Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32332d3233203d3e20323731323437.roa
File:                     3230302e3130362e3231322e302f32332d3233203d3e20323731323437.roa (raw, json)
Hash identifier:          GaVNsfwgu/MgvbAqk2TUNm2CA0AArdRMoS1w8iWtcrw=
Subject key identifier:   9C:61:FA:7B:B7:CC:DA:45:42:3F:E4:59:7D:EF:51:E5:4A:54:94:41
Certificate issuer:       /CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
Certificate serial:       77681D4ED64F2B5C1EA6ADB1C786C6FD8B58693D
Authority key identifier: 97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32332d3233203d3e20323731323437.roa
Signing time:             Wed 15 Feb 2023 11:00:00 +0000
ROA not before:           Wed 15 Feb 2023 10:55:00 +0000
ROA not after:            Wed 14 Feb 2024 11:00:00 +0000
asID:                     271247
IP address blocks:        200.106.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:68:1d:4e:d6:4f:2b:5c:1e:a6:ad:b1:c7:86:c6:fd:8b:58:69:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Validity
            Not Before: Feb 15 10:55:00 2023 GMT
            Not After : Feb 14 11:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:99:07:af:7d:c3:5a:73:44:13:a8:0e:19:
                    1d:4f:2f:e8:19:f7:8c:f9:d6:65:c6:78:4d:91:66:
                    58:1f:2d:6f:a0:b5:34:30:c2:b3:29:67:66:4f:bc:
                    a6:3a:3b:c1:9d:e9:ed:ec:75:d7:f2:f5:e1:74:37:
                    a1:b7:c7:43:a6:4d:91:7d:bf:ae:a6:45:1a:43:b1:
                    b9:7b:54:f6:90:52:0a:5e:e8:cc:c1:33:21:29:2f:
                    03:6a:be:91:62:e7:72:64:e2:75:f7:0c:2d:0d:ac:
                    6a:06:cc:ad:fa:94:a4:22:38:cc:ce:f7:6e:e0:cd:
                    81:85:4b:f5:70:31:4e:dc:c8:8b:4d:8c:d1:b7:62:
                    aa:31:b6:80:3e:be:a9:64:dc:9a:59:91:2b:ac:a3:
                    06:f6:2f:8b:ca:0c:f3:fb:4d:d9:43:21:88:9a:ec:
                    b2:cb:de:96:6a:05:f2:47:08:fe:d1:53:f8:0a:fb:
                    4c:13:e4:fe:42:91:bf:39:a9:86:31:ef:6d:c9:f2:
                    78:fa:67:24:d9:e2:1d:27:a8:7a:73:8a:50:cf:21:
                    2d:60:68:59:70:93:b8:f3:e4:73:4b:3c:d1:4e:43:
                    9d:ba:d8:e2:1a:e0:35:e2:2a:96:bc:92:47:de:af:
                    3d:58:a3:63:e8:1f:56:d5:0f:ae:f7:74:d4:ac:5c:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:61:FA:7B:B7:CC:DA:45:42:3F:E4:59:7D:EF:51:E5:4A:54:94:41
            X509v3 Authority Key Identifier:
                keyid:97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32332d3233203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:9f:aa:a1:3c:6e:4a:92:b1:75:a0:44:d8:a7:dd:93:c8:46:
         48:5a:5a:cc:0a:aa:98:98:30:95:20:bf:f6:fe:dd:ec:87:5d:
         23:3f:98:ee:a0:0c:03:31:72:12:c9:74:6a:e6:68:7a:3f:f2:
         f2:4f:16:f2:f1:da:4f:94:da:ee:46:50:2e:a2:37:14:82:1e:
         38:59:49:d6:a3:06:df:56:3b:4d:a1:74:73:c0:70:02:f8:e6:
         6e:1f:96:4e:6c:9e:68:7a:4d:cc:bc:d8:bc:72:6b:1a:9d:da:
         72:3e:a8:56:ec:94:64:bc:15:ff:32:b6:e0:62:30:84:52:28:
         96:2b:2f:98:6f:bf:f9:7f:49:5e:0f:e0:64:22:e7:1b:db:91:
         e4:29:54:ac:6f:50:a7:40:68:4c:a3:5c:ce:fa:40:51:b1:50:
         72:b8:eb:79:0e:cd:72:9f:15:f1:a8:99:7c:18:c0:18:64:a6:
         c6:52:f5:ea:f3:c4:82:f2:4d:31:56:72:c6:49:08:f5:3c:d3:
         6f:b7:e3:5e:f6:b7:8b:7b:37:6d:d5:68:49:f7:62:da:85:34:
         f9:e4:30:de:33:46:d5:bf:07:14:fd:b9:67:cc:b7:82:07:6d:
         ac:e9:32:28:c0:ee:98:c6:f4:c9:de:12:35:2f:55:03:c5:e3:
         c3:35:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org