Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/3230372e3234382e342e302f32322d3232203d3e20323731333330.roa
File:                     3230372e3234382e342e302f32322d3232203d3e20323731333330.roa (raw, json)
Hash identifier:          GQk7j2jfv81ZMkwgPseBBTizoT0nmgoxDgYmgoOueP0=
Subject key identifier:   71:AB:88:C5:09:07:27:04:F3:22:9F:50:01:D6:81:23:20:82:10:E9
Certificate issuer:       /CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
Certificate serial:       101FE66352BA3459784EC4024603DBAD5CC92313
Authority key identifier: 8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/3230372e3234382e342e302f32322d3232203d3e20323731333330.roa
Signing time:             Tue 11 Oct 2022 12:58:07 +0000
ROA not before:           Tue 11 Oct 2022 12:53:07 +0000
ROA not after:            Tue 10 Oct 2023 12:58:07 +0000
asID:                     271330
IP address blocks:        207.248.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1f:e6:63:52:ba:34:59:78:4e:c4:02:46:03:db:ad:5c:c9:23:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
        Validity
            Not Before: Oct 11 12:53:07 2022 GMT
            Not After : Oct 10 12:58:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:1b:ff:ea:f7:ab:2c:d2:10:62:5f:e9:db:
                    1b:85:18:1e:3e:33:87:07:3f:c5:c2:14:84:cb:0b:
                    e5:e8:53:81:a8:55:25:23:a1:50:ec:b4:e4:f5:29:
                    c7:dc:ea:94:ac:b9:78:a0:59:55:63:3d:d6:21:c5:
                    fe:26:16:fe:8f:a9:13:bf:ca:e7:1b:c1:7c:c8:2d:
                    5e:3d:ad:73:da:6d:50:6c:ec:f5:69:25:e8:0f:86:
                    63:d0:2c:67:7f:f0:91:66:4a:1b:a5:09:6a:ce:e9:
                    ca:98:17:35:1a:6a:b9:f8:2f:12:ad:9d:98:3b:a3:
                    c6:45:c9:19:5f:4a:8f:fc:28:35:aa:fd:d0:d5:f2:
                    6d:f4:07:67:49:a8:9e:50:3f:d4:01:d2:29:2a:e7:
                    61:eb:a7:f3:00:55:bb:1e:7a:34:ec:1d:52:24:a4:
                    2d:b3:eb:a3:31:70:b1:68:d5:52:ce:eb:50:6b:66:
                    d5:7e:2f:29:be:37:28:d1:91:bb:99:dc:6c:7c:a3:
                    14:82:d6:de:fd:7b:40:19:f2:19:69:c1:8f:92:57:
                    2c:46:ad:16:ca:96:0f:e8:68:e4:8f:1b:f1:3c:23:
                    76:41:96:51:84:df:a2:61:9c:a4:e4:74:b9:b5:73:
                    3c:a4:ec:62:7a:48:f7:fa:04:bd:61:54:e8:09:fc:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AB:88:C5:09:07:27:04:F3:22:9F:50:01:D6:81:23:20:82:10:E9
            X509v3 Authority Key Identifier:
                keyid:8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/3230372e3234382e342e302f32322d3232203d3e20323731333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:49:c3:f3:bd:9c:cc:fe:26:3c:be:dc:2d:cf:46:5f:e9:
         d8:32:0a:64:e9:9e:92:20:83:bf:f0:b5:47:b2:dc:3f:e4:bb:
         ed:3b:20:ff:7d:c4:3f:37:a2:f0:49:9d:4c:fc:24:1c:b2:45:
         b7:61:8f:24:ef:fb:a2:9e:bb:97:d6:9a:1f:78:13:e9:b3:32:
         22:16:31:84:c5:65:13:7e:bd:6b:de:ab:5b:5e:d8:d9:72:96:
         c3:e1:d2:03:46:ba:20:5a:ba:01:1c:47:35:e4:ae:d5:94:7f:
         c7:bc:f8:21:ee:9a:c8:79:5f:86:f0:74:71:72:44:0c:c7:50:
         10:a8:9d:c0:a4:ac:d6:17:5b:97:f2:a4:b2:51:ad:1f:e5:40:
         88:1e:72:b0:70:77:6f:a0:83:b9:c7:ec:20:6f:69:d9:90:bb:
         13:b6:dc:6c:54:a0:1a:e6:34:cf:d9:8a:3a:3c:c2:f1:f3:47:
         86:a9:15:f7:74:81:51:e0:b7:07:aa:de:98:e6:71:9d:42:cf:
         fa:1f:d0:d5:15:12:a8:94:eb:5e:06:93:e2:fa:f0:2f:25:09:
         79:ec:b2:fb:e4:00:20:89:d3:8b:a1:36:3d:c9:c7:00:83:3a:
         bf:8c:c8:d1:be:7b:1f:3c:fc:db:00:2e:51:6f:3e:94:ba:c9:
         59:7d:5c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org