Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38382e302f32312d3234203d3e203533323234.roa
File:                     3230302e3233332e38382e302f32312d3234203d3e203533323234.roa (raw, json)
Hash identifier:          +tjjlTmsC1DEwtmZWgx1A8ZGn/xBljWjMXJAbRVMRi8=
Subject key identifier:   06:13:7C:32:75:45:F5:0F:FA:7B:B8:75:53:4F:2B:03:65:21:DA:D8
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       F24001FB3A6FD6A398B6024A8E4530140256A2
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38382e302f32312d3234203d3e203533323234.roa
Signing time:             Mon 13 Mar 2023 17:09:47 +0000
ROA not before:           Mon 13 Mar 2023 17:04:47 +0000
ROA not after:            Mon 11 Mar 2024 17:09:47 +0000
asID:                     53224
IP address blocks:        200.233.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:40:01:fb:3a:6f:d6:a3:98:b6:02:4a:8e:45:30:14:02:56:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar 13 17:04:47 2023 GMT
            Not After : Mar 11 17:09:47 2024 GMT
        Subject: CN=06137C327545F50FFA7BB875534F2B036521DAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:4d:b0:9a:9c:d1:65:8e:6e:23:94:45:7a:
                    58:64:4a:88:64:c6:e3:96:93:d1:7e:61:54:32:17:
                    ec:10:5f:c8:5f:f8:38:1f:a6:d1:22:e0:f3:f2:d4:
                    39:15:f4:7e:86:fd:fb:cc:4e:28:79:aa:23:67:bc:
                    90:18:f8:94:23:8e:b8:b3:0f:38:56:61:f6:ad:f0:
                    90:d2:0c:f8:87:d4:e2:c0:6a:2b:dd:66:9e:f8:c2:
                    00:18:76:87:d1:65:e5:89:48:72:c2:3d:24:43:0b:
                    a8:97:d8:6a:1b:ba:34:29:aa:b8:34:50:c7:f2:e6:
                    31:c6:88:f9:2a:cf:e8:f0:01:5e:e4:75:59:86:7d:
                    7d:e5:9f:c2:d7:d1:f8:fc:ef:eb:5d:fa:d6:d7:68:
                    cc:67:56:1d:ce:e7:e4:bb:29:c9:4a:ff:d0:ea:48:
                    5a:63:cc:5b:b2:4f:12:8e:98:16:54:37:eb:2c:41:
                    f9:4a:d5:0a:d3:0b:3a:63:79:37:c0:94:71:8a:53:
                    41:30:1b:68:db:29:2d:e5:a3:1d:49:54:9f:2a:77:
                    e0:2b:e0:63:f3:3c:47:fe:9b:ea:93:42:ec:8a:1e:
                    ce:11:8d:7e:7e:53:2c:72:a1:47:49:2e:e4:89:bb:
                    39:6a:e6:c9:40:9d:79:93:37:ca:ac:ab:27:2d:31:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:13:7C:32:75:45:F5:0F:FA:7B:B8:75:53:4F:2B:03:65:21:DA:D8
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230302e3233332e38382e302f32312d3234203d3e203533323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:86:7e:d6:ea:e8:7b:55:1b:04:e4:8c:c2:c1:d2:64:73:
         7b:01:24:15:8f:77:ad:ff:13:8d:3b:9b:87:ad:35:48:d8:a2:
         16:a1:0d:80:b8:0c:86:7c:0b:70:73:33:04:d3:36:2b:48:16:
         25:50:a4:e7:56:70:6a:c3:73:54:ad:c2:d3:38:27:34:e2:ed:
         30:16:5b:3c:f3:7c:65:7a:11:a8:0a:17:ce:ac:3e:3e:5b:f7:
         6b:6f:6f:db:1a:b6:7b:24:ee:28:7d:be:fc:bb:78:86:4c:cc:
         d2:c0:2a:47:bf:fd:21:b2:70:dc:67:33:2e:df:7c:a3:58:7c:
         a0:c3:cb:65:52:65:b9:1b:75:ee:68:1e:83:72:89:cc:70:07:
         0c:f0:9a:66:2f:0f:de:0b:9b:d6:86:32:c1:98:0f:99:38:47:
         ae:6a:01:e8:52:f1:9f:6a:1a:89:29:2f:11:8d:af:d1:61:80:
         bf:b7:2b:18:45:48:d2:cc:16:87:f4:d8:c8:5c:2e:9b:91:c2:
         28:4e:e7:74:e0:14:ed:94:7a:70:8c:4d:22:31:b6:79:48:5a:
         04:3c:7e:53:d3:53:a8:5a:3b:c4:37:9a:56:c3:54:1d:0d:d9:
         cb:38:44:f2:52:5c:87:27:e8:10:72:b1:a4:43:4b:8c:33:2f:
         a2:62:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org