Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231322e302f32322d3232203d3e20323731333833.roa
File:                     3230302e33362e3231322e302f32322d3232203d3e20323731333833.roa (raw, json)
Hash identifier:          Re9qqMmK/KzdOHYEryG/4A1+aeXFC5qRQjzfuDnYupQ=
Subject key identifier:   23:86:8C:E2:1B:10:73:16:C3:82:55:0B:71:90:93:D9:26:14:46:3A
Certificate issuer:       /CN=D8825DA77E058ADD2399FB091B8BC6C94D719DC6
Certificate serial:       2A1D75D10BFD36759C976ECBF5F7EC123039D90C
Authority key identifier: D8:82:5D:A7:7E:05:8A:DD:23:99:FB:09:1B:8B:C6:C9:4D:71:9D:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8825DA77E058ADD2399FB091B8BC6C94D719DC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231322e302f32322d3232203d3e20323731333833.roa
Signing time:             Thu 24 Aug 2023 18:53:29 +0000
ROA not before:           Thu 24 Aug 2023 18:48:29 +0000
ROA not after:            Thu 22 Aug 2024 18:53:29 +0000
asID:                     271383
IP address blocks:        200.36.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1d:75:d1:0b:fd:36:75:9c:97:6e:cb:f5:f7:ec:12:30:39:d9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8825DA77E058ADD2399FB091B8BC6C94D719DC6
        Validity
            Not Before: Aug 24 18:48:29 2023 GMT
            Not After : Aug 22 18:53:29 2024 GMT
        Subject: CN=23868CE21B107316C382550B719093D92614463A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:b0:94:15:a0:75:bd:6b:ef:91:c2:9a:81:
                    bb:6c:f2:1b:4e:f6:21:d8:2c:c1:b2:d3:a5:a3:b7:
                    e0:79:68:c3:91:c4:11:3d:87:b3:b0:90:0e:7b:a0:
                    67:9f:d9:7e:8b:e3:0e:09:dd:2a:84:e5:ad:02:ae:
                    9f:dd:0e:fa:4d:04:f0:42:ee:83:1a:50:f3:65:37:
                    a5:74:7c:a3:07:19:83:49:81:3f:6d:d3:aa:07:4b:
                    65:f5:e9:50:bd:98:f6:26:c7:0e:a6:33:18:61:bf:
                    8e:08:b3:5e:80:b0:7c:44:65:c8:71:8c:70:f1:4b:
                    6b:c8:dd:19:dd:cd:7d:37:4e:a7:e3:ec:b4:a0:4f:
                    7a:f6:f0:2d:4a:55:fc:54:e9:4c:1b:36:3a:e7:16:
                    37:c7:b4:2a:af:e9:f1:40:4d:94:3e:69:90:35:c5:
                    ef:a8:a2:a6:21:77:b4:20:b1:e6:15:61:d9:6e:df:
                    b2:3c:53:65:0c:53:a3:9b:35:1c:ab:47:93:2e:51:
                    0b:fe:e7:1e:2a:29:75:79:f3:b0:71:48:c5:83:62:
                    8f:c1:4c:c6:42:d6:ff:d6:50:09:d1:19:50:ab:71:
                    97:1a:75:aa:da:47:50:1c:1a:c4:dc:04:c2:79:8e:
                    21:d2:37:de:f2:c0:b8:de:f1:df:cc:2d:fd:bf:a2:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:86:8C:E2:1B:10:73:16:C3:82:55:0B:71:90:93:D9:26:14:46:3A
            X509v3 Authority Key Identifier:
                keyid:D8:82:5D:A7:7E:05:8A:DD:23:99:FB:09:1B:8B:C6:C9:4D:71:9D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/D8825DA77E058ADD2399FB091B8BC6C94D719DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8825DA77E058ADD2399FB091B8BC6C94D719DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231322e302f32322d3232203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:06:f2:f9:52:44:17:13:2f:b4:77:62:be:47:8e:37:60:bd:
         f7:42:98:bb:81:73:fe:bf:c9:52:fc:9a:0f:93:32:ef:29:aa:
         38:9d:0c:a6:aa:3e:34:5d:db:96:9c:07:33:e1:c4:ba:52:35:
         6f:ed:cb:ab:ee:d7:30:45:47:82:ad:66:3e:b7:0b:26:cb:5f:
         37:cf:6f:91:52:85:67:1c:76:bd:dd:52:ba:a2:6f:71:47:21:
         d7:8e:40:4a:7c:9e:b4:f7:a9:8a:65:33:a5:be:bc:4d:79:1d:
         c4:2d:a6:ae:76:86:02:78:31:8b:1e:64:d2:60:c1:85:0f:16:
         4e:18:70:c5:d0:d5:83:97:60:43:f7:b1:4e:6b:a9:6f:ce:0c:
         4d:83:c7:bb:4f:bf:18:6c:4e:1d:bb:8b:26:e6:a3:68:70:1a:
         b4:4e:65:e2:44:74:eb:00:2c:82:9e:a5:48:ea:0c:3b:80:9c:
         39:4d:6f:4e:e1:cb:50:00:9a:54:97:2d:c4:b0:a9:61:ae:37:
         1f:64:a0:3a:92:f4:38:38:f9:ec:bb:a7:df:c9:10:2e:df:22:
         3a:ad:1f:9f:72:9a:ac:1d:2d:17:1d:c0:8d:82:60:5e:b6:19:
         cc:46:9c:53:87:2f:6a:27:2f:f8:02:ec:27:e2:18:2e:b9:5c:
         e7:f0:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org