Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38372e302f32342d3234203d3e20323730373137.roa
File:                     3230302e362e38372e302f32342d3234203d3e20323730373137.roa (raw, json)
Hash identifier:          69KYbLPgJ5ax/DwLcKSU1N/KmScMQ7+6wxB2RUQx3pg=
Subject key identifier:   7F:7F:CD:CC:DE:A9:DB:67:9C:2F:22:53:03:17:3C:EC:7D:3F:80:EF
Certificate issuer:       /CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
Certificate serial:       2E25C441F1F3440A9032B2600D80E576F31A822E
Authority key identifier: CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38372e302f32342d3234203d3e20323730373137.roa
Signing time:             Mon 04 Sep 2023 14:26:19 +0000
ROA not before:           Mon 04 Sep 2023 14:21:19 +0000
ROA not after:            Mon 02 Sep 2024 14:26:19 +0000
asID:                     270717
IP address blocks:        200.6.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:25:c4:41:f1:f3:44:0a:90:32:b2:60:0d:80:e5:76:f3:1a:82:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
        Validity
            Not Before: Sep  4 14:21:19 2023 GMT
            Not After : Sep  2 14:26:19 2024 GMT
        Subject: CN=7F7FCDCCDEA9DB679C2F225303173CEC7D3F80EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:1f:06:95:ee:1e:4f:87:35:35:6c:f5:91:
                    c6:02:9d:00:18:6f:86:3c:95:f9:b8:8f:0b:7c:3d:
                    dd:19:6e:05:57:77:a7:3d:0d:b6:64:6d:cd:52:de:
                    1c:e6:e9:31:72:d1:8f:00:54:44:df:5f:1b:42:dc:
                    cc:1a:0f:07:f0:67:4b:0e:6d:f6:cd:ac:b6:ee:5b:
                    01:9d:fe:2a:d4:45:ca:72:f2:26:13:62:c7:77:15:
                    66:2a:be:65:64:0d:62:eb:34:23:0c:99:29:8d:38:
                    80:f3:cd:c4:2d:31:40:4a:47:58:f9:ba:e4:bf:92:
                    6e:20:3b:68:67:8e:78:8c:05:6e:9a:38:21:bd:ba:
                    ca:90:41:22:55:d5:b1:e3:a1:2d:b6:e9:60:ca:5b:
                    01:e8:9f:b9:64:b7:e6:df:6e:1e:1d:4c:84:de:35:
                    40:97:55:f0:c2:11:6d:92:4a:66:51:0a:7f:eb:ff:
                    d1:96:5c:9e:36:ad:ba:22:ea:d3:1f:16:f6:b1:28:
                    d5:4a:59:66:91:5e:53:48:e8:32:46:70:f4:f6:c9:
                    eb:03:c7:58:ef:c6:e1:73:66:c5:5c:2c:55:81:da:
                    bb:f2:dd:ed:41:96:01:61:60:f4:74:17:f7:6f:d0:
                    85:91:62:cb:ba:47:63:05:6a:cf:1c:4c:ad:fb:ce:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7F:CD:CC:DE:A9:DB:67:9C:2F:22:53:03:17:3C:EC:7D:3F:80:EF
            X509v3 Authority Key Identifier:
                keyid:CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38372e302f32342d3234203d3e20323730373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:21:2f:9a:77:62:9e:ad:ab:89:3c:1e:d0:6d:7a:69:a2:93:
         79:b6:3e:e6:59:d6:c8:53:93:41:f1:ec:74:9b:f3:9f:16:e1:
         e0:a3:e9:98:87:c9:03:f2:29:11:38:79:b3:45:dd:27:05:b8:
         30:ec:64:8c:b5:12:00:d6:45:e2:fd:c9:46:1c:f7:f6:da:d0:
         d6:d0:b2:53:63:64:d2:cc:62:e1:96:7a:b2:62:59:35:d3:f3:
         80:0b:c3:57:df:21:e6:82:60:a7:b9:86:61:b0:0a:31:b5:2c:
         a9:37:a8:eb:92:7c:5a:5d:84:6d:b7:af:3a:07:ac:26:c4:3e:
         63:86:48:39:80:2e:70:47:50:2e:13:32:6d:34:41:ae:f3:34:
         f4:40:f0:10:02:db:5a:92:d0:50:ca:3f:ec:e0:4b:be:f8:60:
         48:bc:ae:7c:ec:64:77:84:8e:7a:7d:21:39:e3:b2:97:5b:8f:
         7b:70:ed:9e:a3:a2:d1:ef:a3:b9:24:cf:06:75:6e:58:ce:67:
         4a:4c:9b:0a:ec:cc:e7:54:76:0b:f5:3a:b9:3b:4c:42:76:72:
         90:78:10:bc:b5:b7:e7:be:ad:b3:27:f1:11:24:e8:21:23:7f:
         b0:a3:95:02:4d:40:d2:ee:0f:15:22:5a:c9:01:b4:9b:cd:32:
         0e:b8:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org