Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38302e302f32312d3234203d3e203533323234.roa
File:                     3230302e3233332e38302e302f32312d3234203d3e203533323234.roa (raw, json)
Hash identifier:          IoysrujfTDceXrruHjGwWJMcBG71tz5HDc/+tqBVymY=
Subject key identifier:   B1:12:88:75:20:ED:76:CC:98:8D:B2:24:64:EA:27:ED:29:A9:B0:B3
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       11BDF490179AA4BD782AF9FFBA7E6CD3AA9A1809
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38302e302f32312d3234203d3e203533323234.roa
Signing time:             Mon 13 Mar 2023 17:09:17 +0000
ROA not before:           Mon 13 Mar 2023 17:04:17 +0000
ROA not after:            Mon 11 Mar 2024 17:09:17 +0000
asID:                     53224
IP address blocks:        200.233.80.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bd:f4:90:17:9a:a4:bd:78:2a:f9:ff:ba:7e:6c:d3:aa:9a:18:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar 13 17:04:17 2023 GMT
            Not After : Mar 11 17:09:17 2024 GMT
        Subject: CN=B112887520ED76CC988DB22464EA27ED29A9B0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:71:49:21:a3:d5:4a:ae:81:cf:0b:9c:01:
                    47:d7:b2:67:69:7b:e2:31:5e:9b:6a:02:5d:59:7c:
                    e4:7f:05:c6:26:09:3a:90:b6:8f:a0:1f:85:fc:21:
                    ce:8c:48:aa:07:e2:d2:89:f4:3c:69:a0:3e:5f:15:
                    d9:ea:40:85:da:b8:e6:22:18:4b:34:97:61:56:9c:
                    13:0c:70:7e:9a:6d:86:66:b5:4d:1d:34:11:24:c5:
                    dc:3c:b2:ea:23:64:7e:4e:77:b5:b1:51:41:69:6b:
                    c0:c1:25:2c:91:32:66:cd:ea:77:8e:01:8d:54:15:
                    91:93:1f:b5:7a:0a:84:2f:97:2e:a3:7f:3e:15:1a:
                    db:c8:90:e9:45:b2:5b:6c:dd:c1:36:d3:00:c4:71:
                    d1:c7:03:8b:55:66:ed:c4:99:37:84:d8:04:d6:26:
                    97:f4:b0:93:fc:b5:75:6d:b5:41:5a:95:fd:b0:95:
                    64:73:88:5c:cd:84:1d:11:3f:8b:67:cf:e3:68:b7:
                    45:cd:f7:c1:25:84:a5:1b:96:6d:d0:33:c3:ae:74:
                    3b:0d:b1:62:df:39:1f:04:63:fc:23:b3:ab:35:fc:
                    e6:72:69:34:ba:da:00:be:61:3b:28:da:20:50:c7:
                    a3:f4:2e:e7:95:f0:12:25:7d:1f:31:cb:fe:77:fe:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:88:75:20:ED:76:CC:98:8D:B2:24:64:EA:27:ED:29:A9:B0:B3
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38302e302f32312d3234203d3e203533323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:9d:9c:18:89:bb:02:ec:06:51:f7:5e:0a:58:a3:6f:6f:c5:
         69:5d:b4:2f:c0:66:c9:93:7b:dd:ba:29:20:84:79:b1:e6:0f:
         97:fc:74:2c:18:79:33:65:38:6f:c0:db:49:7d:2b:2d:50:7e:
         c8:92:50:13:ab:72:ee:44:7f:0a:e3:96:cd:51:5e:3c:5e:25:
         5c:d2:fa:53:39:6a:05:7a:a3:ed:94:f6:1a:87:7d:dd:8d:61:
         8c:5f:de:88:3d:e3:95:2a:9b:28:9f:a3:7e:11:86:fe:75:a5:
         bd:e9:50:12:6d:1a:cc:f6:20:c8:03:fe:f3:2b:7c:dc:1e:3f:
         51:36:87:fb:52:d1:c1:1e:d1:8c:bc:8f:e1:2b:7a:3d:21:94:
         0a:64:d4:e8:4c:f9:9c:c0:92:3d:f6:e2:47:7c:53:6e:df:30:
         15:38:bb:56:3a:7e:26:61:33:0d:1e:3f:5d:46:37:f5:96:35:
         7d:3d:be:0c:1f:64:9c:9b:b2:da:de:1e:16:c7:35:87:7a:46:
         3c:79:81:72:c5:6d:d7:00:78:ab:d5:09:d4:3b:37:45:f1:98:
         57:ec:3d:3f:de:8b:4c:03:6b:35:08:85:06:63:bf:35:4d:25:
         41:68:8d:82:ec:c1:9f:2a:9e:ba:d0:d0:51:8f:de:1e:86:48:
         98:15:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org