Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/0/3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa
File:                     3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa (raw, json)
Hash identifier:          5AAXV1Z1T61x9CLCSGeFJztYZSo5tZdFcA2RHWnoONY=
Subject key identifier:   A2:FF:B2:B3:31:9F:4A:E3:4F:4E:93:38:BB:52:B8:3F:05:25:E5:F1
Certificate issuer:       /CN=04E4A6AB52B0E9EEB814060BA2A79EC635E1F242
Certificate serial:       66A0163383A30D81DAD489C0B7455B5A88F67D26
Authority key identifier: 04:E4:A6:AB:52:B0:E9:EE:B8:14:06:0B:A2:A7:9E:C6:35:E1:F2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04E4A6AB52B0E9EEB814060BA2A79EC635E1F242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/0/3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa
Signing time:             Tue 21 Nov 2023 21:59:32 +0000
ROA not before:           Tue 21 Nov 2023 21:54:32 +0000
ROA not after:            Tue 19 Nov 2024 21:59:32 +0000
asID:                     270683
IP address blocks:        200.187.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a0:16:33:83:a3:0d:81:da:d4:89:c0:b7:45:5b:5a:88:f6:7d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E4A6AB52B0E9EEB814060BA2A79EC635E1F242
        Validity
            Not Before: Nov 21 21:54:32 2023 GMT
            Not After : Nov 19 21:59:32 2024 GMT
        Subject: CN=A2FFB2B3319F4AE34F4E9338BB52B83F0525E5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:bb:79:8d:8f:01:14:07:51:78:22:f3:6b:
                    08:4d:86:98:ab:19:47:92:53:03:7f:03:5a:53:7d:
                    28:04:eb:c5:12:2e:a5:05:65:93:35:91:aa:0b:9d:
                    56:93:2f:00:a5:7f:2e:b3:18:81:73:8a:34:f5:cf:
                    38:f8:a0:72:d3:d0:4a:10:3d:1f:21:26:a3:21:c5:
                    59:03:6e:86:59:6b:08:57:21:4e:47:c9:7b:85:3a:
                    51:15:0c:df:c1:3c:27:2b:72:65:29:c4:06:df:fc:
                    e4:e3:2e:d1:a2:93:9b:9e:bd:16:c9:05:09:bd:88:
                    19:f8:73:16:c0:95:e6:76:a2:6a:8a:38:e4:6f:35:
                    c9:44:64:51:83:bb:1e:d8:91:2c:7c:a9:d9:6a:36:
                    3e:6b:f6:d5:11:37:0b:3c:eb:41:8c:03:bb:7f:42:
                    16:85:fc:87:3f:44:fd:23:47:9b:37:09:63:a1:a5:
                    08:a2:b0:13:5f:09:cc:9e:5f:1e:5a:2a:ad:1b:ab:
                    55:4f:e2:1c:14:19:e5:74:0a:3f:51:b8:ba:1d:31:
                    38:c3:0a:97:1f:e3:92:a7:94:d4:4a:9e:e8:1e:e1:
                    c2:17:26:4a:d3:ef:7b:b4:f4:fc:92:d3:f6:dd:ea:
                    9b:7e:58:cf:ef:ac:a6:8f:90:f4:ee:ad:a0:a6:cb:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FF:B2:B3:31:9F:4A:E3:4F:4E:93:38:BB:52:B8:3F:05:25:E5:F1
            X509v3 Authority Key Identifier:
                keyid:04:E4:A6:AB:52:B0:E9:EE:B8:14:06:0B:A2:A7:9E:C6:35:E1:F2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/0/04E4A6AB52B0E9EEB814060BA2A79EC635E1F242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04E4A6AB52B0E9EEB814060BA2A79EC635E1F242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/0/3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:45:ce:a2:49:51:d0:6b:25:42:d5:ba:da:a0:4a:66:1e:0c:
         ed:e3:34:9b:36:88:1a:e5:39:c3:3c:e6:59:9d:54:b3:c9:7f:
         9f:2e:ad:8e:0c:6a:0a:94:3c:2d:23:a8:21:24:84:46:bb:38:
         d6:24:1b:02:41:9c:9c:24:42:90:6a:cd:89:72:0a:ee:22:5f:
         dc:8f:6c:49:09:f7:bf:7e:10:63:8c:b2:2b:58:a3:3f:69:ab:
         b1:83:89:d8:d4:e6:b4:8f:30:f4:88:75:60:da:b8:62:3f:cd:
         94:8d:17:5b:dc:fc:dd:92:52:00:8f:8f:a4:95:af:a3:c3:cb:
         52:cf:4b:b9:03:df:e5:20:5c:46:e3:ef:a3:f9:01:16:da:20:
         3e:e3:af:8d:bd:b1:d8:d0:d3:8f:4a:70:8f:a6:b6:a4:27:31:
         5d:ff:ab:b2:7b:69:1c:5e:1f:c0:7a:8c:02:4e:ac:8f:ff:cc:
         d1:15:3a:55:6c:f0:0a:b4:56:81:56:4e:2f:58:53:49:a4:60:
         97:44:a5:b6:85:8c:e2:a6:09:8e:00:17:e2:57:19:29:3c:df:
         9c:f5:05:db:c3:a5:42:b1:a0:db:e0:29:38:10:9f:88:fb:d3:
         5e:39:e3:e3:8b:6c:a8:d4:05:c5:f1:c0:0a:3a:82:d6:11:0c:
         e2:a8:bb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org