Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234322e302f32342d3234203d3e20323730363134.roa
File:                     3230302e3231352e3234322e302f32342d3234203d3e20323730363134.roa (raw, json)
Hash identifier:          v1jn5dxmcBOKDpv26K6FnFEqoWBI4L6UP3qvF4kkKFo=
Subject key identifier:   70:E2:12:EB:37:FE:C8:CF:C0:33:EE:D2:E5:2D:DF:C0:D5:B1:7E:44
Certificate issuer:       /CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
Certificate serial:       3E97F2C6B41725BF6C2C96051CC77AC8E26001B9
Authority key identifier: 86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234322e302f32342d3234203d3e20323730363134.roa
Signing time:             Tue 23 Apr 2024 19:21:20 +0000
ROA not before:           Tue 23 Apr 2024 19:16:20 +0000
ROA not after:            Tue 22 Apr 2025 19:21:20 +0000
asID:                     270614
IP address blocks:        200.215.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:97:f2:c6:b4:17:25:bf:6c:2c:96:05:1c:c7:7a:c8:e2:60:01:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
        Validity
            Not Before: Apr 23 19:16:20 2024 GMT
            Not After : Apr 22 19:21:20 2025 GMT
        Subject: CN=70E212EB37FEC8CFC033EED2E52DDFC0D5B17E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:99:8d:ab:ce:7b:47:8d:0d:64:fe:07:6e:
                    39:af:23:42:cc:56:8a:45:1d:3e:0b:56:5a:11:16:
                    0a:3f:28:d5:5d:dd:4d:b9:1e:6a:5d:6d:1e:fd:fe:
                    90:1a:5e:06:12:ac:c0:e1:61:87:b6:84:44:64:36:
                    49:ae:73:6f:f2:ee:4d:e7:44:b4:c9:c6:e6:1a:08:
                    70:b4:6f:19:70:7f:91:4d:68:d6:78:64:e8:d7:1d:
                    80:d8:41:28:db:4b:e9:00:44:5b:e6:d5:9d:2d:36:
                    92:35:a2:4c:03:8e:50:64:fb:a2:7f:14:ec:b3:bc:
                    03:6b:e0:1f:95:78:f1:81:96:35:e2:31:c6:dd:47:
                    c4:66:ee:ae:44:3f:5d:0f:bd:04:3c:9c:ed:c1:eb:
                    a0:34:33:2f:f6:33:9a:20:e5:43:bb:8f:d6:d7:6a:
                    10:68:08:56:04:06:e9:f7:ae:0c:8e:8f:61:b3:48:
                    35:19:39:0f:15:ba:35:5b:81:4c:13:5a:34:c6:fa:
                    f7:71:ec:a4:74:60:52:49:ed:d9:00:2b:2d:ca:e8:
                    da:35:9b:80:55:3b:e6:1a:d4:e2:b7:01:4b:eb:c3:
                    6d:9e:25:1a:85:36:62:0e:5a:89:01:df:cb:23:6a:
                    8a:4d:06:31:5d:68:0d:dd:9a:de:3b:4a:10:25:6f:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E2:12:EB:37:FE:C8:CF:C0:33:EE:D2:E5:2D:DF:C0:D5:B1:7E:44
            X509v3 Authority Key Identifier:
                keyid:86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234322e302f32342d3234203d3e20323730363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:35:91:23:8c:06:8d:08:ac:5b:d2:d5:14:60:96:73:01:
         57:38:a8:53:a2:b6:21:4e:8c:82:ad:9c:ae:ad:8d:88:61:66:
         b4:06:6d:bd:3d:2e:df:63:f4:a3:33:3f:33:0f:45:c5:85:d3:
         f7:25:22:37:b4:d4:72:dd:80:e2:3b:11:7f:42:00:0f:6b:10:
         e7:39:04:98:6c:8a:97:9c:dd:7f:3c:12:b3:44:57:b3:d4:fb:
         d7:11:83:8d:f2:b3:f5:82:09:7d:b6:91:74:0c:74:fb:85:ac:
         d7:b8:2b:15:83:bb:58:b5:6c:e3:cd:0d:ab:cc:3d:e0:81:41:
         ec:b0:21:98:46:fc:3c:71:73:5a:8d:1c:92:00:9f:31:44:f1:
         0e:69:db:33:4b:ff:2d:b0:3c:50:31:fa:80:b5:d1:78:75:d9:
         15:08:1f:3c:69:3a:82:2e:d5:d5:2f:d4:30:8c:71:b5:bb:0e:
         82:3e:cf:34:79:99:8a:aa:30:97:1b:ee:6d:a8:f5:53:48:1b:
         78:0c:95:57:65:fb:97:76:c7:d2:f1:70:55:11:a4:52:df:6d:
         68:eb:f7:cf:16:e9:70:09:2c:6b:2a:c3:a5:89:94:d1:c9:dc:
         87:8b:f0:06:be:9d:c0:21:26:a6:47:ec:b2:01:75:5c:86:97:
         7f:1e:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:40:03 2024 by rpki-client on console-fra.rpki-client.org