Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231322e302f32342d3234203d3e20323731333833.roa
File:                     3230302e33362e3231322e302f32342d3234203d3e20323731333833.roa (raw, json)
Hash identifier:          Ac5fG+xISmXSwp/+sZg824mUkk8kPwd/BTzHPeksgoU=
Subject key identifier:   5B:A3:BE:80:5E:29:E6:A1:90:92:FC:50:F2:FB:E2:39:9A:53:C6:B1
Certificate issuer:       /CN=796F564AEAADE5A568F1954847A0276FEAA52A25
Certificate serial:       016D8D1C309517E8942A879C8E702AD136480259
Authority key identifier: 79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231322e302f32342d3234203d3e20323731333833.roa
Signing time:             Fri 14 Apr 2023 13:20:13 +0000
ROA not before:           Fri 14 Apr 2023 13:15:13 +0000
ROA not after:            Fri 12 Apr 2024 13:20:13 +0000
asID:                     271383
IP address blocks:        200.36.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6d:8d:1c:30:95:17:e8:94:2a:87:9c:8e:70:2a:d1:36:48:02:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796F564AEAADE5A568F1954847A0276FEAA52A25
        Validity
            Not Before: Apr 14 13:15:13 2023 GMT
            Not After : Apr 12 13:20:13 2024 GMT
        Subject: CN=5BA3BE805E29E6A19092FC50F2FBE2399A53C6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:de:eb:4f:85:71:50:3e:17:08:ea:2f:35:
                    cd:e1:56:2f:bf:0b:37:39:b9:1b:b6:f1:7f:ce:ba:
                    cc:cc:02:f5:e9:2a:ba:7d:9d:2e:04:60:c7:38:38:
                    68:b8:05:c7:b5:bc:df:25:57:e0:23:53:6c:82:91:
                    79:2b:27:6a:c0:71:55:d6:95:d2:8e:55:ab:85:87:
                    67:84:85:36:cf:de:de:d8:c8:4f:f1:c0:fd:71:27:
                    1f:1e:5f:4a:4e:ad:0f:99:42:67:01:d5:18:18:d4:
                    97:41:7b:17:e6:2f:87:5c:5b:bf:28:3d:60:6f:fb:
                    7d:45:73:f7:64:42:1e:b4:82:66:a0:25:30:a2:02:
                    92:8f:a6:6e:5c:8e:b7:bf:27:3f:cb:99:2a:b2:80:
                    f1:96:62:b5:d2:97:cc:4c:5f:2e:f2:bb:65:17:3a:
                    45:cf:10:7d:fb:ad:92:6d:8d:84:08:d7:51:23:21:
                    25:b9:33:31:75:87:53:a8:c4:3e:14:b9:eb:8d:7c:
                    8d:ff:8b:86:2a:d4:4d:fd:dd:a5:bd:d3:73:05:c1:
                    a3:7e:fe:ea:85:cf:1c:86:75:1e:27:36:25:e3:13:
                    45:f2:a0:a1:02:d9:83:90:e6:3c:cc:ce:8b:3e:fd:
                    5f:a9:45:52:ad:83:04:41:09:d0:ed:cd:5e:b7:61:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:BE:80:5E:29:E6:A1:90:92:FC:50:F2:FB:E2:39:9A:53:C6:B1
            X509v3 Authority Key Identifier:
                keyid:79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/796F564AEAADE5A568F1954847A0276FEAA52A25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231322e302f32342d3234203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:af:bc:85:bb:28:81:83:a8:9d:7b:4f:08:d1:96:ec:ab:44:
         d9:cd:ff:74:20:40:c8:ec:60:14:f3:79:41:e1:97:26:76:fa:
         04:cc:57:01:db:b4:2b:1d:3c:e0:eb:22:2b:02:65:07:21:13:
         16:c9:97:ad:14:8c:62:62:44:cf:b1:b3:0f:8f:59:c4:0f:ab:
         7f:70:a2:55:de:07:b0:2d:39:0f:72:72:ac:d6:47:d5:c1:f5:
         4f:80:83:d2:d6:a9:a8:2c:ab:3b:41:6e:0f:a9:95:e2:55:a6:
         66:1e:6e:ae:78:74:7d:91:9c:78:b5:ea:37:7f:11:3b:36:1e:
         b9:79:c2:63:81:db:45:c6:c4:22:81:e4:c9:51:a4:50:c9:4b:
         ae:7f:5b:57:a9:c9:51:13:72:e4:cc:6c:23:a8:97:ab:0d:14:
         49:7a:17:58:40:8e:f8:0a:45:e3:36:98:b6:30:7a:03:0d:8a:
         3c:f0:87:8a:e1:11:30:38:f1:98:c7:25:b5:a3:41:24:7e:63:
         7f:8b:35:61:2b:60:96:83:68:26:e8:2d:9b:e4:ba:ef:fd:c8:
         08:76:f3:0f:42:0f:d4:04:34:15:a3:f8:b4:16:4c:cc:83:3c:
         f9:bd:10:e8:fd:b5:09:bf:60:3f:e4:1a:9a:20:d2:cb:b0:b6:
         4c:0b:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org