Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e39312e302f32342d3234203d3e20323730323735.roa
File:                     3230302e3132342e39312e302f32342d3234203d3e20323730323735.roa (raw, json)
Hash identifier:          BJuo+UgLJ3lp3sY0QQ9Fd7g/J3QmC076mBKWMa02ni4=
Subject key identifier:   2D:72:D6:BA:14:D4:8A:B4:5A:02:E9:A0:0D:D7:41:33:ED:03:F2:12
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       410412642023FB159E8C32D116AFB9C2D7DB7EF3
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e39312e302f32342d3234203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:14:37 +0000
ROA not before:           Mon 26 Jun 2023 16:09:37 +0000
ROA not after:            Mon 24 Jun 2024 16:14:37 +0000
asID:                     270275
IP address blocks:        200.124.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:04:12:64:20:23:fb:15:9e:8c:32:d1:16:af:b9:c2:d7:db:7e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:09:37 2023 GMT
            Not After : Jun 24 16:14:37 2024 GMT
        Subject: CN=2D72D6BA14D48AB45A02E9A00DD74133ED03F212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:3f:ee:e9:f6:55:72:17:42:70:5a:f7:f9:
                    af:23:38:c4:43:f8:2a:a9:a1:e6:ab:3a:3d:f0:9d:
                    fa:9c:13:60:cb:99:b0:a1:23:16:82:ff:77:d2:b0:
                    f1:4f:7f:ac:4e:ef:f7:40:dc:2a:a4:47:d9:76:ad:
                    91:6d:4b:3d:d5:ff:3e:b5:8a:79:ec:40:fc:ab:1e:
                    81:20:1b:3c:99:1b:ca:69:43:4e:8f:13:25:ec:eb:
                    5e:51:b8:d6:66:7e:ff:0a:52:61:74:d5:56:1e:a1:
                    86:46:3e:8a:8f:3f:8d:41:21:17:f5:ce:6b:2f:ff:
                    37:de:20:a8:28:85:f3:54:05:1a:eb:cf:81:87:c3:
                    6c:d8:ca:de:92:e5:25:3f:7a:ae:18:a1:b5:9f:b8:
                    33:af:60:b3:60:00:f1:db:39:68:4e:e6:2e:de:ed:
                    41:8b:ed:29:4b:71:ea:d0:2f:a5:8f:2c:4f:0e:9c:
                    5c:95:e7:15:df:28:7a:a5:39:44:38:6e:eb:6a:db:
                    60:80:9d:7a:5e:22:4c:ac:bc:02:08:a5:33:61:7f:
                    61:b3:ce:01:3f:83:4b:fd:9a:83:52:7d:0d:70:06:
                    ad:90:d4:1e:f1:a8:e3:63:8b:56:3d:a6:ed:a2:3c:
                    87:5b:8c:10:d1:1f:81:40:35:aa:8e:3c:71:1d:ec:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:72:D6:BA:14:D4:8A:B4:5A:02:E9:A0:0D:D7:41:33:ED:03:F2:12
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e39312e302f32342d3234203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:c1:15:38:66:ee:1d:c4:96:65:50:e8:65:fd:2b:0b:db:b7:
         7d:7e:7d:12:19:90:ad:7d:bd:fe:0e:c3:8c:f3:96:4d:0e:af:
         74:58:d6:d5:9d:92:50:27:84:b6:73:f1:e7:63:eb:53:a2:fb:
         c4:10:53:13:9d:b1:e6:7c:80:c7:e9:27:f7:80:d0:83:2e:f9:
         aa:11:fb:e0:91:ee:5f:97:bc:01:b0:83:0d:f3:5c:58:83:1c:
         66:e4:19:4b:d0:d0:19:3b:5d:82:aa:98:d8:38:6f:0c:d6:d4:
         4f:67:83:5c:61:e2:83:ba:54:9d:fb:f6:78:81:29:35:f0:96:
         d2:f5:9b:3b:f5:6e:91:3a:38:8f:41:78:ff:d5:1a:36:6d:8f:
         60:34:0b:cf:32:d1:0f:d2:88:a2:52:fd:3d:2d:21:bb:66:ce:
         38:cc:b5:39:11:48:58:fe:02:c0:c6:03:38:20:d6:81:4b:4a:
         47:0c:57:a8:4f:23:73:be:fc:ed:96:e2:82:3f:22:f2:5a:ca:
         32:90:f9:02:bb:8c:80:59:2d:1f:fa:89:43:ec:32:c6:66:e9:
         15:c2:7e:bb:05:1d:d2:f6:3c:1b:7d:a4:e5:b9:d6:e8:1e:74:
         df:13:e6:43:92:f3:a2:48:d8:c0:5f:6c:f6:f3:86:1e:a1:8a:
         b9:9e:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org