Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa
File:                     3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa (raw, json)
Hash identifier:          IRQbHzEvMHbuMKWdRkBK461+0rx95tgOS69AmSC6Zzc=
Subject key identifier:   67:DF:7D:85:23:27:B2:9E:8B:97:CE:28:1D:E2:19:50:E6:80:C1:34
Certificate issuer:       /CN=103265AEADC9C654B97AC9BE28D364C7FE429A91
Certificate serial:       5F8F6A8858D044F2BC4FFF1D92B1C16B8A127A7C
Authority key identifier: 10:32:65:AE:AD:C9:C6:54:B9:7A:C9:BE:28:D3:64:C7:FE:42:9A:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa
Signing time:             Fri 15 Sep 2023 12:28:57 +0000
ROA not before:           Fri 15 Sep 2023 12:23:57 +0000
ROA not after:            Fri 13 Sep 2024 12:28:57 +0000
asID:                     264592
IP address blocks:        200.170.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8f:6a:88:58:d0:44:f2:bc:4f:ff:1d:92:b1:c1:6b:8a:12:7a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103265AEADC9C654B97AC9BE28D364C7FE429A91
        Validity
            Not Before: Sep 15 12:23:57 2023 GMT
            Not After : Sep 13 12:28:57 2024 GMT
        Subject: CN=67DF7D852327B29E8B97CE281DE21950E680C134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:f8:78:9a:44:8c:6f:ac:19:ac:8a:6e:7f:
                    c3:72:29:90:b8:1f:d2:75:29:e9:03:95:7c:82:72:
                    72:47:d7:f9:91:3f:ad:75:b0:2a:57:14:33:74:59:
                    66:1e:d0:17:00:a8:06:bc:51:e1:42:cf:ba:dd:97:
                    23:b6:ce:7f:3d:d4:d5:ab:57:53:c8:9e:dd:2f:03:
                    b4:46:b0:3d:82:cc:2d:ff:6d:12:59:0d:10:94:61:
                    b5:a1:fa:b6:25:ea:d5:88:55:be:1d:8c:d7:99:00:
                    2c:98:dc:e1:4a:00:9e:a5:a6:7b:6f:11:fc:f1:82:
                    a3:42:ec:72:d8:4e:58:ea:62:bb:88:33:13:27:7c:
                    4b:a3:98:ff:8b:4a:80:db:65:f0:00:02:c4:f9:9e:
                    d6:6d:41:d8:92:38:9f:73:37:1f:17:e7:45:85:e6:
                    55:8d:bb:c2:df:39:ee:11:ac:6b:dc:ba:1a:cc:71:
                    9b:b7:20:f5:78:ac:c0:56:37:a5:73:0d:14:ad:d1:
                    45:d4:21:70:09:36:7d:37:86:43:4d:66:15:64:73:
                    f8:8c:17:5a:3f:29:25:e1:7f:c4:c1:1a:0a:78:b0:
                    a6:33:39:2f:7f:91:7f:a2:ad:02:89:bc:0f:38:d9:
                    f0:32:3a:6d:25:d0:f7:65:8a:19:99:02:87:b9:22:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DF:7D:85:23:27:B2:9E:8B:97:CE:28:1D:E2:19:50:E6:80:C1:34
            X509v3 Authority Key Identifier:
                keyid:10:32:65:AE:AD:C9:C6:54:B9:7A:C9:BE:28:D3:64:C7:FE:42:9A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:0a:cc:1a:89:e9:15:68:ee:af:c8:da:31:1d:c4:38:18:92:
         68:43:43:cf:15:14:df:00:bb:87:b4:bc:b0:bd:ff:b1:ec:ad:
         fa:28:13:c3:2f:22:be:92:b3:39:34:08:69:d3:8f:75:b4:8b:
         0e:c1:f5:c5:35:2b:30:35:02:ae:30:b1:94:3d:46:80:9b:5d:
         1a:cf:04:b2:6e:17:e8:1d:dd:9b:e7:b3:06:f2:d0:37:73:f8:
         32:dd:f1:06:53:9a:58:50:55:dc:af:47:ef:93:e2:ae:0f:c7:
         c2:b3:34:d0:0f:4e:dc:18:52:36:ae:56:58:27:ed:99:59:4f:
         5e:5b:ee:52:f5:11:12:f5:96:a0:99:66:05:c3:36:9e:b7:39:
         d7:bc:1e:23:cf:ab:80:c9:0e:d4:78:1e:54:15:b2:14:0e:d6:
         4b:b5:8b:cd:14:88:f8:be:20:2d:b3:fc:1c:bc:77:8f:35:29:
         82:92:2b:cb:30:1d:a7:c8:14:0c:ba:a6:7f:80:8b:82:40:dc:
         79:cd:a0:b5:7a:47:d0:d0:30:c0:7c:6a:82:6f:7b:d4:b3:1b:
         bc:df:fc:9e:5c:9a:3a:20:f6:49:df:f4:df:a4:21:0e:4f:7c:
         0c:94:ca:ae:74:ce:b7:9a:f0:d4:5b:e0:50:a6:e6:86:fa:b0:
         c8:5c:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org