Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa
File:                     3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa (raw, json)
Hash identifier:          GJVxWl+3y0GKLU99A+vD0Vc5HOMm7c5mF688gaal2vY=
Subject key identifier:   64:6F:82:78:0F:3E:E0:62:3D:CE:E6:6C:97:6E:08:18:63:BA:EF:19
Certificate issuer:       /CN=FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54
Certificate serial:       4F25BCDEC4DD835795B00622DFA01FA1B68263A2
Authority key identifier: FC:97:F7:FF:84:FA:8A:0B:59:91:12:EC:69:6E:0B:99:AC:0C:AC:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa
Signing time:             Mon 25 Mar 2024 18:50:43 +0000
ROA not before:           Mon 25 Mar 2024 18:45:43 +0000
ROA not after:            Mon 24 Mar 2025 18:50:43 +0000
asID:                     270264
IP address blocks:        200.108.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:25:bc:de:c4:dd:83:57:95:b0:06:22:df:a0:1f:a1:b6:82:63:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54
        Validity
            Not Before: Mar 25 18:45:43 2024 GMT
            Not After : Mar 24 18:50:43 2025 GMT
        Subject: CN=646F82780F3EE0623DCEE66C976E081863BAEF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:3c:19:2e:65:dc:e7:ce:78:e3:35:b8:f4:
                    3e:8c:97:b8:f0:ec:90:1b:9b:2a:a2:ed:cf:7c:20:
                    0c:96:25:39:d3:6f:fa:3d:2e:a0:be:d8:df:4d:5f:
                    fc:73:18:69:26:27:95:3f:f6:ee:85:e8:f6:f5:c2:
                    1b:ed:24:62:59:b1:09:2b:7f:40:2b:ec:e1:84:a8:
                    b2:08:0d:e0:d0:8b:a8:93:49:22:ce:a0:5c:4d:12:
                    de:6e:88:87:d4:31:1d:e2:c2:88:df:6f:cf:1e:dc:
                    97:93:f1:ce:0c:7f:75:33:ef:ac:41:2e:42:b6:d1:
                    6b:a3:21:dd:d0:da:ec:d9:ca:1c:d6:74:54:bf:ae:
                    ab:97:2e:8a:28:bb:0b:15:e0:f1:76:4e:62:57:f6:
                    c5:89:f2:07:a3:6c:3a:65:50:3d:f0:2e:8a:8b:b2:
                    00:85:0d:d8:a2:58:ff:dd:4f:42:ac:b1:6d:41:42:
                    75:de:f7:a9:fe:89:f3:63:80:f4:cd:c5:93:e2:50:
                    72:e3:d7:50:b0:e8:70:3a:fa:d4:7b:98:f8:3d:6f:
                    07:72:99:57:e0:8c:28:b4:be:45:f1:07:93:3b:2e:
                    ec:b7:5c:53:bf:d1:14:d5:03:8b:9b:2a:7f:40:ad:
                    fd:55:eb:e5:29:c0:28:7d:dd:3c:6b:9b:21:f1:c9:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6F:82:78:0F:3E:E0:62:3D:CE:E6:6C:97:6E:08:18:63:BA:EF:19
            X509v3 Authority Key Identifier:
                keyid:FC:97:F7:FF:84:FA:8A:0B:59:91:12:EC:69:6E:0B:99:AC:0C:AC:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ee:34:23:34:d5:8e:81:43:e9:33:05:a5:0d:4a:51:68:5b:
         17:27:1a:99:20:cc:71:89:d5:b9:31:0a:9a:ea:18:58:bb:16:
         06:d9:82:cc:c6:a8:32:78:4c:c2:00:69:10:79:a8:4d:08:f1:
         53:92:44:1c:66:9d:19:6d:21:1c:08:14:5c:3c:79:e7:58:11:
         47:c8:c5:dd:bc:5c:56:61:b2:d4:41:cd:a8:57:b0:99:2e:a5:
         2c:d5:3d:80:30:6a:4e:9a:dd:08:99:89:cb:04:43:15:b6:c8:
         e3:b5:4e:6f:50:ab:23:5e:d2:87:fa:4f:ef:5d:26:95:83:2f:
         0d:ec:24:59:a8:62:f6:4b:84:f3:11:33:02:fa:42:e6:fc:85:
         25:58:8c:1a:28:4e:02:d4:59:96:f1:48:39:60:d4:db:2e:a8:
         6a:22:ec:57:3a:64:e1:dd:06:23:96:25:38:97:df:9e:f1:6a:
         64:68:1d:14:20:31:8b:f1:d8:78:61:86:cf:3e:e0:93:13:77:
         ed:49:8c:46:29:e3:91:1c:70:8c:1b:28:82:41:22:37:20:bd:
         4c:0d:b8:16:5f:51:46:42:93:f9:bf:5a:09:b9:54:2a:93:78:
         19:09:35:3b:28:97:ae:6d:23:e5:3c:3a:a9:29:b6:a8:b3:82:
         55:6f:88:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org