Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32322d3234203d3e20323731323437.roa
File:                     3230302e3130362e3231322e302f32322d3234203d3e20323731323437.roa (raw, json)
Hash identifier:          Z1VQByE1SNMqm7QSM4EQo3GoKVjK8IZKFVgvpgID9yQ=
Subject key identifier:   C4:AC:5C:88:86:41:1C:1C:87:BC:AF:4A:84:0C:F9:0C:C8:47:71:F0
Certificate issuer:       /CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
Certificate serial:       67AAD8CE8DD1EDFD2BFF28F2ADBF91FC09EC6806
Authority key identifier: 97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32322d3234203d3e20323731323437.roa
Signing time:             Thu 24 Aug 2023 11:23:51 +0000
ROA not before:           Thu 24 Aug 2023 11:18:51 +0000
ROA not after:            Thu 22 Aug 2024 11:23:51 +0000
asID:                     271247
IP address blocks:        200.106.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:aa:d8:ce:8d:d1:ed:fd:2b:ff:28:f2:ad:bf:91:fc:09:ec:68:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Validity
            Not Before: Aug 24 11:18:51 2023 GMT
            Not After : Aug 22 11:23:51 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:59:c7:ee:cb:5a:3c:96:81:af:3b:19:1a:
                    e4:4c:10:9d:20:1c:bc:9a:f4:34:0a:81:91:d1:2e:
                    69:df:08:23:03:c3:18:87:5f:06:13:65:af:fa:89:
                    11:7d:ba:2f:89:2d:27:21:35:a0:3a:71:0c:08:11:
                    07:1d:d5:38:0f:37:22:ce:00:70:66:d8:65:ad:93:
                    fe:18:03:cc:ef:2a:89:ee:80:c0:3d:34:46:cf:53:
                    5f:c7:23:97:3f:7f:37:ca:87:3f:b4:fc:0b:1b:dd:
                    be:16:ce:50:77:82:95:af:f2:3d:15:7c:d1:24:78:
                    05:12:df:d5:d8:2f:35:de:18:4a:01:8d:0f:b4:98:
                    b7:64:cb:a6:9e:9f:b1:19:64:67:5f:f1:df:8f:82:
                    69:e6:d4:93:41:52:7b:da:ca:c1:27:f0:3d:5f:ef:
                    0e:f1:4b:f7:21:a3:f1:84:8f:65:8c:37:f2:99:e3:
                    f1:a4:54:55:91:88:59:1d:06:a3:82:dd:37:d3:4a:
                    8d:45:f0:b8:21:98:bd:00:00:38:2e:09:69:73:68:
                    30:32:e6:18:13:19:0f:a6:d7:89:12:5d:d6:2b:47:
                    1b:55:c9:c8:10:ab:b3:70:7b:5b:76:cb:7f:67:ef:
                    af:ce:7e:a5:c9:92:36:2f:23:6f:a9:1f:00:ab:52:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AC:5C:88:86:41:1C:1C:87:BC:AF:4A:84:0C:F9:0C:C8:47:71:F0
            X509v3 Authority Key Identifier:
                keyid:97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32322d3234203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:61:28:4f:22:8d:ef:98:98:67:76:26:96:4a:c5:52:4c:b5:
         c0:e4:96:ff:8e:78:e8:01:d1:91:7b:0e:17:35:0c:eb:4d:64:
         02:4c:91:af:5c:ed:ca:b4:8c:c0:d6:70:64:43:de:7e:e9:30:
         c3:c1:fc:7e:25:97:d2:62:bd:5f:83:f5:ea:3c:29:35:e6:a2:
         fc:c5:94:52:72:07:53:ac:d2:49:13:83:08:5d:82:e0:13:82:
         9c:c8:05:49:fb:8f:53:91:11:00:4d:51:a2:b8:92:88:a0:52:
         e3:85:6e:33:36:20:43:d9:60:92:50:da:40:93:f9:20:2a:ae:
         f0:56:13:45:23:cd:e7:74:a4:6f:39:8b:fc:e9:bf:39:b9:be:
         5c:f8:0c:6a:9f:55:24:f0:94:39:d0:97:46:13:04:a4:c9:19:
         2f:a4:57:f2:06:c7:19:10:8f:36:64:15:60:67:9c:b0:3c:97:
         a1:57:88:31:41:ca:6e:8a:21:42:ab:6c:de:e0:54:74:db:5c:
         6e:97:d4:8c:5d:40:a3:2d:2d:52:b8:14:1b:fb:f1:bc:52:f2:
         21:0e:46:f7:4c:72:f7:22:0e:a3:d1:79:53:a6:46:fc:f3:13:
         88:8f:99:31:e3:f9:a0:f1:23:ab:1b:ee:2f:7f:02:7a:84:bc:
         56:fe:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org