Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32342d3234203d3e20323731323437.roa
File:                     3230302e3130362e3231322e302f32342d3234203d3e20323731323437.roa (raw, json)
Hash identifier:          /lB236bkF4fQFmyZn4cp5BroEPTgUOIak/vkqhLR8eY=
Subject key identifier:   09:B3:1E:2C:E0:29:84:CD:5B:04:82:6D:6F:80:9A:6D:78:B7:3B:DE
Certificate issuer:       /CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
Certificate serial:       38BFC1364BADFF2CA436BEA00E89A0E46E3E21E6
Authority key identifier: 97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32342d3234203d3e20323731323437.roa
Signing time:             Wed 15 Feb 2023 11:00:00 +0000
ROA not before:           Wed 15 Feb 2023 10:55:00 +0000
ROA not after:            Wed 14 Feb 2024 11:00:00 +0000
asID:                     271247
IP address blocks:        200.106.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bf:c1:36:4b:ad:ff:2c:a4:36:be:a0:0e:89:a0:e4:6e:3e:21:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Validity
            Not Before: Feb 15 10:55:00 2023 GMT
            Not After : Feb 14 11:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f0:0f:72:d5:1f:b1:49:e1:3e:22:01:40:fe:
                    aa:69:55:6f:98:d9:5c:57:cc:68:9a:73:38:06:42:
                    c9:06:e2:78:cb:0c:e2:1f:c9:25:0d:c3:4c:a7:28:
                    0b:05:dd:1e:1c:c2:2b:57:d2:cd:d8:47:93:33:fa:
                    78:f6:dc:45:00:20:6f:a7:a3:c3:14:1e:0b:d1:18:
                    5a:49:68:24:b1:34:3d:1a:d9:f7:9d:a5:d2:fb:85:
                    09:43:2d:fd:21:d5:68:de:ca:a7:1d:55:12:71:86:
                    5c:e1:5e:92:82:bd:45:3d:3b:63:92:1b:7c:69:9c:
                    48:7d:02:09:5f:15:6a:49:67:e0:87:86:fa:a5:c3:
                    4d:37:f5:53:83:d3:73:b7:56:b0:55:f0:3e:5a:c9:
                    07:b3:f9:ef:52:3f:52:df:36:55:6e:24:06:78:e4:
                    a2:fc:75:93:30:f6:62:e8:16:fd:2e:15:c5:02:d3:
                    c1:da:a6:c1:a2:58:84:4c:fe:df:1b:4d:87:fc:cd:
                    6f:cd:60:48:c0:55:63:27:33:db:da:22:7b:12:b3:
                    20:d2:71:49:99:c2:76:8f:46:a7:8c:bf:19:44:a9:
                    06:af:23:71:38:ab:4d:0f:a8:0c:58:88:f8:d1:ab:
                    c8:eb:72:e4:8e:f0:37:77:87:4c:f3:b3:ea:fb:a2:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B3:1E:2C:E0:29:84:CD:5B:04:82:6D:6F:80:9A:6D:78:B7:3B:DE
            X509v3 Authority Key Identifier:
                keyid:97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231322e302f32342d3234203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:11:f4:f4:22:1e:6a:51:0e:97:10:cb:c2:fd:7b:b2:a7:53:
         16:66:fc:8a:fa:05:38:b3:4e:f2:21:d2:a4:ad:d8:d3:2a:f6:
         c1:44:32:e7:fa:8a:cb:c9:24:eb:2a:ae:26:49:1e:ee:57:7d:
         95:17:72:3e:45:4c:51:b0:5e:31:99:7d:25:a1:25:ef:74:25:
         08:24:de:9d:c3:b4:94:62:c7:a0:e9:17:58:ab:3a:fc:a0:c9:
         ec:f9:98:1a:d7:f8:af:82:96:fa:5d:ff:7b:3b:08:14:ba:79:
         3c:49:09:b7:6a:22:6a:83:08:44:fa:44:fb:ae:8b:a9:b6:f7:
         9d:a1:11:d4:ce:13:43:ca:32:48:9a:ff:f5:03:5f:dd:7b:b2:
         1a:cb:cf:23:c1:fd:ba:c6:7c:cd:e5:6b:48:70:da:36:62:8d:
         d3:0d:66:43:8e:68:17:d4:20:50:a4:b1:08:1f:47:e5:89:ee:
         f3:0c:09:b2:ce:a3:8b:f9:7d:bd:3c:53:19:82:0e:a6:d6:5f:
         17:f0:81:35:08:25:9b:0a:47:2f:c6:7b:c8:87:9b:af:56:4a:
         d0:37:ab:90:5b:55:b8:33:f3:dd:ad:30:18:39:15:76:d5:01:
         9e:2a:f1:4f:41:15:09:1b:95:41:4d:1e:7e:3a:ba:32:29:0a:
         28:c3:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org