Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32332d3233203d3e20323730323734.roa
File:                     3230302e3132342e38342e302f32332d3233203d3e20323730323734.roa (raw, json)
Hash identifier:          ZEzZ89GNqRc4RqnBVQbXGHhE8lhEErP7vAflZFmGr9c=
Subject key identifier:   96:82:27:74:50:0D:B8:ED:A9:51:63:7C:DA:91:8D:B2:0A:45:0F:0C
Certificate issuer:       /CN=2C8A5342CB39EDDB94256DE3BD80FE7138BAD100
Certificate serial:       10905CD2AF82EA576A69735C1F3C1EB41906729D
Authority key identifier: 2C:8A:53:42:CB:39:ED:DB:94:25:6D:E3:BD:80:FE:71:38:BA:D1:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32332d3233203d3e20323730323734.roa
Signing time:             Tue 04 Jul 2023 21:36:17 +0000
ROA not before:           Tue 04 Jul 2023 21:31:17 +0000
ROA not after:            Tue 02 Jul 2024 21:36:17 +0000
asID:                     270274
IP address blocks:        200.124.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:90:5c:d2:af:82:ea:57:6a:69:73:5c:1f:3c:1e:b4:19:06:72:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C8A5342CB39EDDB94256DE3BD80FE7138BAD100
        Validity
            Not Before: Jul  4 21:31:17 2023 GMT
            Not After : Jul  2 21:36:17 2024 GMT
        Subject: CN=96822774500DB8EDA951637CDA918DB20A450F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:96:79:8d:b7:54:f0:7e:89:16:f8:43:53:
                    2d:ac:a4:47:13:e0:6d:f9:b6:05:7d:e8:24:2a:e1:
                    9e:bb:fd:2f:af:f7:fb:b3:c5:fe:48:4c:d8:d1:13:
                    22:67:77:94:59:7e:80:05:f5:56:d5:de:62:45:de:
                    2f:59:6d:1c:67:22:db:09:99:79:fd:a6:bd:7c:58:
                    06:23:11:96:28:f2:cc:8c:27:40:a5:53:1a:b9:ba:
                    3e:f8:4e:56:0a:bd:14:93:0c:45:21:75:c3:02:23:
                    c4:76:42:bf:7f:c3:5e:cb:47:73:80:ab:af:8d:55:
                    2e:79:a2:6c:ac:4c:18:d6:11:9c:0c:49:f2:19:ed:
                    77:ad:bf:e8:84:a4:a4:38:a2:90:d0:0e:6a:0d:74:
                    3d:cd:b5:a1:62:72:99:f8:b1:d4:62:e8:6e:42:7c:
                    68:a9:27:23:ab:fd:3d:c8:54:b5:75:5d:08:03:bc:
                    11:4e:e9:7d:e1:1e:99:b8:7b:ae:10:53:7e:cf:21:
                    78:1c:98:b3:ef:3e:08:f7:29:ef:42:ac:81:51:37:
                    00:fb:1b:9e:6f:95:34:09:61:50:0a:84:72:f9:37:
                    3b:19:0a:eb:a1:7e:07:5c:89:3a:6b:62:fa:03:51:
                    fc:51:da:18:2d:ce:19:c4:00:fa:19:92:13:82:b3:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:82:27:74:50:0D:B8:ED:A9:51:63:7C:DA:91:8D:B2:0A:45:0F:0C
            X509v3 Authority Key Identifier:
                keyid:2C:8A:53:42:CB:39:ED:DB:94:25:6D:E3:BD:80:FE:71:38:BA:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32332d3233203d3e20323730323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:f2:0e:4a:f0:c9:85:99:2e:e2:8a:5c:9d:e4:1a:50:9d:7b:
         38:a5:47:5b:25:2b:b0:22:0a:46:a0:49:b3:3e:2c:3c:c8:04:
         33:f1:8d:fd:71:f2:6b:a2:b2:d0:db:62:33:ff:af:e4:39:df:
         78:6b:3e:4e:72:be:8d:62:8b:62:3e:36:47:f7:3d:33:79:2a:
         48:d9:c4:56:56:2a:6d:15:cb:97:14:f3:b5:04:2e:bb:ba:1b:
         66:84:0d:44:23:d1:02:1e:a8:c9:8d:55:af:59:79:b2:39:7b:
         29:7f:89:60:fb:d5:a8:b7:07:7d:85:35:3f:cd:a0:b3:e2:e3:
         3c:7f:67:51:dc:05:a4:1d:aa:7c:36:50:be:74:dd:7d:6c:cb:
         84:e6:f9:eb:49:44:47:d5:fe:87:b1:a8:6d:42:7b:62:96:ea:
         78:5d:97:1e:d2:da:2e:a4:6a:03:6a:c7:25:90:a3:13:26:e3:
         5a:90:b7:35:cd:d7:f7:cb:a5:e3:c4:7e:2e:54:d8:e3:29:60:
         27:b8:00:fa:26:29:27:8b:60:76:f7:78:34:78:81:91:e5:98:
         52:97:d2:4f:45:ff:47:ca:17:67:08:2f:39:5c:76:a8:77:bf:
         41:e1:2b:ee:26:f2:e4:1d:07:c9:66:80:2a:f4:d5:86:1f:7a:
         c8:d4:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org