Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32332d3234203d3e20323731323938.roa
File:                     3230302e35332e38342e302f32332d3234203d3e20323731323938.roa (raw, json)
Hash identifier:          pZ5NVlStRdu4JePEZBsIdrFvfZXjYqnAAMFrzTD8BUk=
Subject key identifier:   AD:10:B6:D0:C2:DF:03:20:D1:17:04:A9:FB:3E:BD:AF:2E:D5:99:EB
Certificate issuer:       /CN=0B7E676BF893065665A524EBE293E999020CF3E1
Certificate serial:       4F6596410603A41D658C92665432F3EFEF5B56BA
Authority key identifier: 0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32332d3234203d3e20323731323938.roa
Signing time:             Tue 30 Jan 2024 19:57:33 +0000
ROA not before:           Tue 30 Jan 2024 19:52:33 +0000
ROA not after:            Tue 28 Jan 2025 19:57:33 +0000
asID:                     271298
IP address blocks:        200.53.84.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:65:96:41:06:03:a4:1d:65:8c:92:66:54:32:f3:ef:ef:5b:56:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7E676BF893065665A524EBE293E999020CF3E1
        Validity
            Not Before: Jan 30 19:52:33 2024 GMT
            Not After : Jan 28 19:57:33 2025 GMT
        Subject: CN=AD10B6D0C2DF0320D11704A9FB3EBDAF2ED599EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ec:c6:b1:a1:d0:6a:76:98:02:48:97:fe:33:
                    54:e3:29:2d:38:25:cc:55:b1:d6:9e:0f:47:60:f0:
                    ec:2f:cb:84:fc:2a:19:9f:96:6f:cf:d4:7f:bc:8e:
                    bf:1b:b3:11:04:9f:df:b1:70:e9:00:6e:43:f8:39:
                    17:95:cb:42:bf:ff:f7:53:fe:98:9e:fa:14:b3:7e:
                    67:85:10:33:aa:38:d9:da:de:b5:e6:34:d1:c4:8c:
                    6e:ea:73:8f:1d:2b:8d:fa:7d:97:96:07:37:a0:b9:
                    cc:4f:58:13:85:ba:b1:f3:c4:ee:07:11:b8:8a:dc:
                    3a:55:88:aa:c5:ec:34:3a:0a:cd:8b:01:28:28:c1:
                    ac:3f:dc:dd:fa:ef:5b:1c:14:2a:25:46:61:57:5e:
                    cc:a5:98:de:95:8b:0a:55:11:8e:27:48:02:94:f2:
                    d4:f5:e2:e1:41:d5:c0:8e:7a:31:96:fa:7a:b4:57:
                    bf:92:0c:a5:2c:76:ef:34:b3:20:50:e4:17:11:60:
                    a3:4b:7d:39:a4:dd:31:e9:9b:70:37:e5:52:14:8b:
                    9b:26:97:5d:3f:37:76:8b:b5:c8:7b:6e:e1:2b:d8:
                    74:c0:a8:8c:97:ae:16:13:86:0f:5d:42:16:2c:7c:
                    7c:28:7e:dd:9d:92:ea:3a:97:80:8c:f9:23:4a:94:
                    01:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:10:B6:D0:C2:DF:03:20:D1:17:04:A9:FB:3E:BD:AF:2E:D5:99:EB
            X509v3 Authority Key Identifier:
                keyid:0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38342e302f32332d3234203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:3f:8d:ed:ec:a4:34:9a:23:ba:ea:a7:3c:f4:ab:9b:8c:8c:
         3e:45:7a:2f:e8:c7:9d:0e:5f:30:5b:61:ba:57:59:90:cb:33:
         2f:7f:c1:2b:31:83:97:e8:81:67:96:10:08:99:50:d4:e7:d7:
         92:2b:80:3a:d8:07:c8:6a:0e:10:2c:63:a0:89:51:89:52:d6:
         fb:ba:1a:3b:a5:93:ae:a5:ea:9c:92:6c:da:a2:25:20:d8:f4:
         0b:4d:d1:4b:47:a2:2e:60:24:3f:40:22:d5:61:76:40:18:88:
         0e:18:b2:c5:84:cf:11:00:28:48:c3:da:07:fe:f8:6f:5e:b0:
         cc:3a:86:21:b0:0f:ce:24:48:5a:aa:a7:1b:54:42:71:e1:ca:
         b7:2e:23:eb:53:d2:fb:e8:dc:07:89:d5:93:45:fd:de:61:c5:
         df:17:1d:11:94:3c:05:3d:0b:18:e1:24:37:61:d4:c6:a1:46:
         33:95:65:30:74:0e:cd:ac:fb:d0:0c:31:4d:2c:8b:73:73:b3:
         69:85:c3:f4:c0:9a:85:33:c9:27:7b:22:f4:37:ca:f2:5c:3c:
         74:fe:e7:4a:c2:d7:17:bd:e3:4b:03:b9:23:c0:0c:c7:cd:60:
         02:2c:84:a9:f1:c9:6a:87:58:8a:d8:35:59:4f:03:40:70:06:
         29:f5:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org