Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32322d3232203d3e20323731323938.roa
File:                     3230302e35332e38342e302f32322d3232203d3e20323731323938.roa (raw, json)
Hash identifier:          LMz9jwMHWN9JZzZzRrmPOCFIEH7TaRF2jqH+yGjBc54=
Subject key identifier:   1F:97:2A:69:79:A7:47:C7:13:C3:EF:CF:CA:D6:2B:DB:0C:07:6C:E9
Certificate issuer:       /CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
Certificate serial:       44515810178E9E5777EED73476830E95AECFE1A3
Authority key identifier: 8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32322d3232203d3e20323731323938.roa
Signing time:             Mon 21 Aug 2023 22:39:01 +0000
ROA not before:           Mon 21 Aug 2023 22:34:01 +0000
ROA not after:            Mon 19 Aug 2024 22:39:01 +0000
asID:                     271298
IP address blocks:        200.53.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:51:58:10:17:8e:9e:57:77:ee:d7:34:76:83:0e:95:ae:cf:e1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
        Validity
            Not Before: Aug 21 22:34:01 2023 GMT
            Not After : Aug 19 22:39:01 2024 GMT
        Subject: CN=1F972A6979A747C713C3EFCFCAD62BDB0C076CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:07:76:af:e7:a4:1f:aa:13:18:3a:ad:8c:
                    e4:12:5c:4e:db:1e:3f:73:53:d6:7f:64:81:4a:bc:
                    a8:33:b8:ab:dd:0a:f8:54:2d:0c:f9:70:64:34:ce:
                    8d:72:8e:99:7a:64:47:71:70:01:8d:0b:d5:00:73:
                    1e:fb:fc:1e:9f:d8:69:9d:14:a0:15:0b:54:ed:a8:
                    86:87:73:96:5a:d1:b4:52:9a:a5:e3:d7:dd:d0:ba:
                    87:c8:5c:bd:fd:f2:d3:f9:51:df:73:34:72:cb:47:
                    cb:57:9b:bd:dd:f6:0a:7e:1b:c2:c2:92:2a:dd:1a:
                    d0:b8:75:2d:f4:7f:d1:9f:a9:38:ef:79:4a:89:19:
                    58:c8:f3:b3:d1:d6:48:00:2e:1c:e4:59:82:8d:ac:
                    6d:7c:42:91:22:f1:c7:f6:4f:84:7e:22:47:5a:62:
                    6b:31:e6:ab:55:d9:ac:4d:ef:3d:ec:9d:bf:05:1e:
                    17:22:b6:e7:95:f7:86:89:0e:ff:bc:73:8a:cd:3e:
                    d3:08:69:40:dc:e4:e7:74:28:98:38:7b:fc:ba:ea:
                    25:cd:00:7f:e2:e5:cf:8d:87:f6:7d:de:62:8d:7a:
                    91:08:8f:ab:99:e7:c7:08:8c:2e:e7:d2:47:d9:78:
                    ff:78:d2:cd:dc:70:d5:bc:e5:6a:1d:4f:58:67:b1:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:97:2A:69:79:A7:47:C7:13:C3:EF:CF:CA:D6:2B:DB:0C:07:6C:E9
            X509v3 Authority Key Identifier:
                keyid:8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32322d3232203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:bb:0c:67:01:68:0e:8b:a6:d8:c6:c7:a8:7b:5f:cb:7c:c9:
         04:19:ab:d1:34:52:23:82:33:58:82:51:c0:8d:6f:04:9b:a7:
         bc:a5:e5:c3:34:05:29:5a:7b:f6:59:25:d8:e3:ec:1d:d9:ce:
         fb:23:cc:3c:d9:d0:32:f3:54:41:65:43:86:43:ce:8e:3c:12:
         e9:b8:36:d8:a9:e2:5d:09:4f:ee:37:9f:c4:51:7b:db:bd:c4:
         f0:f5:8f:ac:72:ce:43:20:92:98:c0:a6:5c:21:43:8f:8d:b8:
         f6:6c:71:29:f0:d8:c7:91:2f:3c:0b:5f:ff:ba:00:fa:f3:27:
         a6:75:76:5b:cc:d4:ec:cd:a2:91:62:ef:66:77:60:bf:b8:1d:
         46:fc:e4:0a:ce:72:51:bd:24:41:e0:27:6d:26:1f:5c:a0:6f:
         7d:e5:6c:42:14:65:f6:87:41:92:a6:74:ea:65:1e:c2:aa:bf:
         5e:2d:4c:13:58:bc:8c:3d:f7:3d:69:1a:48:78:6d:55:c9:41:
         b5:b5:d7:8c:a7:b7:52:e2:82:b7:50:12:1e:86:4f:22:5f:cb:
         74:e6:24:cc:44:26:6d:ed:38:bb:5e:72:2d:9d:d0:2d:3b:d7:
         35:04:b7:e9:84:33:89:fa:af:69:a8:b9:21:fc:77:84:66:4e:
         96:8e:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org