Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32322d3234203d3e20323730373137.roa
File:                     3230302e362e38342e302f32322d3234203d3e20323730373137.roa (raw, json)
Hash identifier:          jNGLJRL8m3nM8ffObHLcpst9d+ehdeS6MQifUM35+jI=
Subject key identifier:   EC:94:89:9E:ED:DC:1E:E3:D7:63:62:5D:C1:13:BA:29:83:39:AF:EF
Certificate issuer:       /CN=E43FD017602A495594D333F8A9BF37138B3A9627
Certificate serial:       757DD5BB6EEF5A772F0FF53E101B4B2F44153163
Authority key identifier: E4:3F:D0:17:60:2A:49:55:94:D3:33:F8:A9:BF:37:13:8B:3A:96:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E43FD017602A495594D333F8A9BF37138B3A9627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32322d3234203d3e20323730373137.roa
Signing time:             Thu 24 Aug 2023 23:06:23 +0000
ROA not before:           Thu 24 Aug 2023 23:01:23 +0000
ROA not after:            Thu 22 Aug 2024 23:06:23 +0000
asID:                     270717
IP address blocks:        200.6.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7d:d5:bb:6e:ef:5a:77:2f:0f:f5:3e:10:1b:4b:2f:44:15:31:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FD017602A495594D333F8A9BF37138B3A9627
        Validity
            Not Before: Aug 24 23:01:23 2023 GMT
            Not After : Aug 22 23:06:23 2024 GMT
        Subject: CN=EC94899EEDDC1EE3D763625DC113BA298339AFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:1b:c4:2c:39:4b:38:99:77:7c:df:94:85:
                    2b:81:eb:0b:f9:0f:6c:3b:50:a6:02:0c:a1:c5:9d:
                    76:e5:2e:6e:d1:7b:e1:41:a4:7c:1f:b7:3d:6f:ef:
                    40:f9:a5:17:0d:18:0b:a3:16:5c:9c:10:45:29:d3:
                    73:e4:64:03:70:ce:61:77:56:56:c6:e3:c4:b5:a5:
                    47:51:62:05:db:61:63:f0:5e:2d:6d:94:e9:01:77:
                    6a:0e:fc:d8:c6:3b:94:d3:10:f5:6e:3f:62:ad:f6:
                    8c:f0:d4:a7:29:ea:8f:7b:20:3e:de:31:17:28:d6:
                    cc:94:c9:c5:75:9f:a8:d6:22:e3:bb:d0:b0:cd:d2:
                    c6:bc:fc:3e:9e:41:5a:03:6c:da:43:bb:78:c0:e4:
                    88:c3:72:25:99:e7:36:bb:09:01:9d:b4:cf:8e:10:
                    b9:07:de:2f:3f:f2:19:57:08:88:df:2d:cf:2a:2f:
                    d4:94:6a:19:8b:3f:71:71:a9:d9:d7:2b:18:03:d1:
                    4e:1b:ca:65:fe:14:e5:75:9c:a4:4e:d7:73:c4:2f:
                    4c:ce:4b:4f:4f:56:05:0d:4e:f7:93:0f:d4:ac:17:
                    fc:29:b9:ea:db:ba:a3:23:22:20:37:96:b7:cb:c9:
                    b3:1e:44:c2:f9:22:2e:ae:8e:77:5c:18:5c:c2:cf:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:94:89:9E:ED:DC:1E:E3:D7:63:62:5D:C1:13:BA:29:83:39:AF:EF
            X509v3 Authority Key Identifier:
                keyid:E4:3F:D0:17:60:2A:49:55:94:D3:33:F8:A9:BF:37:13:8B:3A:96:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/E43FD017602A495594D333F8A9BF37138B3A9627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E43FD017602A495594D333F8A9BF37138B3A9627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32322d3234203d3e20323730373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:52:28:b1:44:91:83:d7:b4:39:cd:0d:27:5c:78:3e:f5:81:
         10:9e:25:b1:92:7a:5f:58:94:20:ee:47:3f:00:44:4f:89:2b:
         0b:b1:74:0c:1b:5c:d5:2c:fc:2d:94:34:44:9a:46:43:78:a9:
         8d:43:77:b1:8d:2d:21:0e:b8:d3:d8:c2:44:7d:95:4e:ed:65:
         eb:c7:c6:05:30:41:ec:fc:2d:2a:cf:2d:90:f9:4d:4f:07:cc:
         f0:5a:0b:20:7a:e5:cd:e3:09:59:4f:f6:39:61:c0:ba:59:bd:
         46:a8:b3:9d:44:d4:7b:d0:b3:cb:a5:5c:45:f1:6d:90:2b:18:
         b0:2c:12:4b:60:71:30:7b:04:1d:14:d9:71:bf:2f:81:2d:49:
         57:29:25:0a:21:f7:e0:37:b8:86:1b:39:cb:c0:22:fe:11:85:
         ec:dc:2e:81:91:fc:2d:ff:fb:fb:5e:bf:3e:9a:0f:fa:3d:85:
         7a:ad:60:fd:bc:17:06:46:a5:43:83:69:6f:79:49:a4:ba:0f:
         30:08:ce:ed:e3:5d:20:cc:0a:c6:ae:9c:b6:0e:5f:0c:96:b3:
         95:8f:33:96:9f:5d:e4:7d:26:94:4b:78:f4:e2:c0:e9:cc:d7:
         62:28:4c:5a:c4:b0:a0:71:c2:91:4b:c8:b3:48:cf:02:71:48:
         74:3c:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org