Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231342e302f32342d3234203d3e20323731323437.roa
File:                     3230302e3130362e3231342e302f32342d3234203d3e20323731323437.roa (raw, json)
Hash identifier:          d7Awitclqad+bXLkE5/en366s3OuZZUwEpcytXrux40=
Subject key identifier:   71:3F:33:C3:B5:9E:96:23:D7:28:A2:F5:CD:6D:2C:9D:F7:CE:AD:70
Certificate issuer:       /CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
Certificate serial:       6F6FB9EC885EA3B619B1C7EC8B3A9C62A1AEF89E
Authority key identifier: 97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231342e302f32342d3234203d3e20323731323437.roa
Signing time:             Wed 15 Feb 2023 11:00:00 +0000
ROA not before:           Wed 15 Feb 2023 10:55:00 +0000
ROA not after:            Wed 14 Feb 2024 11:00:00 +0000
asID:                     271247
IP address blocks:        200.106.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6f:b9:ec:88:5e:a3:b6:19:b1:c7:ec:8b:3a:9c:62:a1:ae:f8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Validity
            Not Before: Feb 15 10:55:00 2023 GMT
            Not After : Feb 14 11:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7f:8a:03:59:96:93:14:8c:2a:79:0e:34:d5:
                    1a:05:9a:c4:13:41:3a:d1:3d:c9:40:81:82:f2:3e:
                    01:b4:e3:36:19:7c:8f:2f:b2:7f:f6:4a:cb:2b:3c:
                    89:65:0a:8b:f1:7f:26:59:4f:4d:c4:b7:c1:42:51:
                    68:69:0b:11:8d:32:da:b5:3b:ea:80:27:71:9e:e1:
                    f2:be:18:64:de:a0:16:79:9d:66:c7:e0:35:fa:2d:
                    0a:be:f6:2b:2d:e6:b1:88:cf:ba:a0:26:6c:7f:fa:
                    0e:93:7b:1c:2a:d0:e5:f9:e6:45:11:a9:f2:db:55:
                    28:d7:11:77:d7:3e:d0:c6:18:3c:82:70:e1:18:fa:
                    92:9c:3f:49:5a:b8:24:2b:cc:ed:47:31:71:75:ac:
                    50:d1:a3:31:50:b0:0a:bb:d5:9b:d2:9b:74:f3:da:
                    90:2b:c6:b7:5c:73:aa:cc:ef:d2:be:6d:ec:a0:4f:
                    40:f3:28:7f:86:a5:56:db:f9:59:15:39:29:c0:87:
                    1c:2b:58:28:f2:0e:b9:ee:08:29:b4:44:f6:7d:81:
                    57:03:6e:82:2c:79:1a:bf:52:a3:74:61:96:39:93:
                    ff:36:c9:b9:6e:d7:48:d8:00:fc:78:a3:0b:36:39:
                    8e:d3:77:a8:82:54:dd:79:de:31:fd:49:c9:df:c4:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3F:33:C3:B5:9E:96:23:D7:28:A2:F5:CD:6D:2C:9D:F7:CE:AD:70
            X509v3 Authority Key Identifier:
                keyid:97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231342e302f32342d3234203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:10:79:e8:cf:a7:14:b0:72:35:a0:7c:20:4f:15:35:82:24:
         58:97:5b:93:93:90:9b:28:d0:b6:aa:f4:44:e5:0d:78:55:2b:
         3e:1f:f5:43:19:20:d2:d6:a5:66:3f:72:34:36:7c:40:17:b3:
         23:39:55:fe:fc:8a:e3:71:db:e2:ac:dc:72:1c:e5:66:7a:1b:
         a5:b7:92:a8:1c:83:11:48:91:17:f3:f8:ef:c3:da:5d:5b:fe:
         61:d4:ab:98:41:30:5f:95:3a:56:00:46:28:37:57:15:b1:27:
         78:30:57:ff:ce:ea:da:e6:7f:9e:f6:61:95:dc:bb:cf:25:de:
         bb:85:e7:98:3a:a2:08:49:1a:25:bb:63:c0:6c:97:89:0c:ce:
         ac:9d:1a:14:8e:1c:b3:a0:2e:a7:a2:a9:ea:2b:81:0b:0c:71:
         2e:69:ef:0f:1a:2d:17:92:55:74:0a:e2:3b:e1:6e:b3:c1:a5:
         3a:f2:58:54:73:0c:48:44:5d:67:56:25:d8:35:48:cb:32:01:
         c5:6a:df:a6:d8:95:83:da:f6:0e:75:e1:1d:9d:82:3c:5f:fd:
         7f:80:96:56:94:fb:73:48:15:b2:9a:98:5f:5f:d4:20:1b:20:
         29:88:07:ab:91:77:7b:fc:c3:97:81:5d:c3:f7:0c:fc:dc:71:
         e8:3f:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org