Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32372e302f32342d3234203d3e20323731333039.roa
File:                     3230372e3234382e32372e302f32342d3234203d3e20323731333039.roa (raw, json)
Hash identifier:          B5Bu5+2G260jwrjiar6CRXL9AbHwfwlydYLCbyb6OqI=
Subject key identifier:   BC:9A:1F:4B:B7:DE:A2:5E:2C:88:80:1A:EA:06:2E:C5:9A:73:B0:E5
Certificate issuer:       /CN=443A05DE457DA61030C50B71D655B381CE793C73
Certificate serial:       F548D49AE5144A0962960A90C16FD037DB8C4B
Authority key identifier: 44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32372e302f32342d3234203d3e20323731333039.roa
Signing time:             Mon 11 Mar 2024 17:38:22 +0000
ROA not before:           Mon 11 Mar 2024 17:33:22 +0000
ROA not after:            Mon 10 Mar 2025 17:38:22 +0000
asID:                     271309
IP address blocks:        207.248.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f5:48:d4:9a:e5:14:4a:09:62:96:0a:90:c1:6f:d0:37:db:8c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443A05DE457DA61030C50B71D655B381CE793C73
        Validity
            Not Before: Mar 11 17:33:22 2024 GMT
            Not After : Mar 10 17:38:22 2025 GMT
        Subject: CN=BC9A1F4BB7DEA25E2C88801AEA062EC59A73B0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:82:26:60:ca:4e:71:ed:ff:e3:7a:e1:80:
                    85:32:ca:89:1a:ff:1f:c1:b4:6e:c0:8a:37:cd:ff:
                    ab:b0:ae:70:6c:10:21:b5:fe:7d:bf:9d:5e:4d:4f:
                    72:83:e0:64:bc:68:39:25:08:61:ae:de:ff:d3:43:
                    13:80:dd:d7:04:f5:9f:aa:84:5c:16:c5:23:a2:40:
                    22:7d:f8:a8:49:c8:32:07:f1:ee:5a:9a:b2:96:c9:
                    e3:05:05:dc:81:4c:f2:c3:aa:bd:c6:6a:a9:a3:c5:
                    40:29:07:0a:d2:4a:8a:bd:05:d2:2f:eb:fd:4f:c8:
                    50:ab:70:bc:61:98:bb:de:15:ce:87:0a:73:9b:ed:
                    e7:04:32:f3:0e:38:e1:af:51:30:ce:b1:59:d9:86:
                    b3:8c:6c:80:e8:3c:b0:5d:4c:c1:0d:86:7c:d6:17:
                    4d:28:52:d4:ab:63:33:c2:7d:01:5c:9d:ea:54:ea:
                    1e:6e:2c:36:60:64:36:31:2a:76:6a:47:97:dd:fc:
                    af:00:51:b3:7a:95:d7:14:fb:17:fa:30:c4:b2:a7:
                    37:55:4b:07:4d:62:9b:ef:9c:14:b3:45:90:19:92:
                    ad:11:a2:f4:9c:1c:fa:5b:db:a7:a9:cb:79:1c:e3:
                    b7:39:58:ff:65:30:4b:50:db:06:48:97:49:20:28:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:1F:4B:B7:DE:A2:5E:2C:88:80:1A:EA:06:2E:C5:9A:73:B0:E5
            X509v3 Authority Key Identifier:
                keyid:44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32372e302f32342d3234203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c2:74:54:45:c8:6a:bf:8c:bf:04:37:20:19:94:59:18:fe:
         2e:09:80:b9:42:5b:da:60:71:e0:19:3f:76:dd:43:6d:c2:87:
         43:70:9f:10:c4:b9:2c:84:b4:f7:91:1e:ba:56:58:79:7d:96:
         c7:cf:6b:51:8e:db:25:1f:87:2b:60:56:47:8b:e9:bc:7f:13:
         11:01:c9:0b:b6:64:48:2b:37:48:d3:42:d4:58:43:b0:fa:5e:
         97:87:b2:93:c4:2b:be:55:50:2a:35:5e:a5:d2:14:5d:c3:8f:
         73:7c:4b:d4:ea:fd:cd:0b:84:26:43:d3:95:bd:1c:b6:49:50:
         d6:2d:90:6d:2f:ed:11:46:37:8d:23:c8:33:59:2a:f5:de:96:
         07:95:db:35:ce:de:e2:34:e2:36:5c:77:37:7f:72:e5:ca:61:
         a9:72:f3:68:62:9e:6e:dc:1b:2b:0a:ce:b0:76:ca:28:54:df:
         25:8b:79:b3:52:40:ae:6b:70:89:b1:9d:37:85:4b:08:34:b1:
         e2:75:91:c1:73:d5:6a:46:19:04:bf:bf:b8:c1:a3:d3:96:83:
         56:29:aa:00:78:92:5c:33:23:77:d3:96:75:aa:b9:b7:35:36:
         65:bc:fc:ac:5a:de:55:3a:12:6a:0f:cd:1c:0a:39:05:fe:aa:
         da:86:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org