Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa
File:                     3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (raw, json)
Hash identifier:          crWM0qpjZMt9aYWb93uMrdr5Dbp9Y31dA3NG2SXQr1c=
Subject key identifier:   7E:ED:63:BC:63:1D:5B:9D:E0:C7:67:04:3C:33:B6:A0:F6:FC:95:76
Certificate issuer:       /CN=C3EC7319E511D657616F58D9BD22B1337AE45836
Certificate serial:       456C0E7D476A901823FA5F6142D52745E02B5019
Authority key identifier: C3:EC:73:19:E5:11:D6:57:61:6F:58:D9:BD:22:B1:33:7A:E4:58:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3EC7319E511D657616F58D9BD22B1337AE45836.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa
Signing time:             Tue 06 Feb 2024 05:25:11 +0000
ROA not before:           Tue 06 Feb 2024 05:20:11 +0000
ROA not after:            Tue 04 Feb 2025 05:25:11 +0000
asID:                     270265
IP address blocks:        200.108.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6c:0e:7d:47:6a:90:18:23:fa:5f:61:42:d5:27:45:e0:2b:50:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3EC7319E511D657616F58D9BD22B1337AE45836
        Validity
            Not Before: Feb  6 05:20:11 2024 GMT
            Not After : Feb  4 05:25:11 2025 GMT
        Subject: CN=7EED63BC631D5B9DE0C767043C33B6A0F6FC9576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:e8:20:bc:f6:c3:e3:75:d0:9c:8a:5e:ed:
                    36:de:e1:b5:d8:1b:14:7f:8e:95:bb:9e:3a:63:7a:
                    40:d1:ad:ed:da:b3:13:68:b7:d2:89:ca:2f:cf:68:
                    44:a2:da:70:95:ff:ac:d0:9f:ed:a6:0d:45:5c:89:
                    5d:c5:60:9b:80:d9:30:c1:bb:cd:81:47:f7:09:8f:
                    6f:1f:89:6a:91:53:91:bd:c0:44:81:8e:a6:07:f0:
                    11:89:26:3d:99:e1:8b:2c:a2:ee:7e:de:20:a1:2c:
                    c6:04:1c:6f:62:87:b7:10:ad:1e:f7:40:12:cb:47:
                    79:57:64:30:77:82:f7:c6:df:1c:28:26:17:3c:e0:
                    51:7a:cf:74:47:a4:51:28:fa:68:70:b6:93:eb:dc:
                    35:8b:14:83:71:2e:f4:73:a3:bb:0e:75:1b:f6:b9:
                    6d:99:33:e6:e4:93:d6:8a:12:95:33:78:fe:dd:21:
                    f5:75:e1:0a:64:44:60:f1:48:24:3f:09:ac:08:f6:
                    30:41:bb:91:e1:f0:8f:31:85:fe:b5:59:35:5c:35:
                    39:cf:2b:54:30:f4:ee:3f:a7:ab:62:1e:bd:69:60:
                    5d:61:dc:5b:98:54:a9:f6:a3:4f:ba:dd:71:f9:de:
                    ae:75:e3:c5:2a:7a:4f:b7:67:c9:cd:56:3b:75:6c:
                    18:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:ED:63:BC:63:1D:5B:9D:E0:C7:67:04:3C:33:B6:A0:F6:FC:95:76
            X509v3 Authority Key Identifier:
                keyid:C3:EC:73:19:E5:11:D6:57:61:6F:58:D9:BD:22:B1:33:7A:E4:58:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/C3EC7319E511D657616F58D9BD22B1337AE45836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3EC7319E511D657616F58D9BD22B1337AE45836.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:2f:49:5d:92:11:42:10:87:df:1b:f8:3d:4f:84:3d:1b:52:
         f7:0d:92:05:26:cd:80:f7:a9:df:96:b6:f0:55:15:bf:51:fd:
         43:ce:fc:a1:ff:b1:83:f4:7e:95:e7:d7:84:aa:29:5b:13:d4:
         c8:46:1f:6c:8e:91:8c:39:e9:28:84:5c:d7:68:29:74:7d:0a:
         7a:27:ab:7a:ae:59:e5:75:44:2a:eb:ae:a5:52:86:49:4e:e6:
         c1:90:e6:f6:bb:4d:50:af:6d:77:14:d3:6c:89:59:4f:ae:8a:
         1f:7d:16:34:3f:a4:54:41:25:9c:55:7b:72:32:76:a0:7a:bd:
         f7:20:6c:3f:2e:0d:c0:ca:05:25:80:24:d2:9b:82:00:c8:f5:
         30:65:46:24:db:d4:5f:4e:f8:56:01:0b:f1:d7:18:1f:28:23:
         98:1f:98:21:28:0f:ca:57:f9:83:1b:30:20:80:52:b6:93:67:
         45:e2:4b:c8:03:d9:0a:19:6b:d2:33:97:c9:d4:04:dd:bd:f7:
         7b:92:fb:c8:8c:87:81:fd:88:67:81:7c:23:5f:fc:29:98:73:
         20:4e:c7:b5:b1:38:c5:70:fe:86:ac:37:d9:12:a7:f6:27:78:
         60:58:a8:04:46:0e:8e:fb:76:20:7c:36:7f:bb:f3:e0:51:68:
         81:7b:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org