Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa
File:                     3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa (raw, json)
Hash identifier:          dYVBz+5CXfzCxOHHnxFdOrN4GrEMUQJRhe8a6Dx6z1c=
Subject key identifier:   81:1C:A9:3B:F1:FE:BE:61:8E:03:7E:67:FF:6E:51:F9:DB:F5:63:94
Certificate issuer:       /CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
Certificate serial:       729E0E1099D85BFF6405BCB7B1B6D163F1C09FD1
Authority key identifier: F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa
Signing time:             Mon 26 Feb 2024 16:47:35 +0000
ROA not before:           Mon 26 Feb 2024 16:42:35 +0000
ROA not after:            Mon 24 Feb 2025 16:47:35 +0000
asID:                     270834
IP address blocks:        200.229.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9e:0e:10:99:d8:5b:ff:64:05:bc:b7:b1:b6:d1:63:f1:c0:9f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
        Validity
            Not Before: Feb 26 16:42:35 2024 GMT
            Not After : Feb 24 16:47:35 2025 GMT
        Subject: CN=811CA93BF1FEBE618E037E67FF6E51F9DBF56394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:da:0f:b9:7c:d9:6a:13:1c:83:2e:3d:7d:
                    25:97:a5:e9:51:ff:d6:43:44:3b:e9:42:7c:cc:27:
                    02:d4:9d:65:26:62:87:9e:3e:f1:f5:3c:66:31:db:
                    17:f4:c0:da:94:3e:e3:aa:0b:17:f7:16:45:93:10:
                    c1:55:66:23:66:30:b2:4f:bb:de:43:17:0b:32:d9:
                    da:7f:fb:6b:f6:6e:19:4a:3d:24:75:b2:c4:54:c6:
                    90:db:bf:2e:00:2a:3e:e3:ca:95:09:bb:78:15:77:
                    3c:13:73:e9:0d:48:8b:29:09:1b:c9:b4:66:17:64:
                    77:bc:eb:f9:4f:db:17:ff:b4:35:49:4e:c4:2c:9a:
                    26:46:ec:92:39:d2:9b:b2:dc:20:7d:2f:da:2a:7e:
                    d3:ba:fd:c4:e2:29:fd:0e:aa:31:41:e0:e0:26:4e:
                    88:18:64:5c:30:b9:99:50:07:b2:b6:e7:7f:71:1b:
                    7b:7c:a6:5e:bb:22:20:e8:82:ff:8a:66:62:8e:02:
                    a6:91:c2:26:7b:10:2a:1b:81:91:ba:56:2e:e9:44:
                    1b:38:75:df:6a:85:d3:e9:37:ba:ef:e4:18:3d:ba:
                    0c:1c:fd:e5:2f:59:eb:51:58:fb:23:8c:b3:cf:02:
                    f9:f8:fa:aa:9a:34:f7:90:45:c5:a2:b9:ce:b8:5e:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1C:A9:3B:F1:FE:BE:61:8E:03:7E:67:FF:6E:51:F9:DB:F5:63:94
            X509v3 Authority Key Identifier:
                keyid:F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:9f:30:59:02:eb:16:63:a3:af:07:c8:a3:54:53:3e:3f:
         1f:11:ee:5c:1c:c4:3b:65:8f:a6:35:2c:b2:0b:7d:62:1b:33:
         09:30:a0:96:a7:51:f8:08:ac:8e:b3:e8:11:2b:22:79:3c:28:
         50:43:09:5e:46:f0:44:d4:be:e1:73:c7:61:c4:65:0d:40:3e:
         c0:c9:48:17:aa:fb:32:4e:7b:8e:b2:62:83:a9:63:49:b0:55:
         5a:90:81:e9:09:5c:35:52:db:9e:33:c5:fe:a9:66:b9:be:64:
         5a:15:e1:7b:b9:13:fc:50:d8:30:15:7b:24:4b:0f:14:a1:7c:
         98:31:44:cf:06:27:c0:70:74:cb:2b:3e:fd:58:86:bc:76:26:
         e3:68:de:91:5d:a1:3d:bf:9e:53:44:1d:05:f1:43:6f:02:21:
         19:93:ee:2d:4a:6c:b4:2a:3e:35:1f:bb:3d:af:20:07:ed:de:
         d9:66:1a:e6:39:4a:d2:df:dd:6c:79:52:9f:1b:f6:91:b5:2b:
         7f:7b:4a:b4:7c:f5:76:2f:44:c8:fb:e2:c4:21:84:36:c8:bb:
         7c:14:e1:86:1a:68:52:63:8c:c5:a3:c0:1c:26:e7:b2:a6:bc:
         ab:7f:7d:40:73:e7:9b:c4:95:ee:2b:af:3f:f4:3a:30:4a:bc:
         2f:66:7e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org