Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38362e302f32332d3233203d3e20323731323938.roa
File:                     3230302e35332e38362e302f32332d3233203d3e20323731323938.roa (raw, json)
Hash identifier:          g6S6HuQcg1JW4flKsJJW1SFG3j+Sd6MYUUPClIQu21I=
Subject key identifier:   A7:02:21:A8:92:A8:0A:9F:DE:BC:50:E2:8F:B5:5D:F4:CA:41:22:80
Certificate issuer:       /CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
Certificate serial:       28A19A224FED7C221C3658C29AC46CDD1AA97936
Authority key identifier: 8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38362e302f32332d3233203d3e20323731323938.roa
Signing time:             Tue 05 Dec 2023 00:24:29 +0000
ROA not before:           Tue 05 Dec 2023 00:19:29 +0000
ROA not after:            Tue 03 Dec 2024 00:24:29 +0000
asID:                     271298
IP address blocks:        200.53.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a1:9a:22:4f:ed:7c:22:1c:36:58:c2:9a:c4:6c:dd:1a:a9:79:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
        Validity
            Not Before: Dec  5 00:19:29 2023 GMT
            Not After : Dec  3 00:24:29 2024 GMT
        Subject: CN=A70221A892A80A9FDEBC50E28FB55DF4CA412280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:5f:51:76:8f:1d:58:44:6c:47:8b:df:18:
                    c5:6c:b2:56:f7:8d:fc:b3:16:c8:d7:56:8b:fb:2a:
                    85:e4:5d:3c:15:74:c7:5e:4b:40:4c:28:fb:e3:69:
                    07:90:21:d7:a6:d3:ad:02:fe:88:4d:b6:d3:17:eb:
                    ea:6f:95:89:d0:b3:c0:2d:d2:d7:9c:76:db:c4:ed:
                    74:2e:5e:3a:55:43:c1:29:a3:af:ab:0d:c9:72:26:
                    19:db:da:1f:7d:29:88:83:7a:99:88:57:5d:9a:b4:
                    9b:6a:64:6b:82:6a:db:be:83:8d:80:7d:2f:91:0e:
                    69:66:17:ae:27:36:5a:2c:47:40:5e:20:cc:1e:6b:
                    1d:11:1c:50:a2:50:09:d3:f2:d1:59:d6:0e:dd:e4:
                    9f:0e:b4:84:f3:3a:1b:b0:14:8e:62:c7:82:df:01:
                    7a:84:04:33:98:da:da:3b:3c:c3:95:68:f7:c6:f0:
                    3d:6e:20:29:54:d9:ce:f7:e4:b6:86:cc:11:6e:17:
                    a2:f7:3f:40:f1:f7:1f:78:75:6a:64:c7:e7:05:b4:
                    56:84:ca:25:bb:f0:9e:31:95:ad:56:0d:37:2c:54:
                    e2:ad:c2:89:a2:1b:5d:ba:f4:ec:8a:f1:ba:eb:30:
                    56:07:cd:ee:00:6d:17:ac:a3:26:c8:8e:90:9a:55:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:02:21:A8:92:A8:0A:9F:DE:BC:50:E2:8F:B5:5D:F4:CA:41:22:80
            X509v3 Authority Key Identifier:
                keyid:8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38362e302f32332d3233203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:55:1f:2e:0e:70:20:81:8b:ca:c6:dc:83:a1:99:db:f2:
         4b:01:0b:b4:75:2c:b3:d4:9f:05:b1:19:7d:ba:cb:10:63:5e:
         54:7c:b0:8c:06:35:2d:37:06:aa:ba:0a:a9:df:88:a4:2b:fe:
         3a:62:22:a0:48:bd:5d:d9:fb:60:58:16:40:c2:b4:78:e8:d6:
         10:a7:83:bc:d1:a4:65:1a:8d:a9:11:10:c6:72:9e:23:d1:d6:
         c4:5f:41:84:16:70:f6:a4:33:2d:ac:40:40:72:a3:09:a4:94:
         53:8d:1e:d9:5b:ef:16:83:ae:97:24:3f:aa:79:08:7b:b6:e7:
         1f:a3:c4:b2:66:5d:28:a5:aa:ee:81:03:62:7d:56:31:47:9b:
         4d:d9:5f:1d:b3:83:ed:fa:3c:f7:27:ad:0e:36:b4:b0:b5:1e:
         70:54:62:71:ec:83:73:ba:37:f9:a1:80:ec:09:d9:54:ac:9e:
         57:cf:34:62:b6:1d:0b:7e:ed:fb:4e:74:c3:30:82:bb:74:a5:
         d7:0d:a4:4e:b9:50:3f:85:6d:39:ac:42:2b:57:40:44:80:ec:
         69:dc:56:dc:62:43:24:00:2f:6c:f1:1d:4c:9f:ce:0e:ce:f8:
         cc:3a:ec:3a:c1:c6:9e:46:ca:9b:99:f5:78:b2:84:11:f7:08:
         4f:27:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org