Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38302e302f32302d3230203d3e203533303539.roa
File:                     3230302e3233332e38302e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          grtJjwOextDxiyRsZ2FasQjpfN2/vPZYS1XV8+Q3Fgg=
Subject key identifier:   17:4E:8A:20:58:D1:BE:63:98:9E:B3:A3:C2:29:A6:F2:22:D8:9A:5A
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       6E5C0B375343C992C6516D48149A3C0DA2CB26E3
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38302e302f32302d3230203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:21 +0000
ROA not before:           Tue 12 Mar 2024 19:46:21 +0000
ROA not after:            Tue 11 Mar 2025 19:51:21 +0000
asID:                     53059
IP address blocks:        200.233.80.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5c:0b:37:53:43:c9:92:c6:51:6d:48:14:9a:3c:0d:a2:cb:26:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:21 2024 GMT
            Not After : Mar 11 19:51:21 2025 GMT
        Subject: CN=174E8A2058D1BE63989EB3A3C229A6F222D89A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3e:2d:0c:27:b9:ee:6b:33:b3:33:f6:69:94:
                    2e:18:b5:58:55:e9:df:8a:c1:b0:d5:1b:86:0d:51:
                    61:a6:4c:80:37:7e:9b:1b:51:4d:f7:7b:1e:fe:2b:
                    22:5b:dd:71:45:16:ed:58:8e:d6:b7:bc:6e:d5:bb:
                    6e:8b:ea:33:f8:29:85:12:a0:80:35:57:42:97:b3:
                    70:e6:da:7a:3e:4c:b9:8f:a7:72:db:e5:01:59:bc:
                    9d:e4:20:2e:00:71:b5:2e:4b:c1:3d:e3:96:a3:17:
                    fd:9a:e1:2e:56:e0:c5:e4:f1:3b:e7:04:d2:ea:9a:
                    e3:55:46:87:e5:08:c9:9b:97:91:32:71:cd:2a:49:
                    1c:b8:e2:f9:a5:cb:71:c5:ef:41:5d:6f:8b:b2:20:
                    58:73:61:9d:5f:aa:a8:16:6c:0e:11:74:ca:88:ba:
                    0e:44:dd:70:8d:8c:26:1b:93:15:28:d5:23:67:01:
                    91:03:54:38:d2:d3:25:02:3b:00:eb:fb:31:b0:c7:
                    7b:af:b8:77:c1:5b:0d:75:4c:36:54:70:0d:ba:d9:
                    89:05:61:84:d3:17:86:42:e6:0c:60:61:ff:6f:a6:
                    ea:82:63:ee:82:86:8e:d9:b1:6d:52:eb:26:f7:fc:
                    e1:30:eb:db:21:c8:15:c7:e4:57:aa:0b:0a:77:26:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4E:8A:20:58:D1:BE:63:98:9E:B3:A3:C2:29:A6:F2:22:D8:9A:5A
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38302e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b2:61:d9:51:a2:81:d7:13:02:15:f4:55:2e:b7:2a:12:91:76:
         e2:19:e6:cd:a8:e4:28:6b:78:44:25:96:a5:09:cd:11:c9:76:
         35:29:45:e6:c7:9c:eb:83:e4:1c:60:d5:fe:62:ac:17:33:07:
         73:fc:60:95:38:eb:65:d4:94:a5:77:28:6d:ac:f0:cb:f0:46:
         5f:9e:e6:58:9f:e7:fa:74:f7:5c:3a:a7:3d:ed:21:7e:4e:b2:
         07:c8:d6:e5:a2:5d:b8:5c:33:e8:12:a9:c6:29:e9:85:f2:d5:
         06:89:03:1f:98:7a:b1:43:19:4b:56:2c:ad:c4:af:90:fd:4f:
         18:fa:3c:10:ff:37:71:b5:1a:a1:f1:ee:8a:54:b0:dd:02:f0:
         89:ae:f2:93:47:b2:f3:0c:95:dd:88:4a:5b:db:af:a6:06:3b:
         83:6f:da:fa:b5:73:5a:02:67:5c:13:26:df:98:21:fc:c5:b5:
         c8:09:1e:c2:46:b1:8f:5f:a3:29:e1:f0:74:e8:92:81:83:3b:
         fb:c6:c3:c7:52:98:1b:88:5c:b3:4c:2f:85:54:f8:6e:47:14:
         58:65:f6:83:45:e4:85:41:ef:d4:9d:d9:1a:c3:ab:74:6d:d5:
         db:ed:9d:e5:a9:ea:93:a0:de:10:1a:3c:5d:a2:fd:5f:f8:dc:
         9e:2e:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org