Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38372e302f32342d3234203d3e20323731323938.roa
File:                     3230302e35332e38372e302f32342d3234203d3e20323731323938.roa (raw, json)
Hash identifier:          Dh/f2Ud0DhWf1llYKCppUFMX8i8GUHdsOymx1B9niOo=
Subject key identifier:   0F:09:E0:FC:22:06:BB:4D:65:AB:3B:F4:AC:AB:A7:84:F9:45:65:06
Certificate issuer:       /CN=0B7E676BF893065665A524EBE293E999020CF3E1
Certificate serial:       3C9336E41491B06328FDF379A24B91FAB51EAD52
Authority key identifier: 0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38372e302f32342d3234203d3e20323731323938.roa
Signing time:             Tue 30 Jan 2024 19:57:51 +0000
ROA not before:           Tue 30 Jan 2024 19:52:51 +0000
ROA not after:            Tue 28 Jan 2025 19:57:51 +0000
asID:                     271298
IP address blocks:        200.53.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:93:36:e4:14:91:b0:63:28:fd:f3:79:a2:4b:91:fa:b5:1e:ad:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7E676BF893065665A524EBE293E999020CF3E1
        Validity
            Not Before: Jan 30 19:52:51 2024 GMT
            Not After : Jan 28 19:57:51 2025 GMT
        Subject: CN=0F09E0FC2206BB4D65AB3BF4ACABA784F9456506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:2e:f0:e0:00:3c:1d:f4:29:84:b6:36:aa:
                    f8:21:61:56:30:7a:1c:71:3b:f8:0c:98:6d:78:1c:
                    39:20:20:3e:2d:b1:fb:35:0f:8d:87:1f:5a:84:b8:
                    3f:e4:69:23:98:0a:33:67:3a:20:a6:b4:1c:b3:e9:
                    c0:da:ce:0f:08:02:96:5b:40:e8:8a:5b:09:e9:dd:
                    7e:a1:ab:4b:ea:3d:76:e7:c7:34:b8:40:76:a7:46:
                    4e:3e:ee:b2:6f:80:3b:a0:80:c8:0b:35:b9:3b:f2:
                    34:1e:5c:ca:7e:fc:ee:27:5a:e1:ce:62:f4:e2:8f:
                    e5:a7:d6:3a:64:f4:af:08:84:89:d4:47:ee:3a:d1:
                    cf:13:98:85:51:e4:d6:2b:8e:e8:cd:d4:ef:a7:83:
                    27:13:86:31:70:86:3b:e0:cc:59:8f:81:8d:29:d1:
                    c6:19:e1:09:30:b3:2e:41:55:ee:4f:c9:c5:b9:fc:
                    b2:bd:f5:6a:68:99:f1:72:f3:82:2d:cc:97:ec:79:
                    18:71:4a:29:fa:2c:ef:b8:84:61:c9:4c:61:b5:00:
                    81:37:ec:0c:27:c6:be:dd:f8:4e:7e:07:d5:6a:bf:
                    0e:cf:81:29:7e:56:6e:f8:09:f5:d7:3a:d6:49:6e:
                    28:e0:c7:90:c0:56:3c:53:43:6a:6a:c0:ff:c0:f2:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:E0:FC:22:06:BB:4D:65:AB:3B:F4:AC:AB:A7:84:F9:45:65:06
            X509v3 Authority Key Identifier:
                keyid:0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/3230302e35332e38372e302f32342d3234203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:6f:c2:1b:68:25:a7:4a:83:5b:0f:b6:51:d4:a9:24:04:
         aa:b0:b2:ba:39:59:c4:08:74:c1:ca:ee:1e:fc:02:38:12:3b:
         5e:4b:3e:67:a6:62:44:77:2c:ca:6b:08:bb:5f:4a:31:dc:eb:
         4d:dd:a9:10:ec:e9:72:77:9c:52:fa:6e:10:e3:5d:56:fe:59:
         2a:0f:55:dd:eb:46:66:2f:61:cb:f9:a8:93:ae:bb:89:1d:55:
         fc:ef:c4:f3:aa:a7:80:88:8d:2b:0a:d3:6e:0c:75:04:77:70:
         25:9f:ba:9a:95:31:20:01:75:79:f3:04:c7:ff:d8:cc:40:86:
         89:aa:1c:82:d1:8d:b9:f7:ab:4e:25:a5:7f:28:6a:6c:0e:01:
         dc:5b:a2:35:97:bc:03:98:83:d4:16:dc:c7:53:5a:6b:2a:a2:
         29:b6:de:0e:66:78:60:d7:f9:b0:fb:45:1c:39:6b:15:b5:8a:
         ad:1f:10:82:33:92:54:53:33:08:cf:82:67:4e:76:8d:a6:24:
         14:87:95:9b:e7:c5:1b:68:ea:ae:8b:7d:b4:ca:2c:2f:37:0d:
         11:e9:ae:37:46:b3:4a:6f:3a:de:d9:39:a7:3a:3c:29:89:f7:
         94:d7:4f:30:b7:84:a0:00:78:5e:8c:06:1c:46:96:4d:9b:32:
         26:52:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org