Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dJrCpv4aXMu6ptpv5dCigQ8q5UCn6VHyhisj8sZTeyM/0/3230302e3231352e3233362e302f32332d3234203d3e20323731333230.roa
File:                     3230302e3231352e3233362e302f32332d3234203d3e20323731333230.roa (raw, json)
Hash identifier:          Jyd8N4Ebv+uW7Z1OYvsTqa01SSzX+GNiULih6TpVQN0=
Subject key identifier:   BE:1C:D2:C7:AA:89:66:95:69:6D:9F:1C:D5:25:DB:23:E8:BB:F0:CF
Certificate issuer:       /CN=80293C28203F073B3ADDD7E0BC421A5C76E1CEEE
Certificate serial:       4D9CF20D51D060AD8305A7A1D3CD99ADE134617F
Authority key identifier: 80:29:3C:28:20:3F:07:3B:3A:DD:D7:E0:BC:42:1A:5C:76:E1:CE:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80293C28203F073B3ADDD7E0BC421A5C76E1CEEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dJrCpv4aXMu6ptpv5dCigQ8q5UCn6VHyhisj8sZTeyM/0/3230302e3231352e3233362e302f32332d3234203d3e20323731333230.roa
Signing time:             Fri 02 Sep 2022 00:12:49 +0000
ROA not before:           Fri 02 Sep 2022 00:07:49 +0000
ROA not after:            Fri 01 Sep 2023 00:12:49 +0000
asID:                     271320
IP address blocks:        200.215.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9c:f2:0d:51:d0:60:ad:83:05:a7:a1:d3:cd:99:ad:e1:34:61:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80293C28203F073B3ADDD7E0BC421A5C76E1CEEE
        Validity
            Not Before: Sep  2 00:07:49 2022 GMT
            Not After : Sep  1 00:12:49 2023 GMT
        Subject: CN=BE1CD2C7AA896695696D9F1CD525DB23E8BBF0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:61:1b:6a:1d:5d:7c:df:6e:21:f3:83:97:
                    81:cb:34:01:ed:96:19:59:e4:7b:44:a0:3d:42:8c:
                    4e:a5:fd:d7:41:5d:bd:84:20:cd:06:7b:51:58:46:
                    99:fd:d6:2a:e4:80:76:b2:c3:be:86:37:34:95:94:
                    6a:d1:3e:92:be:d9:41:1a:df:c5:7b:97:48:59:0d:
                    ab:a9:c3:88:50:08:b8:b8:55:d2:d1:ed:af:b6:31:
                    1e:97:1e:4d:e0:48:54:d8:06:dc:e2:59:05:b8:77:
                    f9:22:4b:ed:3a:22:47:2b:c6:f2:0a:f0:10:d1:bf:
                    0a:73:08:2a:1d:a3:bb:02:0f:4b:c6:7b:3f:65:b9:
                    db:5c:82:5f:71:3f:4c:26:b8:a7:33:65:1b:1c:06:
                    a7:0a:12:92:3f:0c:c9:78:5e:0f:5d:14:ae:0a:2a:
                    0c:5e:6b:7e:70:ad:eb:b0:36:73:c5:ae:79:1b:1a:
                    e7:4d:7a:fe:60:37:d9:c7:ad:f0:96:ee:f7:97:ee:
                    07:7f:05:c1:6d:85:0a:45:b6:1f:2b:55:e3:9f:04:
                    8f:d2:7a:5c:e5:5e:95:1c:4f:11:e8:e3:48:e6:0e:
                    43:17:94:d7:f6:c5:30:66:81:ce:0a:3c:de:b3:5e:
                    14:e8:79:be:c4:30:2f:7b:c7:f1:ea:67:a5:d1:e6:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1C:D2:C7:AA:89:66:95:69:6D:9F:1C:D5:25:DB:23:E8:BB:F0:CF
            X509v3 Authority Key Identifier:
                keyid:80:29:3C:28:20:3F:07:3B:3A:DD:D7:E0:BC:42:1A:5C:76:E1:CE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dJrCpv4aXMu6ptpv5dCigQ8q5UCn6VHyhisj8sZTeyM/0/80293C28203F073B3ADDD7E0BC421A5C76E1CEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80293C28203F073B3ADDD7E0BC421A5C76E1CEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dJrCpv4aXMu6ptpv5dCigQ8q5UCn6VHyhisj8sZTeyM/0/3230302e3231352e3233362e302f32332d3234203d3e20323731333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:b8:90:07:ed:fb:c2:b4:31:c4:27:2e:7c:8d:c8:da:ca:
         5e:e4:ea:75:73:b4:09:ba:cd:e1:fa:6e:b9:8c:81:13:50:1c:
         5e:49:45:04:e7:f4:4e:6d:88:2e:ac:a7:c8:ae:29:66:20:21:
         76:a6:16:7d:e7:13:51:53:97:aa:70:4e:32:e7:e3:a7:4b:ef:
         c4:e1:37:f9:0e:a2:12:cf:bc:da:81:0a:75:59:53:87:0a:d9:
         60:2e:f8:e0:91:6a:11:e0:80:48:47:16:3b:27:d2:37:cd:a5:
         88:01:27:43:ad:92:d7:04:32:cb:e2:65:05:c7:e9:97:60:ff:
         38:76:92:3d:15:6f:30:2e:2b:9b:95:46:54:3f:81:6d:7b:fa:
         27:ec:71:81:b8:e7:ec:89:db:f9:15:05:0a:80:26:3c:7c:fb:
         d4:53:db:b9:43:8f:1a:31:56:e6:ec:29:d2:91:f9:63:0f:d1:
         9c:5d:bb:13:c4:2e:65:1e:ea:b3:21:3e:5d:73:15:95:43:3c:
         b7:68:18:23:0c:82:4a:2c:97:0f:34:bd:46:b2:91:c7:4b:76:
         84:50:98:5e:14:9b:4d:b6:92:44:91:59:5e:27:4b:40:ae:3a:
         a6:6f:c1:f2:29:d5:f2:1b:db:b8:fc:e2:d0:aa:77:65:59:a1:
         e9:8a:a1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org