Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa
File:                     3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa (raw, json)
Hash identifier:          HX+4EgMemzg/EJ7YuXetzHThsxVjJ+LuDP/bYRRgR38=
Subject key identifier:   79:DC:18:45:85:B6:CA:22:F5:5E:F4:BF:EA:39:EA:75:4B:5F:4C:36
Certificate issuer:       /CN=96D6AE6D52F298970A86B774958FB5B4488CAF64
Certificate serial:       508097ACDCD3F30939789A3422814DD9AE0D77A6
Authority key identifier: 96:D6:AE:6D:52:F2:98:97:0A:86:B7:74:95:8F:B5:B4:48:8C:AF:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa
Signing time:             Thu 04 Jan 2024 13:31:04 +0000
ROA not before:           Thu 04 Jan 2024 13:26:04 +0000
ROA not after:            Thu 02 Jan 2025 13:31:04 +0000
asID:                     271387
IP address blocks:        200.215.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:80:97:ac:dc:d3:f3:09:39:78:9a:34:22:81:4d:d9:ae:0d:77:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D6AE6D52F298970A86B774958FB5B4488CAF64
        Validity
            Not Before: Jan  4 13:26:04 2024 GMT
            Not After : Jan  2 13:31:04 2025 GMT
        Subject: CN=79DC184585B6CA22F55EF4BFEA39EA754B5F4C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:09:0b:2f:c7:cb:39:35:48:31:b8:b2:ec:47:
                    2a:6b:1d:dc:56:42:45:c5:ca:f1:6f:70:a4:66:f2:
                    a8:3f:1f:74:e3:e2:40:4e:89:72:ab:98:ee:ed:25:
                    be:48:48:23:35:6a:61:6f:2c:a7:8f:47:69:97:ac:
                    61:84:85:af:a7:23:4f:68:87:f4:a6:92:dd:c4:e6:
                    eb:24:3e:5f:4c:0a:db:02:52:ea:53:e3:1d:b6:62:
                    b9:0b:4a:1b:34:3b:d0:b2:be:06:53:28:34:04:85:
                    4e:c7:e8:7f:0d:9f:28:c1:da:44:3c:a3:86:92:fb:
                    77:1a:ce:d5:7f:ab:a2:a5:89:80:e1:f8:19:fb:79:
                    76:b0:3a:ef:19:67:e7:43:b3:c0:c8:8b:6a:08:34:
                    b4:e1:43:ef:18:09:97:a1:36:03:c6:d1:69:84:4a:
                    69:c2:36:d2:31:16:fc:c8:83:43:1e:0d:4e:69:af:
                    3c:a5:9c:dc:93:23:e6:2a:09:7f:55:5a:f6:e3:ae:
                    7f:dd:2e:7b:f8:1b:e5:1e:00:1f:e1:60:80:82:63:
                    d2:08:f5:57:ac:dd:61:0c:32:86:df:bb:4e:b7:2f:
                    41:30:0b:ad:45:6a:7b:f2:cf:e1:1b:42:09:af:6f:
                    16:ae:3a:ed:a9:d9:a4:ad:60:60:df:e2:d4:3d:8a:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DC:18:45:85:B6:CA:22:F5:5E:F4:BF:EA:39:EA:75:4B:5F:4C:36
            X509v3 Authority Key Identifier:
                keyid:96:D6:AE:6D:52:F2:98:97:0A:86:B7:74:95:8F:B5:B4:48:8C:AF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:de:12:c9:15:a7:9c:3b:b6:9e:39:01:7f:44:81:da:6f:d6:
         08:bc:f7:71:34:f3:f7:bf:cb:fc:49:97:b8:e0:76:56:b8:3b:
         8b:a0:54:73:0c:b4:63:30:3a:31:2c:42:7e:89:0a:93:76:92:
         2b:53:b6:1a:4f:46:ed:80:ee:44:84:51:d0:ec:72:16:d3:87:
         28:24:dc:00:11:fc:e9:27:f7:5e:27:66:f7:25:15:5d:fc:9a:
         5c:8e:50:7d:c0:57:41:c3:5c:66:d6:87:df:d4:8a:4a:a2:7f:
         92:c9:cb:d1:01:97:a0:e2:38:71:c3:26:fb:dd:5b:90:b8:64:
         fc:fd:dc:52:49:15:d4:86:95:1f:dc:8a:0f:d3:01:14:8b:e1:
         cf:f5:c6:f6:58:0a:f3:dc:1e:e2:2e:de:92:bb:2e:c9:e5:db:
         44:18:c0:44:06:d5:d4:fa:18:af:4d:fe:cc:ee:66:4e:f0:da:
         23:43:d4:0f:53:f8:8e:bd:01:87:da:d2:39:ae:28:bb:ed:7c:
         82:f6:95:ce:12:75:35:09:04:6b:79:a1:a3:27:0a:b6:3b:2a:
         a4:c9:6f:ea:2d:fc:b8:59:a3:86:7b:9d:13:bc:bb:9f:2d:22:
         17:aa:56:62:e5:62:39:48:b5:b9:97:9f:9a:59:74:67:0a:a3:
         52:e5:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org