Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e38382e302f32342d3234203d3e20323730323735.roa
File:                     3230302e3132342e38382e302f32342d3234203d3e20323730323735.roa (raw, json)
Hash identifier:          6K+TXyX3fxkC3at+aKpw0EekFvoQh77S1W37n9pefAY=
Subject key identifier:   FE:2B:80:78:1E:25:3B:FA:47:E8:55:2A:D7:14:A4:34:20:0F:ED:1A
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       6CC71CBBB4B71515C026E34A38BB056E2FCB5E1C
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e38382e302f32342d3234203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:14:24 +0000
ROA not before:           Mon 26 Jun 2023 16:09:24 +0000
ROA not after:            Mon 24 Jun 2024 16:14:24 +0000
asID:                     270275
IP address blocks:        200.124.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c7:1c:bb:b4:b7:15:15:c0:26:e3:4a:38:bb:05:6e:2f:cb:5e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:09:24 2023 GMT
            Not After : Jun 24 16:14:24 2024 GMT
        Subject: CN=FE2B80781E253BFA47E8552AD714A434200FED1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:53:fd:3d:8f:e6:84:34:e8:d6:07:38:0e:
                    a6:d2:7c:d4:17:9f:d2:2d:70:aa:05:51:66:d3:f5:
                    c2:cd:d7:96:26:fb:f3:83:bc:ef:6f:4e:82:24:5f:
                    2b:d2:cc:95:50:94:7f:44:e9:4a:7f:9e:40:c1:ae:
                    5a:34:44:03:d4:e3:af:34:c0:4a:fd:64:66:75:96:
                    c6:74:28:d1:65:e4:27:3c:ef:34:a9:11:6a:56:bd:
                    5b:fe:61:ad:ae:6f:9f:9e:90:c6:4d:cd:f7:da:46:
                    d0:01:6f:78:8f:89:4a:53:c2:0f:cc:ea:67:47:91:
                    e8:0a:ef:8c:c2:81:b5:d2:5f:29:65:a7:bd:76:a4:
                    53:95:24:a8:1c:e0:15:d3:9a:da:01:54:ca:64:ac:
                    b5:36:67:eb:bf:f9:29:18:4f:95:c8:9e:9f:1b:27:
                    bb:43:b3:29:6d:1d:bd:25:7f:a8:ea:c4:b7:db:fd:
                    5e:c1:8d:82:fd:fd:0c:a7:9b:c1:6a:49:7a:db:ed:
                    c7:04:65:5b:5a:47:aa:77:b7:45:f1:93:b9:db:f4:
                    32:88:f1:0f:f8:b1:ed:4e:1b:e4:cf:15:25:d3:9c:
                    57:d5:cf:12:f5:c3:6f:ac:d4:64:99:85:8e:63:1b:
                    90:66:44:4c:62:0f:08:04:20:fb:14:0c:0f:ce:38:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:80:78:1E:25:3B:FA:47:E8:55:2A:D7:14:A4:34:20:0F:ED:1A
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e38382e302f32342d3234203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:83:e3:91:ff:5e:c6:7a:0a:5f:f1:6b:3b:3c:05:e8:e3:f1:
         1f:d0:e7:a3:7a:8b:34:48:ca:00:87:f6:19:76:8a:0a:75:e6:
         84:5a:38:04:42:48:bc:27:95:a1:b0:24:11:dd:84:1d:4c:12:
         92:bb:54:3e:c1:79:67:38:d8:d1:b4:3f:11:a8:65:c0:4a:f3:
         86:06:9c:e6:bd:47:74:9c:57:68:a9:53:57:11:4b:ca:e5:01:
         b5:8e:b7:fa:12:bc:22:f8:e4:e3:50:ce:c1:d7:52:5c:c5:61:
         b6:22:5c:b7:b7:fe:24:1e:5a:97:11:06:3b:b6:1f:29:a7:6c:
         69:38:a0:fd:de:72:66:75:01:47:16:ee:ad:a5:e9:e1:ca:de:
         90:d8:59:57:0a:dc:6c:48:bf:d5:e8:3e:c4:01:83:25:98:02:
         bc:2a:38:3a:88:25:3a:98:85:9b:95:1d:cd:b6:75:62:e7:c6:
         0e:d1:12:13:f6:ba:74:a7:57:93:b9:6c:21:bb:0e:b4:0a:15:
         88:7d:df:50:43:0b:f9:3a:e1:ed:86:f5:2b:b4:26:08:3c:8c:
         57:5a:37:54:89:6f:d9:6d:8b:f3:d2:5c:43:93:39:d8:6b:33:
         33:66:a4:79:8f:d3:b1:97:c5:94:df:bf:3d:7a:99:2e:1a:28:
         c8:74:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org