Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32342e302f32342d3234203d3e20323731333039.roa
File:                     3230372e3234382e32342e302f32342d3234203d3e20323731333039.roa (raw, json)
Hash identifier:          NRTqv7ceVNzqYzza47hjebDHr4P8T/wtmi32zkxJ2Dw=
Subject key identifier:   84:CA:2C:6F:A3:05:7A:66:18:68:8A:50:8B:27:63:1A:6D:59:08:3C
Certificate issuer:       /CN=443A05DE457DA61030C50B71D655B381CE793C73
Certificate serial:       7E90B95476B94ADE429828038A7ED95F0F334929
Authority key identifier: 44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32342e302f32342d3234203d3e20323731333039.roa
Signing time:             Mon 11 Mar 2024 17:38:21 +0000
ROA not before:           Mon 11 Mar 2024 17:33:21 +0000
ROA not after:            Mon 10 Mar 2025 17:38:21 +0000
asID:                     271309
IP address blocks:        207.248.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:90:b9:54:76:b9:4a:de:42:98:28:03:8a:7e:d9:5f:0f:33:49:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443A05DE457DA61030C50B71D655B381CE793C73
        Validity
            Not Before: Mar 11 17:33:21 2024 GMT
            Not After : Mar 10 17:38:21 2025 GMT
        Subject: CN=84CA2C6FA3057A6618688A508B27631A6D59083C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:cf:b6:64:93:98:d1:17:02:74:2e:79:5d:
                    a2:3a:6a:0c:aa:c2:16:ce:d8:ab:72:4d:cf:05:7f:
                    b7:40:6d:f9:7e:8d:1c:d5:4e:58:06:c0:dc:49:ee:
                    27:fb:96:03:9d:62:de:c5:f6:76:38:6c:43:df:fb:
                    2f:6f:82:c8:b1:ec:b8:5e:06:be:d2:b4:a0:04:de:
                    b3:a0:50:98:ea:62:60:b2:0a:62:fc:90:9d:98:94:
                    90:3c:44:6c:27:4b:55:bf:34:44:69:7b:f4:78:77:
                    cd:4a:89:e4:66:88:c7:57:62:cf:52:ae:92:3b:cb:
                    39:f5:a0:65:b9:bd:39:1e:9b:b0:67:af:4e:4e:e2:
                    51:9d:72:d7:d1:d7:8a:90:73:e4:4a:c1:a4:3b:00:
                    64:77:77:32:84:83:de:dc:8b:68:be:c9:96:dd:05:
                    ac:e5:c5:55:dd:51:01:f9:d0:c7:31:c5:63:2e:24:
                    10:10:76:00:d1:b6:9a:9e:3a:a5:df:7f:f8:27:39:
                    0d:88:61:d5:f0:64:70:58:22:1c:af:2e:e5:08:2e:
                    81:fb:37:a4:fe:bc:17:c8:e3:53:28:23:b8:19:fd:
                    29:63:cc:1e:7b:12:97:f3:bf:84:9f:9a:ce:7a:43:
                    4d:66:0b:36:b6:a1:e4:4e:42:b5:15:3b:6e:7a:3b:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CA:2C:6F:A3:05:7A:66:18:68:8A:50:8B:27:63:1A:6D:59:08:3C
            X509v3 Authority Key Identifier:
                keyid:44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32342e302f32342d3234203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:b7:1f:3f:25:da:9f:3f:ff:ac:7d:b5:df:9b:b9:34:2b:
         b1:cf:17:b5:41:f0:00:3c:b8:27:9c:f0:bb:e1:e9:75:19:3c:
         c4:75:f4:4d:ae:86:d0:99:35:4b:66:64:5a:b2:c8:19:86:18:
         06:a5:0f:5f:38:8b:85:7b:fa:14:f0:9a:8f:6f:12:66:7b:e8:
         06:0d:ac:49:a8:9d:34:23:ac:23:e1:97:f0:f3:37:ac:58:91:
         5d:ce:60:ef:2f:76:35:b1:77:41:10:df:1c:68:f4:84:8c:c7:
         0c:83:3b:ea:34:91:02:9f:fe:f6:ca:62:29:d6:94:17:3a:9b:
         81:69:d6:8d:dd:42:7c:a2:7b:9e:65:88:5b:9d:b2:21:18:b5:
         9f:bd:2c:ad:c9:4c:53:d1:51:93:2e:ac:02:6d:80:a3:07:4a:
         20:4e:02:eb:b1:ce:1a:a0:b1:28:62:a9:e8:c5:56:b6:3a:ed:
         af:03:93:6b:9c:5d:b0:54:6c:5b:74:80:cc:7b:1b:5c:b8:27:
         9f:ed:06:ea:00:12:59:eb:43:e9:15:da:b4:54:07:31:b7:54:
         a2:94:ac:e5:f7:0d:df:34:b2:7f:74:2d:b1:95:4b:e5:ff:e1:
         17:1b:0e:52:e6:ba:e9:9a:f6:81:09:20:80:4b:cb:5d:d5:aa:
         d7:8f:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org