Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32332e302f32342d3234203d3e20323636313930.roa
File:                     3230302e392e32332e302f32342d3234203d3e20323636313930.roa (raw, json)
Hash identifier:          ws4iJOf8h9uI5brp5cY+wNOJivn96HAmkcKz7Ol0zCM=
Subject key identifier:   82:43:06:A4:9B:BD:0D:09:E9:EE:99:7B:05:86:54:A8:EE:17:6B:3D
Certificate issuer:       /CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
Certificate serial:       03EC08EB49C7921E3DEE1A6E628F01F3BC78B7E9
Authority key identifier: 44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32332e302f32342d3234203d3e20323636313930.roa
Signing time:             Thu 21 Sep 2023 21:30:10 +0000
ROA not before:           Thu 21 Sep 2023 21:25:10 +0000
ROA not after:            Thu 19 Sep 2024 21:30:10 +0000
asID:                     266190
IP address blocks:        200.9.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ec:08:eb:49:c7:92:1e:3d:ee:1a:6e:62:8f:01:f3:bc:78:b7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
        Validity
            Not Before: Sep 21 21:25:10 2023 GMT
            Not After : Sep 19 21:30:10 2024 GMT
        Subject: CN=824306A49BBD0D09E9EE997B058654A8EE176B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:b0:50:8c:7c:20:af:37:ca:a7:94:46:66:
                    9d:6b:b0:37:10:df:f9:f0:1a:2f:b5:72:03:94:c8:
                    3a:2c:6a:b6:31:87:a4:d2:1f:e6:f1:49:e0:c7:ea:
                    06:df:ec:b7:56:9c:30:20:52:51:0f:ab:63:21:c0:
                    b6:2d:22:56:a0:5e:f5:3c:72:80:78:cf:87:5b:d9:
                    51:49:67:9a:d6:40:3f:a4:02:82:e6:25:e8:4a:75:
                    d3:e7:da:2a:a2:f1:13:f2:ca:a1:9f:d3:47:6a:bc:
                    b6:a8:87:f5:65:c2:6d:0e:11:ae:54:b6:66:5f:22:
                    33:66:d7:e6:fd:d6:81:5d:02:99:45:2d:aa:3c:72:
                    9f:12:14:13:cf:6f:ae:89:11:0b:f0:4d:55:4c:67:
                    c9:49:b7:9c:c9:a1:26:b6:8a:19:1c:ef:c6:f0:0e:
                    78:cf:0a:44:a3:e1:8e:67:fc:7e:3d:f4:7c:95:7a:
                    09:81:2b:29:96:be:e2:6c:91:cd:df:91:40:2b:98:
                    6c:2e:98:2b:c7:2b:ee:59:78:7f:21:58:26:52:a4:
                    58:3f:13:66:e0:f9:6f:8b:79:62:3b:3e:9b:c3:29:
                    68:89:0b:e8:c7:b7:c6:e7:df:7f:f5:2e:78:f5:43:
                    e0:90:e6:2f:0b:0f:cc:9b:f3:33:31:a0:bc:e0:e6:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:43:06:A4:9B:BD:0D:09:E9:EE:99:7B:05:86:54:A8:EE:17:6B:3D
            X509v3 Authority Key Identifier:
                keyid:44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32332e302f32342d3234203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:48:73:52:04:e7:d0:da:39:2d:c2:c8:58:c8:49:34:b9:
         a6:34:17:e5:d6:14:73:ff:c1:bd:59:7f:d2:fe:a1:1d:a1:69:
         07:d4:44:ce:48:04:ad:d5:4b:52:8d:f1:fd:30:f6:cd:0a:1e:
         56:74:88:c9:c1:8e:16:9d:e0:ec:37:f5:32:5a:f8:99:a4:aa:
         e7:c2:6b:84:c7:86:14:9f:5b:aa:88:08:e1:ff:c5:d1:2c:53:
         53:df:41:41:14:3f:1b:2e:c7:43:15:fb:b3:52:f0:35:e1:50:
         d1:86:f9:a4:71:dc:b3:c8:0e:8d:fd:a8:52:b0:ec:cc:b0:5d:
         12:af:c7:be:07:03:45:69:3a:6c:1b:3f:6d:9c:47:5f:8b:90:
         19:76:25:97:30:00:8e:a4:12:b6:37:cf:93:1e:60:27:54:b6:
         aa:bc:94:56:5a:16:36:21:b9:e1:0b:77:db:be:54:d4:ea:da:
         45:85:f2:40:8a:4c:75:71:f8:81:74:5a:bb:1f:8c:fb:16:e6:
         86:20:58:58:82:4d:39:25:2f:93:21:9d:88:8a:a4:2e:8e:73:
         ed:17:51:09:b4:c6:56:48:5e:e5:14:04:2e:59:42:f4:61:d8:
         11:91:12:2a:19:55:ff:0b:fe:9a:a3:74:f7:d1:ce:90:e5:71:
         ab:d5:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org