Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38382e302f32312d3231203d3e203533303539.roa
File:                     3230302e3233332e38382e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          kS1RHTSarVKc2YtBWH+DyC3hvdcVxmzOxmWZSUD9fbA=
Subject key identifier:   76:6B:4E:75:D1:0B:C8:07:1C:E9:B9:EA:CC:01:45:13:66:2E:87:AC
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       6B7E16E9678E2A2A564E896FE27AEE9228A67EE0
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38382e302f32312d3231203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:39 +0000
ROA not before:           Fri 03 Mar 2023 12:14:39 +0000
ROA not after:            Fri 01 Mar 2024 12:19:39 +0000
asID:                     53059
IP address blocks:        200.233.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7e:16:e9:67:8e:2a:2a:56:4e:89:6f:e2:7a:ee:92:28:a6:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:39 2023 GMT
            Not After : Mar  1 12:19:39 2024 GMT
        Subject: CN=766B4E75D10BC8071CE9B9EACC014513662E87AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:5d:05:46:4f:3c:ba:b7:17:b2:55:15:87:
                    71:19:af:11:0f:1b:68:7c:b1:6a:58:4a:43:69:77:
                    11:38:5b:cf:79:63:92:27:89:7f:b0:ee:eb:f3:50:
                    cd:21:d4:f5:8c:fa:cc:87:21:69:c3:0e:eb:4c:20:
                    a4:21:54:db:4f:68:71:85:2f:ed:34:46:df:d0:46:
                    64:18:87:72:08:db:16:34:8c:c2:51:2d:16:a8:60:
                    e9:13:84:fb:e0:4a:5a:19:5c:de:16:d4:1c:6e:28:
                    5d:2d:36:c9:a8:59:65:3a:70:51:62:bb:db:c4:08:
                    75:c4:2b:71:f6:37:6b:a3:6d:80:4d:a6:29:19:50:
                    3e:fa:83:dd:48:98:66:a9:fc:27:43:b8:af:06:a4:
                    ff:c5:08:cf:8c:8a:11:ab:2d:b0:06:38:f3:d8:25:
                    13:79:2a:25:7c:2e:b8:31:ca:56:37:3e:2f:6a:ca:
                    1a:7f:d3:2a:b5:ef:e6:71:02:e9:08:58:9f:b7:16:
                    29:10:01:47:93:39:a2:f9:a3:13:a8:a2:04:cb:68:
                    81:9c:89:a7:2b:a4:6e:56:32:29:59:6b:7e:2a:65:
                    b4:28:16:7a:c2:ea:78:51:ca:17:a3:3d:21:b1:6b:
                    e6:14:0d:56:4a:16:fc:86:4b:96:7e:71:5c:7d:f9:
                    b2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:4E:75:D1:0B:C8:07:1C:E9:B9:EA:CC:01:45:13:66:2E:87:AC
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38382e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:65:c5:36:2c:27:d8:5f:67:fd:22:80:82:f7:d8:f9:b4:
         85:a4:06:46:3e:24:79:65:90:56:87:23:3f:d0:b7:93:b7:02:
         cf:f5:aa:45:00:2e:cd:42:49:78:81:95:3d:ae:f6:b1:71:6d:
         19:b8:12:41:16:a6:1e:3c:2d:59:d7:e4:e6:46:a5:6c:c6:7c:
         10:40:8d:41:19:93:9d:5f:f6:51:8f:d4:d8:5a:74:d2:fd:32:
         87:73:3b:35:83:cf:e6:50:b3:11:81:f7:0b:83:19:f6:60:40:
         0c:14:10:29:2c:0d:4e:22:c9:03:ef:ab:7a:ad:4f:f9:21:89:
         26:e8:57:e2:d9:bf:95:79:4f:2b:db:14:a9:d1:8e:47:ab:7e:
         38:39:b8:d4:a6:62:62:24:d8:4a:23:06:3b:cc:21:c1:5b:63:
         fb:06:ac:b7:d7:57:2f:e7:d4:e2:0d:0e:d6:50:3f:20:e2:cc:
         6c:d7:68:8d:33:78:72:18:82:1d:81:5c:e5:4d:0c:60:61:ef:
         c8:66:fa:96:94:02:43:26:cc:c6:b7:ea:74:7f:72:cb:0c:c3:
         02:1d:5f:c8:a6:fc:fc:66:a3:15:fc:0c:fb:ce:54:85:a9:d1:
         de:7d:8c:2a:1c:07:87:4e:b9:08:0c:5e:b2:6d:4e:c7:fb:7e:
         2e:8d:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org