Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38352e302f32342d3234203d3e20323731323938.roa
File:                     3230302e35332e38352e302f32342d3234203d3e20323731323938.roa (raw, json)
Hash identifier:          /ZC2sRLzRLTfelUrwY+1Nlg1Tq33twtRMyq7XYRsXqg=
Subject key identifier:   A6:2A:A6:E0:F7:03:33:DE:1E:66:E3:0D:7D:54:99:6F:FE:E6:7D:AF
Certificate issuer:       /CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
Certificate serial:       57AF1D69061892021F68393B222A9DEA0E9CE59F
Authority key identifier: 8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38352e302f32342d3234203d3e20323731323938.roa
Signing time:             Thu 31 Aug 2023 14:09:10 +0000
ROA not before:           Thu 31 Aug 2023 14:04:10 +0000
ROA not after:            Thu 29 Aug 2024 14:09:10 +0000
asID:                     271298
IP address blocks:        200.53.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:af:1d:69:06:18:92:02:1f:68:39:3b:22:2a:9d:ea:0e:9c:e5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
        Validity
            Not Before: Aug 31 14:04:10 2023 GMT
            Not After : Aug 29 14:09:10 2024 GMT
        Subject: CN=A62AA6E0F70333DE1E66E30D7D54996FFEE67DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d4:ab:3c:d8:eb:81:b8:1f:82:ed:cc:db:f0:
                    f1:e5:52:54:60:20:bf:4c:a8:65:2d:f3:44:b7:92:
                    7a:fb:2c:ad:9d:5e:59:e1:98:8c:56:b5:e4:bc:3f:
                    86:09:2f:55:45:3d:fe:b6:17:38:08:76:4c:7e:c5:
                    cd:14:08:c2:17:7a:94:e5:0d:11:c4:b8:81:1e:47:
                    49:7c:b9:48:30:fb:da:c2:f9:a1:1d:1b:aa:9a:90:
                    03:92:1b:bf:c4:c2:83:22:17:d3:6f:eb:86:62:65:
                    68:cb:56:7b:18:d0:5a:54:9c:f7:98:a0:f8:77:a6:
                    2e:2b:16:62:50:cf:a4:df:bc:e3:f7:75:3f:53:69:
                    aa:be:06:31:07:2a:10:17:f7:55:39:b0:48:87:db:
                    57:2b:6b:3f:5f:4d:cc:a7:d7:76:c9:ab:d6:ce:60:
                    b7:79:b7:f2:d5:1a:8c:f7:25:3e:ec:39:12:ad:af:
                    a0:06:ee:14:c1:3b:c1:8b:bf:64:98:59:90:6c:5f:
                    ac:06:2f:05:6c:dd:0d:d9:5a:91:84:e7:be:55:7b:
                    33:06:84:ff:5a:b8:1c:2d:10:7c:36:e1:0f:0d:76:
                    c3:99:c8:5a:d6:e3:dc:7c:af:fe:b7:bb:94:af:1c:
                    16:5a:85:95:64:ab:f8:8b:d1:45:47:ad:58:c7:74:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2A:A6:E0:F7:03:33:DE:1E:66:E3:0D:7D:54:99:6F:FE:E6:7D:AF
            X509v3 Authority Key Identifier:
                keyid:8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38352e302f32342d3234203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:65:05:ea:d2:fb:70:c2:59:ca:93:35:93:4e:4c:4b:c7:91:
         e8:fd:50:09:47:90:60:c5:8d:a2:1a:b1:e3:3d:0f:b0:e9:c8:
         82:a1:dd:76:93:3c:2a:7c:1e:8a:2f:b2:59:2d:e3:2e:a0:01:
         4d:07:b2:42:fe:ba:b4:60:6e:c3:a9:18:c6:29:da:77:a3:52:
         64:e3:f8:a0:b6:3f:29:a4:fa:38:f4:d3:04:4e:8d:96:f7:3d:
         94:e6:d4:66:c0:ca:ad:dc:02:ec:e0:60:e8:84:43:79:09:4f:
         fc:af:95:54:04:da:bd:99:03:a5:f6:68:33:ae:2e:7b:8f:a1:
         93:4c:02:98:fa:12:74:af:16:1c:70:03:99:25:6c:a4:49:58:
         09:6b:45:a2:03:63:b3:6a:2c:03:74:cf:2b:ae:0d:36:fc:9e:
         a9:10:32:2e:28:78:c9:af:d8:19:dc:88:e1:31:e4:f0:b5:11:
         3f:ba:e4:58:3c:2c:c6:e6:8b:02:0f:ce:32:f2:65:c5:f6:64:
         f7:ed:bc:1b:38:42:4e:f5:68:89:d6:0a:40:ff:fc:4d:24:68:
         6c:6e:ba:45:59:03:65:5e:06:26:05:ba:89:b1:cd:64:fe:91:
         f6:39:4a:fa:1c:fe:c9:65:a3:02:fb:bb:fe:59:d5:c9:51:ee:
         b2:68:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org