Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39372e302f32342d3234203d3e20323730323531.roa
File:                     3230302e3131302e39372e302f32342d3234203d3e20323730323531.roa (raw, json)
Hash identifier:          nfEkSOTPDxVEJFEVllyayp1u8A1jSwLz5oYT5kv4Aec=
Subject key identifier:   37:49:9E:42:CF:24:53:7E:18:FA:92:EF:36:9F:52:1B:37:30:77:D4
Certificate issuer:       /CN=8810BDE0DA994D68C04ABEBD38E406E4C04CB047
Certificate serial:       72E029FD6200EACC92910AAAE50971CB64E1F825
Authority key identifier: 88:10:BD:E0:DA:99:4D:68:C0:4A:BE:BD:38:E4:06:E4:C0:4C:B0:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810BDE0DA994D68C04ABEBD38E406E4C04CB047.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39372e302f32342d3234203d3e20323730323531.roa
Signing time:             Fri 10 Mar 2023 14:51:03 +0000
ROA not before:           Fri 10 Mar 2023 14:46:03 +0000
ROA not after:            Fri 08 Mar 2024 14:51:03 +0000
asID:                     270251
IP address blocks:        200.110.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e0:29:fd:62:00:ea:cc:92:91:0a:aa:e5:09:71:cb:64:e1:f8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810BDE0DA994D68C04ABEBD38E406E4C04CB047
        Validity
            Not Before: Mar 10 14:46:03 2023 GMT
            Not After : Mar  8 14:51:03 2024 GMT
        Subject: CN=37499E42CF24537E18FA92EF369F521B373077D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:37:6d:fb:ab:ad:2c:3d:d1:1a:95:ec:15:
                    cd:af:07:d3:13:e8:bc:ba:38:ff:26:e7:e6:3a:78:
                    0b:30:e4:9e:5c:49:e2:c6:a8:c6:cb:06:f5:29:0a:
                    09:a5:bf:b6:0a:c1:2d:f1:4d:c3:97:3e:76:60:0e:
                    75:96:b6:9b:d1:df:c2:cf:40:74:00:db:6b:0d:15:
                    fa:db:0b:90:92:1f:38:e6:73:a5:ea:9e:cf:a2:34:
                    74:6e:fe:1e:10:54:ed:99:62:03:a0:10:5d:4f:0f:
                    c5:08:77:18:c7:b6:c4:67:64:71:99:d2:97:06:84:
                    ca:17:64:8f:f6:d8:75:8a:2f:69:74:f7:1e:46:24:
                    b9:96:cb:7b:2c:6f:6a:39:d7:63:5e:8b:da:6c:f2:
                    e6:06:f6:57:3b:b1:c4:20:47:cf:49:00:9c:70:96:
                    af:87:02:a3:d6:19:23:9a:25:ae:4a:d5:0f:89:8f:
                    8b:88:ba:9a:ba:89:7f:24:a0:a6:76:90:6f:71:2f:
                    7f:34:64:8e:37:6f:f1:f4:96:cb:16:d8:03:d1:50:
                    7c:cb:01:cf:50:e1:ca:03:42:8c:26:5d:e3:95:f8:
                    68:a8:31:d5:85:07:a5:2f:61:a7:df:2a:f3:df:9a:
                    df:b2:a3:4d:17:4e:a6:c9:43:e2:46:8a:19:e3:92:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:49:9E:42:CF:24:53:7E:18:FA:92:EF:36:9F:52:1B:37:30:77:D4
            X509v3 Authority Key Identifier:
                keyid:88:10:BD:E0:DA:99:4D:68:C0:4A:BE:BD:38:E4:06:E4:C0:4C:B0:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/8810BDE0DA994D68C04ABEBD38E406E4C04CB047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810BDE0DA994D68C04ABEBD38E406E4C04CB047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39372e302f32342d3234203d3e20323730323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:79:34:34:d0:a8:d3:2d:60:cf:8a:3f:1c:56:d0:1d:35:b6:
         b1:ba:ea:fa:99:b6:f0:9c:fd:d0:cf:53:37:3f:06:57:e7:ed:
         ec:75:51:70:28:d8:29:9b:0f:f5:e7:d1:2e:3d:5c:34:88:95:
         c3:3f:00:3a:e4:9a:33:a7:51:1b:4c:91:4a:28:e5:5f:bc:35:
         ab:e9:2b:7d:74:af:45:6e:af:06:cd:2f:86:e9:1d:f1:80:e1:
         fe:7f:9c:57:89:1a:1b:e7:0d:a3:cb:da:f2:95:79:d2:5e:3b:
         2f:9d:74:63:79:cf:5c:ce:96:af:c0:5d:d7:c9:2c:c9:1e:8a:
         fe:5e:f8:31:a3:be:92:d5:8e:7c:da:ef:e7:e3:d0:b3:4a:7c:
         1c:88:48:de:44:a2:9c:14:47:fc:77:56:6b:cd:85:fc:82:ee:
         74:8c:2d:6a:62:15:bd:5f:92:63:34:dd:6b:43:6f:a2:e9:f7:
         76:4c:ce:c6:02:ca:7c:88:4e:a7:7d:fd:e4:e0:b9:79:18:f1:
         ef:94:5b:a9:69:95:72:af:7d:d0:55:02:0c:a2:af:76:64:28:
         a6:b8:6a:ca:33:83:dd:9b:ac:2a:6d:86:38:07:28:28:83:9b:
         e7:70:e1:86:98:2f:ca:9f:35:6c:48:52:49:20:99:32:b9:d7:
         bc:50:5a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org