Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa
File:                     3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (raw, json)
Hash identifier:          9VwH8zVCd7ViXw3E8Ige1HlVCSwLWX7XJ4Nmhz7V6lA=
Subject key identifier:   4F:8F:CC:6A:FC:41:BC:F3:B0:D2:96:53:81:76:B3:B6:E4:43:1C:49
Certificate issuer:       /CN=2BE96A9D00DF227936266A4035089C530868CA3A
Certificate serial:       68831E5A486C2F70990D5CED903F049A9EE4906F
Authority key identifier: 2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa
Signing time:             Thu 04 Apr 2024 18:27:15 +0000
ROA not before:           Thu 04 Apr 2024 18:22:15 +0000
ROA not after:            Thu 03 Apr 2025 18:27:15 +0000
asID:                     271180
IP address blocks:        200.125.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:83:1e:5a:48:6c:2f:70:99:0d:5c:ed:90:3f:04:9a:9e:e4:90:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE96A9D00DF227936266A4035089C530868CA3A
        Validity
            Not Before: Apr  4 18:22:15 2024 GMT
            Not After : Apr  3 18:27:15 2025 GMT
        Subject: CN=4F8FCC6AFC41BCF3B0D296538176B3B6E4431C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:33:aa:ac:9c:b6:f8:4d:63:c2:2a:3b:fb:
                    7f:5c:c1:10:e8:e1:f6:da:e7:7d:52:c2:54:9e:3f:
                    ca:91:f1:70:67:14:c9:e7:8d:a1:6e:36:85:9f:5a:
                    14:54:a7:85:a3:18:4a:d9:7b:ad:0a:74:02:63:66:
                    62:01:78:52:45:d8:cd:10:f5:8d:6b:4f:de:a1:dc:
                    94:3c:5f:e5:c1:d8:b7:31:a5:8b:18:36:81:42:8d:
                    08:11:f0:ef:7c:2e:92:39:51:2e:44:a6:a8:0a:f2:
                    b3:ef:9d:3a:5c:b8:3a:25:3a:69:45:dc:91:02:04:
                    0e:4b:36:86:23:d7:fc:3f:da:ba:16:d4:84:b6:b2:
                    c3:94:5c:ba:7b:63:05:1e:fd:6d:15:3e:ae:a3:5d:
                    f9:ce:98:6f:83:d0:d4:2c:57:c8:69:d7:c0:40:1a:
                    04:69:a1:47:5d:b2:37:54:30:af:92:46:da:29:fe:
                    8d:c8:a2:c5:a0:1d:44:64:28:9f:6b:43:e0:3b:f2:
                    6b:c7:96:0c:b6:13:d4:f2:ed:ed:1b:68:50:6a:e8:
                    00:8f:cf:5b:a7:48:d4:dd:a4:53:4f:2f:d5:e6:0b:
                    f9:95:cd:ce:3b:b9:b7:43:09:ab:c3:2e:6e:bc:c2:
                    0e:a0:fc:42:ae:dc:cc:9c:47:c1:73:f1:48:39:90:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8F:CC:6A:FC:41:BC:F3:B0:D2:96:53:81:76:B3:B6:E4:43:1C:49
            X509v3 Authority Key Identifier:
                keyid:2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a0:2f:ef:1a:42:2e:a8:6f:09:00:e6:4d:4f:86:92:62:f8:
         68:b3:83:2b:3e:90:15:a1:0e:e5:a2:ea:c3:3b:07:28:ea:ba:
         d2:8f:37:e1:bf:ce:bc:80:56:7f:4f:cf:bb:66:ff:c9:27:33:
         db:8f:95:f1:9a:ad:f3:dc:35:15:38:6b:95:4e:1e:37:9a:e2:
         cf:3d:3b:e4:8e:0d:40:9b:49:4a:91:b0:14:6c:05:2b:e0:0e:
         45:41:d5:88:7c:ef:53:c4:2a:04:f7:57:1d:3f:cf:e0:68:27:
         95:9b:49:39:75:93:06:bf:6d:ad:93:0e:82:ac:40:07:0f:24:
         a4:b0:c4:4e:9f:9e:64:be:b4:d8:37:13:5e:5a:30:41:17:dd:
         b6:31:ea:44:93:47:c4:c7:bb:e7:57:36:f3:4a:ef:a1:51:91:
         55:f4:43:80:0e:93:9e:7e:08:b5:56:66:2a:f9:a1:6d:68:31:
         f1:4f:55:ec:d4:19:f0:a6:c9:6d:f6:fd:97:66:b3:0e:59:e2:
         72:b2:dd:21:f8:4c:1e:63:63:3a:ff:c0:9a:69:52:2f:47:13:
         c3:8a:23:e7:d8:fb:e4:f9:b6:a3:f6:59:50:3a:57:7c:c2:0e:
         4d:ec:c5:fc:a2:81:b4:2f:5b:0b:d2:2e:5c:23:ec:a6:09:fc:
         df:a4:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 20:19:20 2024 by rpki-client on console-fra.rpki-client.org