Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/3230302e392e3131362e302f32322d3234203d3e20323731333238.roa
File:                     3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (raw, json)
Hash identifier:          7aNM6nq3n4KapoJENsuCZDDiBd8ztRvFPhXITkX6TvM=
Subject key identifier:   E0:F7:18:72:59:06:19:F0:F8:35:43:D9:7E:8E:0C:EE:D6:6A:37:66
Certificate issuer:       /CN=61F5EEE5F36D62616A5B068B35FB230002695C0B
Certificate serial:       5CC9D014C5AD48BF973BBD0AC26C9B2CC1F2F7F4
Authority key identifier: 61:F5:EE:E5:F3:6D:62:61:6A:5B:06:8B:35:FB:23:00:02:69:5C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F5EEE5F36D62616A5B068B35FB230002695C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/3230302e392e3131362e302f32322d3234203d3e20323731333238.roa
Signing time:             Tue 14 Nov 2023 17:29:37 +0000
ROA not before:           Tue 14 Nov 2023 17:24:37 +0000
ROA not after:            Tue 12 Nov 2024 17:29:37 +0000
asID:                     271328
IP address blocks:        200.9.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c9:d0:14:c5:ad:48:bf:97:3b:bd:0a:c2:6c:9b:2c:c1:f2:f7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F5EEE5F36D62616A5B068B35FB230002695C0B
        Validity
            Not Before: Nov 14 17:24:37 2023 GMT
            Not After : Nov 12 17:29:37 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:38:b2:dc:91:2e:f3:27:61:f7:e6:a2:dc:e8:
                    d9:ad:df:a3:34:30:3f:37:fe:80:27:bb:a6:0d:28:
                    b2:d0:25:13:0f:20:02:17:c7:67:d9:34:58:82:64:
                    cd:2f:60:a4:96:39:b8:ed:a2:d6:d8:41:e4:b4:a9:
                    21:e1:6c:b3:fc:94:e8:be:94:32:9f:88:f6:25:fb:
                    4a:89:90:4c:c7:f2:62:20:f8:6d:64:1a:71:1b:85:
                    40:03:38:3b:d1:e1:27:ba:0e:c8:7b:52:bd:a5:4e:
                    40:5f:8e:3b:c7:66:7d:71:20:24:2b:f3:ba:b7:1f:
                    e9:a8:8e:20:48:38:3a:11:21:ed:a3:65:4a:27:9d:
                    f5:e6:6a:41:a9:fd:03:c2:3f:e9:7e:b1:e0:77:70:
                    de:9b:91:0d:0e:cf:24:01:23:17:52:0f:b2:16:9c:
                    3a:2f:ed:a4:a3:18:84:d7:8d:31:57:85:f5:04:48:
                    a3:b1:ac:cf:fb:99:a4:65:3e:4d:28:a1:b9:d4:b8:
                    ec:21:b0:f6:94:49:9c:03:59:cd:92:6c:e6:d0:7c:
                    d8:62:7a:cb:64:06:ac:81:32:de:50:87:3e:a9:8a:
                    71:6f:72:c4:de:b4:09:a6:5f:66:f1:29:28:ac:66:
                    5a:18:51:0a:b1:7c:36:ae:ac:7c:48:75:26:c8:2d:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F7:18:72:59:06:19:F0:F8:35:43:D9:7E:8E:0C:EE:D6:6A:37:66
            X509v3 Authority Key Identifier:
                keyid:61:F5:EE:E5:F3:6D:62:61:6A:5B:06:8B:35:FB:23:00:02:69:5C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/61F5EEE5F36D62616A5B068B35FB230002695C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F5EEE5F36D62616A5B068B35FB230002695C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/3230302e392e3131362e302f32322d3234203d3e20323731333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:0c:0c:57:37:02:1c:30:f9:3e:56:67:64:bc:47:eb:ee:34:
         27:f1:0f:40:28:1c:78:13:3c:3e:75:ea:63:c6:76:43:f6:32:
         ee:99:51:cd:3f:6f:fa:91:aa:d6:3e:4b:9d:8f:22:2d:61:51:
         c7:57:cd:c7:03:27:9d:b2:89:8a:e6:a0:19:d3:d6:21:7f:29:
         95:98:7f:89:0c:b4:a5:66:20:e0:70:03:18:03:60:2c:a1:16:
         f1:c2:f0:52:b2:83:f3:82:3f:21:af:16:65:11:64:32:bd:9f:
         ca:91:67:49:f2:60:39:f1:99:50:ec:37:99:d1:c3:a5:1d:c5:
         e6:d3:42:a4:12:24:31:d9:0d:63:69:83:e0:2d:a9:bc:0c:23:
         e5:e9:ee:f0:58:8a:b6:fe:59:0f:3c:dc:03:8c:74:04:e8:39:
         47:1d:34:76:39:2e:1c:31:fc:26:06:ad:d4:e0:12:4b:0e:e2:
         e5:9f:ea:4a:7f:4f:1d:e0:23:4b:03:49:e0:6b:f3:b8:72:82:
         d5:3f:a0:f3:27:d5:31:34:8e:01:ea:12:b9:10:54:f2:f4:1d:
         8a:8d:7c:9f:1a:10:52:23:59:94:e3:11:b1:dc:18:2d:fa:b5:
         93:e6:92:f2:9e:4e:c2:fa:e2:87:1b:ea:70:12:82:96:f1:69:
         22:87:13:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org