Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32322d3232203d3e20323731323437.roa
File:                     3230302e3130362e3231322e302f32322d3232203d3e20323731323437.roa (raw, json)
Hash identifier:          ajO8jmUuj3JkGVhq+yIktgcuSJM043nrxCgOCRAdT38=
Subject key identifier:   A9:1B:EE:8F:B3:95:B7:91:2C:CC:0A:29:B2:B2:06:57:B1:D6:FA:7B
Certificate issuer:       /CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
Certificate serial:       1054B77810B9A6EDC712DBC2C779D56754382805
Authority key identifier: 97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32322d3232203d3e20323731323437.roa
Signing time:             Wed 15 Feb 2023 11:00:00 +0000
ROA not before:           Wed 15 Feb 2023 10:55:00 +0000
ROA not after:            Wed 14 Feb 2024 11:00:00 +0000
asID:                     271247
IP address blocks:        200.106.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:54:b7:78:10:b9:a6:ed:c7:12:db:c2:c7:79:d5:67:54:38:28:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Validity
            Not Before: Feb 15 10:55:00 2023 GMT
            Not After : Feb 14 11:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:fe:94:57:99:b9:99:16:0f:e6:71:b3:8d:
                    87:0b:d7:a1:09:c0:f8:00:25:16:18:a1:72:58:01:
                    0e:9d:a0:27:f3:91:e8:7b:c0:f1:c5:30:cc:ca:fe:
                    7b:42:66:a6:41:ff:10:a6:c2:c0:b4:54:03:37:2b:
                    db:16:d6:d5:2e:f7:a8:d9:e2:69:4b:6c:34:21:a7:
                    39:64:ac:a5:3c:89:aa:55:c1:93:9a:76:b1:34:c7:
                    d8:97:35:43:a6:73:da:38:1a:18:73:f8:1d:bf:dd:
                    71:b6:e3:ed:34:84:7e:a5:87:bb:59:b6:7c:13:95:
                    50:52:2f:ba:87:4c:f0:94:f8:b8:a4:33:20:5d:b3:
                    04:16:49:66:f8:84:0d:e3:f0:9b:1c:02:20:a5:7c:
                    c1:62:a9:00:93:5a:68:b3:c5:30:9c:ed:28:ce:43:
                    68:eb:99:4f:a3:5e:79:21:fc:c4:37:f6:5f:22:5e:
                    45:42:d2:2c:0b:5f:d0:16:71:20:d7:83:e3:04:a6:
                    17:82:c4:15:cf:2f:91:a5:ea:fa:42:3d:ad:6b:4b:
                    1b:20:19:0b:a8:d3:4d:0e:06:0c:c6:be:41:66:e8:
                    1d:66:53:ee:28:08:b1:99:18:83:04:bc:3c:46:68:
                    fb:20:3c:06:74:62:d3:54:8a:86:5d:c4:8b:07:8c:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1B:EE:8F:B3:95:B7:91:2C:CC:0A:29:B2:B2:06:57:B1:D6:FA:7B
            X509v3 Authority Key Identifier:
                keyid:97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32322d3232203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:1c:35:b4:58:85:4f:9d:67:2a:9f:9f:5a:df:04:00:38:
         a8:79:a7:da:50:66:7b:fa:4d:4c:84:55:94:75:51:cb:ed:9c:
         04:12:13:0a:1e:e7:23:65:14:04:46:20:3b:a1:14:78:bd:58:
         40:63:b4:0f:3f:64:f1:29:d1:a7:17:5b:b6:f6:03:28:8b:71:
         31:12:e4:23:b1:23:fa:55:d9:15:d0:ff:8c:e1:fb:dc:a9:03:
         f3:e0:99:d2:35:61:a3:53:7c:e4:bd:63:cd:89:14:43:3f:ff:
         d8:d4:fd:c9:92:10:8b:8f:1c:1d:6d:f7:2e:64:95:f3:30:5c:
         84:18:19:71:b0:33:aa:f1:36:29:36:3a:20:ba:b2:6f:15:04:
         4b:fd:8e:a9:3e:4c:9d:85:cf:96:0c:ef:f1:bc:ac:61:e5:87:
         7c:4a:7a:f9:d3:3e:8d:9e:d8:ac:84:a6:fc:39:ec:3d:d5:cc:
         02:18:33:cf:ef:75:26:ce:74:32:b9:fb:f4:da:7e:bb:19:13:
         de:50:e5:5e:3c:37:e1:27:79:cc:ad:31:b3:27:0e:0f:32:d7:
         3e:80:c6:d9:26:9c:1e:0d:cc:1e:15:c2:cd:87:a6:cc:b2:b6:
         82:45:c0:5a:d5:44:04:ee:54:29:19:62:23:df:34:78:e8:c5:
         d1:34:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org