3c:93:78:23:e6:08:a6:ac:0d:32:1a:98:
         1a:94:ce:d5:f2:72:af:1b:13:82:bd:a7:db:07:63:8c:9c:b6:
         f7:6d:3b:57:50:3d:d3:19:2e:bf:96:b4:0b:27:5c:cb:b2:fc:
         05:c2:a4:f4:b5:97:30:e7:44:96:0d:a7:f1:f6:3e:43:fa:19:
         51:95:53:ce:5d:be:e9:b8:32:81:9c:7c:c3:9e:06:59:40:2a:
         22:ce:d4:77:4b:93:83:db:b3:60:91:74:e2:3a:67:a9:68:f5:
         e8:1b:3b:6b:e0:68:72:e8:57:5b:82:61:7e:93:b7:24:b2:ab:
         21:9a:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org