Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231342e302f32332d3233203d3e20323731323437.roa
File:                     3230302e3130362e3231342e302f32332d3233203d3e20323731323437.roa (raw, json)
Hash identifier:          UxRPVTBrrghltZyz/NRwwpyBxG+5riM00G9YEildgao=
Subject key identifier:   6E:96:55:B6:21:A7:A2:FB:3C:38:49:B4:3E:CC:4B:67:7C:79:07:BB
Certificate issuer:       /CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
Certificate serial:       7E57B9B6AD5755ECDA66B1E1F4877DEFB6DD4BC5
Authority key identifier: 97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231342e302f32332d3233203d3e20323731323437.roa
Signing time:             Mon 03 Jul 2023 12:00:00 +0000
ROA not before:           Mon 03 Jul 2023 11:55:00 +0000
ROA not after:            Mon 01 Jul 2024 12:00:00 +0000
asID:                     271247
IP address blocks:        200.106.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:57:b9:b6:ad:57:55:ec:da:66:b1:e1:f4:87:7d:ef:b6:dd:4b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Validity
            Not Before: Jul  3 11:55:00 2023 GMT
            Not After : Jul  1 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:7b:20:bb:4b:d7:c0:f1:a4:a7:c2:5f:56:
                    11:9c:6f:31:73:cf:d0:fa:82:34:0b:f4:a8:ab:62:
                    24:c0:44:09:70:0c:5e:c5:e0:04:b9:ff:26:11:0f:
                    fc:ef:20:eb:0c:c7:22:52:d6:bc:e2:66:8f:c5:20:
                    8e:6b:24:35:b6:dc:09:b9:c4:2e:39:b1:85:84:85:
                    27:65:b7:c4:4d:92:0f:92:14:01:b3:4d:44:74:3f:
                    2a:b5:49:89:f4:bc:9c:ec:d9:e4:95:66:4d:cb:03:
                    ee:48:55:cd:65:4c:db:dd:56:95:d2:04:33:11:3e:
                    ec:2a:9f:12:be:fe:09:92:e0:8f:ef:14:90:3e:26:
                    7e:51:11:08:d0:eb:fb:12:9c:c3:ca:82:ba:65:6f:
                    2f:01:75:1e:7d:96:db:06:41:90:86:bd:8a:4c:15:
                    7a:50:6d:65:3f:43:5f:65:48:ec:bb:4b:0c:48:88:
                    21:c9:64:d7:c4:fb:e9:8c:01:ee:fc:b1:6f:0d:01:
                    dd:de:60:af:14:21:ba:07:5d:c1:5e:34:e4:ec:82:
                    1d:a5:f6:39:64:e0:f4:42:52:10:d9:d0:af:1f:9d:
                    c9:d6:d6:24:ce:ca:e5:75:d8:37:b0:31:96:a4:ca:
                    ed:11:1b:ef:e4:90:69:ad:c8:db:ae:26:68:9f:09:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:96:55:B6:21:A7:A2:FB:3C:38:49:B4:3E:CC:4B:67:7C:79:07:BB
            X509v3 Authority Key Identifier:
                keyid:97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231342e302f32332d3233203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:09:36:93:20:48:65:85:85:84:63:8b:03:c9:0c:96:3e:
         97:a3:cf:cb:7a:3a:03:df:c6:28:8f:94:d4:a9:41:a6:a8:d4:
         c0:d3:ba:7b:bd:1e:25:b5:d0:60:7f:6b:03:34:72:be:06:a7:
         a1:3a:72:70:97:65:8d:bc:c5:57:11:5d:07:06:c9:e6:9c:1f:
         ac:63:03:2a:bc:10:2e:a4:0e:77:83:05:fa:13:38:26:bf:31:
         d4:39:6c:1f:83:86:90:79:1d:49:24:df:16:fa:9e:53:70:d3:
         f7:a9:aa:27:2c:d3:4d:0f:ab:ae:1b:e6:6a:1e:ca:eb:07:7e:
         b1:4f:30:43:88:9d:02:e8:94:97:07:14:fa:be:9a:c0:44:a5:
         98:e7:e7:23:9c:4c:16:11:dd:01:11:19:c0:9e:d6:6c:18:26:
         2e:7f:8c:12:39:78:a9:64:54:2f:6c:18:f2:b2:71:af:a6:7c:
         08:9f:67:46:b7:3e:1e:91:5d:11:37:b2:95:18:8a:f0:e6:a2:
         1c:c8:ab:0c:bd:4a:e7:e7:6d:65:49:e9:cb:a9:f7:9b:71:5e:
         62:40:a7:0b:47:a6:2a:92:e0:c8:c0:39:77:a0:71:7c:70:29:
         7e:a6:4b:4e:d7:c9:87:54:4e:82:0d:cb:a7:4b:80:77:d9:65:
         7a:2f:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org