Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233382e302e302f31382d3138203d3e2032373136.roa
File:                     3230302e3233382e302e302f31382d3138203d3e2032373136.roa (raw, json)
Hash identifier:          IOXQ+qeE2AhEH3hkgSaOzjCPdfgU++boibyFF43RebE=
Subject key identifier:   D6:DC:4D:D5:C4:CE:8D:2E:BD:BD:45:C2:67:25:5D:41:82:95:0C:19
Certificate issuer:       /CN=71712024E7C984B82DF5E8204BB161EDF9843B50
Certificate serial:       55FA264A646512734963D53F21DE9D30564A73D2
Authority key identifier: 71:71:20:24:E7:C9:84:B8:2D:F5:E8:20:4B:B1:61:ED:F9:84:3B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71712024E7C984B82DF5E8204BB161EDF9843B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233382e302e302f31382d3138203d3e2032373136.roa
Signing time:             Fri 07 Jul 2023 15:00:00 +0000
ROA not before:           Fri 07 Jul 2023 14:55:00 +0000
ROA not after:            Fri 05 Jul 2024 15:00:00 +0000
asID:                     2716
IP address blocks:        200.238.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fa:26:4a:64:65:12:73:49:63:d5:3f:21:de:9d:30:56:4a:73:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71712024E7C984B82DF5E8204BB161EDF9843B50
        Validity
            Not Before: Jul  7 14:55:00 2023 GMT
            Not After : Jul  5 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:c3:1c:72:91:fb:8a:cb:93:24:f6:78:c8:
                    3e:3d:76:75:b7:46:20:e0:43:33:d6:11:64:5a:38:
                    f5:6d:84:a9:06:59:c3:f6:97:fd:91:20:17:cc:e8:
                    4a:84:af:c7:58:e1:f1:bf:1b:35:05:b4:a5:96:a1:
                    5a:bb:5b:61:6d:19:81:65:cc:2e:66:b4:69:df:ff:
                    32:00:00:a3:ce:df:be:df:be:74:a6:01:e3:3a:86:
                    55:52:18:89:36:46:bc:0d:ab:60:74:e5:64:53:28:
                    44:8a:50:66:26:ce:d9:43:d0:e4:ae:b4:b9:de:9b:
                    85:72:6c:18:61:3d:3c:3c:a3:f1:46:4a:b3:72:46:
                    3c:85:f7:aa:e3:25:02:c2:ae:d7:05:02:0a:9f:9c:
                    87:e5:7f:c0:39:37:f2:49:52:f7:42:92:6e:9c:e1:
                    20:0f:7d:22:1d:d9:3d:42:0f:4a:3c:ef:d2:70:1c:
                    15:4a:0f:83:e8:e5:24:d7:a8:69:88:ac:4f:f4:62:
                    bf:a8:8a:bd:c0:f8:10:f1:1f:98:32:6a:4a:55:1f:
                    a7:1f:07:74:a0:00:71:26:f1:9a:c1:2b:8d:dd:2b:
                    da:ff:94:c3:5c:81:f8:dc:c4:8f:2d:75:ad:92:92:
                    57:85:48:00:71:20:eb:92:6f:ac:23:34:b8:35:d8:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DC:4D:D5:C4:CE:8D:2E:BD:BD:45:C2:67:25:5D:41:82:95:0C:19
            X509v3 Authority Key Identifier:
                keyid:71:71:20:24:E7:C9:84:B8:2D:F5:E8:20:4B:B1:61:ED:F9:84:3B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/71712024E7C984B82DF5E8204BB161EDF9843B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71712024E7C984B82DF5E8204BB161EDF9843B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233382e302e302f31382d3138203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:da:65:81:88:ab:df:e1:65:16:18:5f:5f:cd:f1:f6:dd:80:
         83:e3:8c:1a:0d:21:89:75:fe:70:81:85:ac:ae:17:a4:7c:8b:
         42:59:44:b9:e6:6e:f0:4b:ba:29:7d:54:45:81:ef:3c:da:0f:
         96:aa:69:df:c3:e6:04:9e:84:46:05:1a:a1:eb:3c:22:c5:ff:
         07:e6:f0:9d:1d:39:e0:b4:8e:1c:e0:05:16:71:19:fd:24:de:
         1f:8c:ce:40:09:2d:42:6d:a8:e9:6e:cf:2f:27:8b:3e:37:c7:
         44:b1:ff:6e:a3:74:fb:27:96:90:74:72:b8:3d:a8:e1:a5:97:
         5f:a5:68:09:75:80:2f:e2:41:ef:1b:1f:91:07:ca:2a:f5:49:
         d9:c0:44:75:55:a9:30:b5:9b:21:05:fd:9c:4f:b6:bf:7b:8f:
         fc:6e:bf:a0:04:57:9a:55:5b:7d:cc:44:c2:7a:dd:d4:6f:30:
         f9:5b:97:06:07:fb:93:a4:2e:0a:b2:6b:29:de:20:f9:01:69:
         27:dc:3e:12:e4:63:52:ca:62:36:d1:f3:a9:a6:71:6b:dd:f9:
         bf:c6:f4:c5:c2:72:02:b0:d5:8f:55:f4:22:f3:20:24:4b:ca:
         54:d3:af:99:cd:69:99:48:80:89:7b:7a:19:94:80:fe:8a:34:
         87:a7:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org