Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231332e302f32342d3234203d3e20323731333833.roa
File:                     3230302e33362e3231332e302f32342d3234203d3e20323731333833.roa (raw, json)
Hash identifier:          JYXZ+IMZhFMriHv6TajYpxSJNxcE6cwYJGd2UfXpHsg=
Subject key identifier:   01:AF:9D:86:EA:DF:48:39:10:6B:12:FA:98:E1:F5:19:AD:65:A2:4C
Certificate issuer:       /CN=796F564AEAADE5A568F1954847A0276FEAA52A25
Certificate serial:       691DC036E58C77F2EC0E58B12D8AC83C2FBE195B
Authority key identifier: 79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231332e302f32342d3234203d3e20323731333833.roa
Signing time:             Fri 14 Apr 2023 13:20:10 +0000
ROA not before:           Fri 14 Apr 2023 13:15:10 +0000
ROA not after:            Fri 12 Apr 2024 13:20:10 +0000
asID:                     271383
IP address blocks:        200.36.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1d:c0:36:e5:8c:77:f2:ec:0e:58:b1:2d:8a:c8:3c:2f:be:19:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796F564AEAADE5A568F1954847A0276FEAA52A25
        Validity
            Not Before: Apr 14 13:15:10 2023 GMT
            Not After : Apr 12 13:20:10 2024 GMT
        Subject: CN=01AF9D86EADF4839106B12FA98E1F519AD65A24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:dc:17:14:73:91:d5:67:25:2f:11:3a:2c:
                    82:90:39:c5:84:c5:9b:10:c7:ca:bb:a5:a5:18:0e:
                    63:ba:83:26:66:34:d8:df:ca:e5:f9:78:b5:5c:9c:
                    a9:b1:c1:b1:6d:2e:38:63:2a:8b:a8:c8:db:7d:bd:
                    28:89:57:49:c8:be:64:0a:5d:ff:c5:e4:1b:8c:db:
                    ab:8f:aa:e5:a0:e2:64:43:a3:a6:4f:c2:ea:82:17:
                    c8:3f:ad:3b:23:6d:b1:7b:5f:7e:e1:a7:fc:97:ec:
                    7f:34:8b:cb:dd:c9:3a:b8:f1:8d:40:1d:f2:72:1b:
                    82:1d:71:a7:49:7f:c0:4f:a8:8d:4d:b3:1b:19:35:
                    ac:5a:a8:54:c6:6c:c1:ee:8a:e0:7e:ea:ad:99:b5:
                    8d:75:4c:4b:27:15:3d:87:9f:74:63:f7:db:20:6b:
                    71:b6:b6:f6:2c:fa:ab:10:7a:0f:0e:01:d9:03:d8:
                    91:aa:8d:6d:ff:99:ae:d6:85:6b:be:6e:90:7c:70:
                    e2:2f:84:77:3d:0a:14:05:b4:7d:3d:ff:cb:cc:a5:
                    5c:af:62:80:fd:79:e9:e7:5f:8e:41:7b:0d:ea:70:
                    e3:c1:58:5b:07:e5:ab:7c:69:96:7e:ba:b6:cf:84:
                    cc:f7:ee:09:cc:f5:37:65:2f:17:77:2d:2c:f9:79:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AF:9D:86:EA:DF:48:39:10:6B:12:FA:98:E1:F5:19:AD:65:A2:4C
            X509v3 Authority Key Identifier:
                keyid:79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/796F564AEAADE5A568F1954847A0276FEAA52A25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231332e302f32342d3234203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:eb:88:c4:89:69:7e:bb:e9:48:d1:8f:d3:8f:c1:f4:2e:
         d1:2a:09:8c:53:64:cb:dd:3b:65:1b:cc:5b:4e:0a:2b:75:55:
         da:7f:2c:6d:22:08:13:f8:fa:da:70:54:03:74:0d:8f:12:07:
         25:06:0a:08:b4:d5:e9:e1:36:23:56:2c:fe:f8:8d:2a:b9:a3:
         7c:cc:3e:71:00:9d:2a:54:6b:1c:3c:94:ae:6b:73:d4:b6:53:
         85:50:49:78:d9:6e:cf:c6:4d:dd:26:b1:34:60:2e:6f:4f:41:
         60:6a:40:7e:af:6e:f6:97:cd:a5:16:db:7d:72:e3:04:fa:c5:
         21:37:93:97:b9:71:15:0d:86:20:d3:85:32:9a:ec:9f:2b:5f:
         68:85:f4:95:aa:dd:c7:e9:09:61:17:1f:02:de:05:17:1b:43:
         af:1c:38:d1:37:2f:44:53:b4:d2:93:93:75:48:9d:2d:db:c4:
         1d:8a:a0:19:6a:38:e9:2b:57:18:d5:28:08:fe:ac:92:9a:61:
         18:b2:24:93:0e:b9:ef:f4:61:0e:d9:f7:d4:c4:b2:6e:7e:2e:
         1c:c3:39:98:80:65:c7:f7:59:80:0c:88:2c:27:b1:79:0b:5b:
         7f:e3:5a:a9:97:ac:99:a1:39:f0:6d:54:e5:fc:4b:26:d1:22:
         55:56:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org