Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231332e302f32342d3234203d3e20323731323437.roa
File:                     3230302e3130362e3231332e302f32342d3234203d3e20323731323437.roa (raw, json)
Hash identifier:          B+OQVZYHHLoZsydDC7Kw6inwcJQCZ3uKB2r/gKk48BI=
Subject key identifier:   18:BB:2E:06:84:E9:93:68:F1:BF:64:02:F3:29:55:1E:D4:C1:B8:F4
Certificate issuer:       /CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
Certificate serial:       09F5A256652D48476FFA484E4F7007CD212CA55E
Authority key identifier: 97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231332e302f32342d3234203d3e20323731323437.roa
Signing time:             Wed 15 Feb 2023 11:00:00 +0000
ROA not before:           Wed 15 Feb 2023 10:55:00 +0000
ROA not after:            Wed 14 Feb 2024 11:00:00 +0000
asID:                     271247
IP address blocks:        200.106.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f5:a2:56:65:2d:48:47:6f:fa:48:4e:4f:70:07:cd:21:2c:a5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Validity
            Not Before: Feb 15 10:55:00 2023 GMT
            Not After : Feb 14 11:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:51:19:aa:f9:1d:ae:79:23:61:a3:74:f1:
                    9a:73:80:ff:d5:38:73:e7:fd:1d:17:cb:21:43:58:
                    26:e4:e1:7a:ad:92:14:1c:8a:cd:f7:34:a8:87:3b:
                    eb:50:d5:45:9c:ec:72:53:44:c2:cb:9b:8e:a5:55:
                    76:d2:bc:f5:5c:e1:d6:df:34:db:22:be:5a:29:46:
                    9d:68:59:0c:02:ef:7e:75:51:27:5f:28:c1:a4:42:
                    5e:b1:76:3c:21:d4:c0:56:41:bb:41:95:04:e0:2a:
                    4d:49:3d:18:c0:a5:f1:3a:4d:a2:e1:7b:fd:64:82:
                    63:01:94:3a:07:e2:62:69:0f:a0:45:07:4e:7c:09:
                    c2:48:60:e0:20:05:f2:da:7c:10:1e:72:e1:1f:00:
                    03:38:3d:25:fd:f4:e9:7b:5e:43:f2:7c:db:a1:20:
                    a2:89:ce:d8:c0:cf:22:65:0c:48:ca:40:c5:a1:e6:
                    54:53:39:30:fd:0b:2c:9f:b8:a8:21:f9:90:41:83:
                    d7:9b:22:9d:a2:1b:5a:8c:ac:d7:9e:c9:20:28:02:
                    40:5d:7d:3d:0a:31:7d:1f:f4:8b:72:30:c2:6b:f8:
                    20:af:a9:9e:20:9d:f2:8c:d3:0a:19:58:d9:5a:72:
                    2a:16:78:90:cd:f9:bf:0a:6c:6c:cc:e8:df:84:1b:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BB:2E:06:84:E9:93:68:F1:BF:64:02:F3:29:55:1E:D4:C1:B8:F4
            X509v3 Authority Key Identifier:
                keyid:97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231332e302f32342d3234203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:10:67:b1:2b:06:b5:63:36:9f:e3:bd:5f:e8:fe:a0:a9:
         9c:ac:2c:bb:37:3e:c5:48:7f:58:83:82:e1:64:76:49:95:99:
         d3:c7:f6:89:05:e9:8e:e0:25:4b:0d:80:cb:fb:ab:ad:a8:a7:
         8f:9b:91:2f:29:65:b5:6a:b7:ee:b5:50:3a:28:e9:49:eb:33:
         de:e8:7d:82:ea:9f:b0:a0:62:43:9d:d4:7a:15:0f:ac:cf:bf:
         8e:c9:94:c3:35:96:a2:77:3a:5c:25:73:33:2d:5c:f7:0a:c8:
         bc:42:52:c3:5e:eb:ff:89:1f:1d:09:b3:71:22:df:ad:dd:3a:
         66:e8:14:55:59:d5:78:50:bf:b5:a4:bb:ca:29:de:b8:4d:7e:
         9b:4a:d5:ce:1b:33:d2:0a:da:66:88:df:ec:97:55:00:68:9a:
         c7:13:97:91:df:2e:ff:66:0c:e0:e1:e4:b9:17:c0:f2:a7:ce:
         38:78:0a:c0:2b:13:09:d4:32:cc:c9:68:50:9e:cf:cd:5e:76:
         18:58:a1:3c:5a:80:f2:5d:c7:21:f6:14:2a:e4:c6:bd:86:98:
         55:58:de:f7:c8:bc:b1:db:e8:04:d7:13:fb:07:2c:ac:10:e1:
         c9:fc:f8:55:06:24:2b:e3:94:77:25:a0:73:7c:03:fe:c8:21:
         76:9c:bc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org