Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38302e302f32312d3231203d3e203533303539.roa
File:                     3230302e3233332e38302e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          CVSm9AU++e5QxxRsHwj9Mw8TQQ9kToT8UIEaXOy35Vk=
Subject key identifier:   9E:C8:89:73:D7:D6:C2:71:04:F9:E2:96:AB:AF:EA:73:34:EA:E7:D0
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       61E1817F77DCD37A497640E75D8A3CA6A62C437F
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38302e302f32312d3231203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:37 +0000
ROA not before:           Fri 03 Mar 2023 12:14:37 +0000
ROA not after:            Fri 01 Mar 2024 12:19:37 +0000
asID:                     53059
IP address blocks:        200.233.80.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e1:81:7f:77:dc:d3:7a:49:76:40:e7:5d:8a:3c:a6:a6:2c:43:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:37 2023 GMT
            Not After : Mar  1 12:19:37 2024 GMT
        Subject: CN=9EC88973D7D6C27104F9E296ABAFEA7334EAE7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:7d:14:a7:5f:f3:4b:92:a0:4b:b6:bb:92:
                    1c:fa:c4:8d:7e:b7:a9:6e:97:b1:05:d3:74:e7:a9:
                    7b:38:93:77:a1:81:5d:4d:06:18:bd:5d:11:36:9c:
                    38:b6:7a:d7:03:e5:19:45:f2:4a:8d:65:7c:af:e0:
                    a2:b2:08:b1:5d:16:2b:77:4d:eb:72:ff:ee:9d:0e:
                    52:3d:30:61:6a:f2:c5:1f:53:69:ae:d1:9b:b3:8c:
                    49:e6:cf:b5:0e:55:23:6a:73:0e:c9:6d:bc:5f:c0:
                    44:f2:a3:41:85:31:3d:11:6e:02:e4:8b:d1:86:1d:
                    5e:92:d7:e1:2d:bb:f1:12:2e:ad:40:dc:81:82:11:
                    a4:eb:77:cf:1f:63:5d:33:ff:f8:e1:40:1c:b6:9a:
                    c0:d5:b6:c7:0b:3b:2b:93:f8:e5:40:a8:79:71:e4:
                    f7:30:e9:1a:67:fa:e7:8a:e7:3a:c5:db:e5:d2:12:
                    d4:36:99:90:f2:50:d6:98:cd:0a:db:f7:1d:1f:34:
                    94:7e:ff:11:8b:6c:9c:da:e3:44:bb:9a:af:87:9f:
                    fb:a4:c1:ff:d2:c8:0b:27:b3:b9:42:03:4f:d1:7d:
                    5d:09:40:be:7a:fa:d6:11:db:21:ec:6f:0e:5c:73:
                    6e:1a:f9:5a:47:92:5d:06:64:4d:ce:50:58:88:b6:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C8:89:73:D7:D6:C2:71:04:F9:E2:96:AB:AF:EA:73:34:EA:E7:D0
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38302e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:ae:6b:a8:41:db:d2:21:e8:15:2f:f1:3f:34:e9:c0:5e:
         01:67:37:86:56:85:90:1f:d3:4c:5f:e2:0e:57:ec:55:f7:9b:
         90:5f:c1:e1:17:59:46:43:73:cf:29:5e:ff:90:43:3f:23:b4:
         60:d8:46:db:02:cf:b7:57:be:e8:29:30:98:3a:7d:fa:ea:62:
         b3:73:cb:3a:ec:eb:ae:1f:b3:7b:16:91:b3:b8:1b:32:bf:40:
         4a:ba:75:7c:24:81:87:0d:ba:1a:cf:b9:9a:95:90:d2:00:9d:
         35:aa:24:a9:c2:1c:e3:f8:5c:6f:a5:e5:40:b5:d7:69:f0:49:
         e7:2b:57:47:6e:e4:eb:3f:9f:40:8e:f1:58:ee:5d:89:56:0b:
         38:82:d0:a7:53:81:26:28:8c:01:36:e8:98:8a:a6:41:8e:6e:
         e6:95:78:f8:8c:c1:f0:48:87:83:90:47:0e:57:ed:32:05:71:
         e6:c1:91:f5:ef:1b:30:61:6e:42:b9:3e:bb:22:4e:94:c6:f7:
         49:91:e6:ed:e7:87:1c:ab:33:76:0e:d3:35:44:a5:3f:b1:49:
         4a:e2:d6:3e:be:ad:63:f5:e5:86:50:6f:17:4d:63:5c:9e:62:
         41:49:1b:78:d9:03:0d:30:de:cb:d0:f1:d1:25:0f:47:ff:a1:
         0c:ed:39:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org