Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231322e302f32322d3332203d3e20323731333833.roa
File:                     3230302e33362e3231322e302f32322d3332203d3e20323731333833.roa (raw, json)
Hash identifier:          T4JqyegenQsYSsltftLRHqRAUr+P0qeghRH6VfFh8NA=
Subject key identifier:   5D:BF:A1:76:24:D3:E2:F3:B5:75:48:5F:A8:F4:33:10:C3:D6:15:4F
Certificate issuer:       /CN=016DA10B53CE0933CBEB04B144DCEB711994ACE6
Certificate serial:       7AF029912A3A5683047EDFD9626654FD3650E071
Authority key identifier: 01:6D:A1:0B:53:CE:09:33:CB:EB:04:B1:44:DC:EB:71:19:94:AC:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016DA10B53CE0933CBEB04B144DCEB711994ACE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231322e302f32322d3332203d3e20323731333833.roa
Signing time:             Tue 28 Feb 2023 02:19:55 +0000
ROA not before:           Tue 28 Feb 2023 02:14:55 +0000
ROA not after:            Tue 27 Feb 2024 02:19:55 +0000
asID:                     271383
IP address blocks:        200.36.212.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f0:29:91:2a:3a:56:83:04:7e:df:d9:62:66:54:fd:36:50:e0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016DA10B53CE0933CBEB04B144DCEB711994ACE6
        Validity
            Not Before: Feb 28 02:14:55 2023 GMT
            Not After : Feb 27 02:19:55 2024 GMT
        Subject: CN=5DBFA17624D3E2F3B575485FA8F43310C3D6154F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:8b:9f:f6:f9:93:71:4d:35:22:26:25:57:
                    51:c9:b4:03:b0:47:8b:ce:92:06:7f:6d:6f:86:14:
                    ed:48:a6:37:38:ae:37:cf:5d:07:8b:7a:a2:b0:77:
                    c6:aa:a8:f3:f1:41:63:51:66:f7:f0:ff:99:ad:bf:
                    9a:0d:82:2a:e1:c4:f2:df:77:68:57:88:39:71:fd:
                    52:83:eb:2e:d5:96:3e:7d:9a:10:88:3d:25:7f:da:
                    20:cb:10:33:fa:a0:4e:a4:c0:31:93:6e:fd:5b:fd:
                    03:c9:b6:0e:c2:91:e8:bd:d1:aa:59:bf:96:24:d7:
                    eb:3a:06:e5:7b:51:80:8b:0f:b6:9a:5c:8d:37:d0:
                    b1:6a:96:ed:4e:bc:15:08:d2:97:e5:4d:50:a2:f5:
                    3e:69:a8:ea:b2:6f:eb:37:cb:85:2a:5f:3e:c5:b0:
                    e2:2a:b6:f4:02:fa:df:ae:f0:05:e1:d8:8d:3f:fe:
                    da:f1:73:a4:00:a2:41:7f:bc:6f:52:21:c9:e9:da:
                    84:7c:22:26:a8:91:1b:2f:f4:ee:82:23:bf:d3:70:
                    33:f6:aa:21:cc:8f:db:36:c5:c4:fa:b9:fd:0b:82:
                    d4:6d:0c:79:d6:87:b3:d3:5f:9e:0b:3e:dd:28:56:
                    8c:2f:13:09:0f:d8:52:43:c1:bf:23:b0:01:e0:81:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BF:A1:76:24:D3:E2:F3:B5:75:48:5F:A8:F4:33:10:C3:D6:15:4F
            X509v3 Authority Key Identifier:
                keyid:01:6D:A1:0B:53:CE:09:33:CB:EB:04:B1:44:DC:EB:71:19:94:AC:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/016DA10B53CE0933CBEB04B144DCEB711994ACE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/016DA10B53CE0933CBEB04B144DCEB711994ACE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231322e302f32322d3332203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:29:b6:2b:e7:bc:01:7e:2a:d2:af:a5:22:92:69:bf:9a:
         42:6d:4e:03:24:25:fe:17:bc:9f:3e:8d:ad:07:6f:ca:b4:e7:
         9c:a8:56:f4:5b:b9:8a:94:9e:d2:57:3c:31:f2:c3:d4:c6:7f:
         00:27:67:1b:c6:8e:56:21:7e:a7:83:44:d7:78:b4:9b:6b:87:
         fb:15:19:ac:ca:da:45:5e:60:93:d9:4f:54:bc:b5:d8:12:b2:
         b9:9f:74:7f:b9:e4:54:28:55:d4:e3:cc:d4:ad:df:34:8c:91:
         a6:9d:af:19:5d:cd:e8:d8:ab:7f:a0:b7:9c:32:18:2d:de:61:
         83:88:ab:76:4e:91:b7:0d:fd:dd:37:e4:dc:a4:70:b3:83:47:
         bd:a7:d2:8c:a1:21:ef:53:1c:c4:c2:78:82:6f:c9:5e:58:26:
         ae:e1:e3:d0:76:4c:70:f7:3a:2c:1d:cf:a1:cf:8c:5e:cd:a2:
         62:42:54:53:7b:95:6b:45:12:98:70:76:d0:6c:94:52:5e:4d:
         ee:17:d0:c5:24:2a:a0:ab:4f:23:aa:95:d3:69:97:90:af:c3:
         1f:99:b5:2c:1a:d4:e8:15:c7:30:8c:49:db:81:20:e1:78:e1:
         d1:91:5c:48:c1:49:f3:81:c6:82:42:01:7c:95:a3:e9:cf:9d:
         1b:69:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org