Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32332d3233203d3e20323731323938.roa
File:                     3230302e35332e38342e302f32332d3233203d3e20323731323938.roa (raw, json)
Hash identifier:          ipshsCiRwvuy7LxA1aSPQd3uU2WSrDf4Neb21M/q8m0=
Subject key identifier:   06:95:5D:78:88:9F:2F:57:79:DB:A2:F0:30:17:DC:87:A1:B0:19:01
Certificate issuer:       /CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
Certificate serial:       2BDB216BAE41EC7CF3BB0F2D8ACFE23BABC7B07A
Authority key identifier: 8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32332d3233203d3e20323731323938.roa
Signing time:             Tue 05 Dec 2023 00:13:20 +0000
ROA not before:           Tue 05 Dec 2023 00:08:20 +0000
ROA not after:            Tue 03 Dec 2024 00:13:20 +0000
asID:                     271298
IP address blocks:        200.53.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:db:21:6b:ae:41:ec:7c:f3:bb:0f:2d:8a:cf:e2:3b:ab:c7:b0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
        Validity
            Not Before: Dec  5 00:08:20 2023 GMT
            Not After : Dec  3 00:13:20 2024 GMT
        Subject: CN=06955D78889F2F5779DBA2F03017DC87A1B01901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:84:23:02:42:83:b7:c8:2a:21:96:63:3b:
                    94:2a:df:0c:72:8f:0f:27:ac:ca:3e:65:e7:bd:d8:
                    6a:7a:af:96:f9:b7:4f:cb:99:47:df:d1:df:e6:a5:
                    25:f2:13:40:59:93:11:26:a8:80:92:58:12:56:24:
                    21:a0:58:b6:e2:61:e7:b3:bb:c2:93:bf:a8:16:db:
                    85:57:0c:45:74:69:fb:28:59:99:f6:aa:f1:d2:61:
                    69:39:c2:db:e2:01:15:b5:d3:74:c1:43:3d:a4:da:
                    88:34:76:ef:27:43:80:36:ad:3f:e1:d9:46:4a:b0:
                    5b:df:71:04:b4:89:bd:ed:db:60:b5:11:91:02:4e:
                    0a:7d:e6:26:e8:0e:8d:96:69:67:bd:6d:0d:67:21:
                    61:b2:9b:06:b3:ad:aa:9b:56:5d:db:82:8c:39:86:
                    e9:9c:35:96:a9:06:df:c3:d6:28:f5:25:91:66:45:
                    13:6a:b8:00:23:e8:a6:7f:8d:a2:d9:9c:35:05:ca:
                    ca:45:8c:ef:aa:b0:79:7f:d9:6c:f1:d2:93:3d:2d:
                    3e:85:73:b9:9a:41:64:7e:db:74:42:cd:85:05:92:
                    ce:a6:39:39:23:dd:3a:39:1e:4e:ba:d4:e5:6e:0d:
                    38:4e:10:10:ec:32:3f:5a:bb:f9:1a:40:d2:8d:b0:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:95:5D:78:88:9F:2F:57:79:DB:A2:F0:30:17:DC:87:A1:B0:19:01
            X509v3 Authority Key Identifier:
                keyid:8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32332d3233203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:db:96:eb:ca:63:25:0e:5b:8f:51:f5:c6:6e:19:d2:60:4a:
         ee:ff:8d:79:8e:09:5d:4f:a9:2a:fb:49:ad:c3:16:0a:48:60:
         dd:98:cb:4e:96:a3:b6:35:0f:b9:e3:a8:92:7e:51:f5:1c:22:
         a1:ca:1a:15:4b:2c:53:7b:19:cc:63:5c:db:60:d6:c2:75:1c:
         37:94:9b:d1:57:8f:ab:cb:9e:3d:79:aa:ba:2c:99:cc:57:e1:
         b6:3a:b1:0f:b2:8e:78:ae:f7:62:56:eb:21:f1:12:f2:4d:f7:
         0d:1f:02:bf:9b:5e:c6:c3:62:51:aa:f0:bf:fc:52:a6:75:11:
         eb:dd:0f:a5:88:11:8b:a7:4c:7f:94:77:29:ee:66:84:65:aa:
         98:5e:52:a2:7c:03:b7:b3:e3:fe:fc:19:89:d1:40:d4:b1:58:
         73:f3:41:19:80:3e:f2:d5:80:a7:06:f9:bc:a1:cb:10:73:84:
         d3:04:d4:cf:11:9e:a5:75:48:ef:82:4a:89:24:c9:3d:28:fa:
         62:42:a5:78:67:6f:1e:3b:f5:5d:2a:3d:4f:b6:b7:16:30:a8:
         c3:d8:89:02:fc:0a:0a:02:a2:7e:69:dd:51:41:0f:35:01:2f:
         7a:95:1f:2f:15:42:d6:56:98:f9:9a:89:d9:d8:b0:5d:38:88:
         7e:88:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org