Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa
File:                     3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa (raw, json)
Hash identifier:          dHaHGN8wvppgz7t5neNVjLTE4kvzLf2uSu0qCAPw928=
Subject key identifier:   A6:FB:8E:8F:14:23:81:A6:6F:6A:2E:30:46:C7:DC:0D:B7:66:01:AF
Certificate issuer:       /CN=64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7
Certificate serial:       6977C478D895827C0B0022A98395924DD85847F6
Authority key identifier: 64:CF:7F:A7:AF:F5:D7:80:6F:86:7C:5F:3E:DF:CE:14:61:E7:8A:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa
Signing time:             Fri 22 Sep 2023 02:52:38 +0000
ROA not before:           Fri 22 Sep 2023 02:47:38 +0000
ROA not after:            Fri 20 Sep 2024 02:52:38 +0000
asID:                     270687
IP address blocks:        200.142.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:77:c4:78:d8:95:82:7c:0b:00:22:a9:83:95:92:4d:d8:58:47:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7
        Validity
            Not Before: Sep 22 02:47:38 2023 GMT
            Not After : Sep 20 02:52:38 2024 GMT
        Subject: CN=A6FB8E8F142381A66F6A2E3046C7DC0DB76601AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:8c:c3:8f:df:14:9e:79:e9:0c:48:af:c5:
                    25:fc:be:eb:ab:45:24:8c:34:7a:55:94:3e:28:69:
                    41:6c:27:df:a1:8c:b3:a7:61:2e:a1:95:83:8c:30:
                    10:62:f3:d1:f5:2b:85:c1:df:47:19:c7:be:45:72:
                    ba:60:69:9c:fb:b0:1d:48:f6:9f:2d:dd:9b:01:04:
                    dc:9c:d0:0f:12:cd:a7:12:c0:7f:55:fe:0b:35:a1:
                    01:1e:64:38:b9:c1:55:3c:56:d1:a0:b8:10:b2:f1:
                    e0:0c:3f:17:ee:a6:af:c1:9b:36:a8:98:5e:97:fd:
                    c3:8c:29:d3:70:8e:25:75:62:f8:dc:ee:f7:5b:5f:
                    38:3e:50:d8:77:2c:b9:4d:9a:8d:90:b0:af:7e:62:
                    af:cb:28:c6:8a:1e:d4:56:69:ea:24:05:25:f9:9f:
                    a9:00:69:88:7c:a8:45:ce:80:79:3c:06:e1:51:68:
                    c8:4a:20:7c:73:71:98:01:d6:5f:d2:4a:5c:99:95:
                    a2:bc:02:4d:12:f5:b8:59:73:c3:95:8b:b3:a5:16:
                    9a:bc:37:9c:67:0d:51:95:01:0e:41:19:85:86:85:
                    f2:d0:69:61:b9:30:83:be:27:63:e1:27:98:75:62:
                    9a:a6:52:d3:ec:ee:1f:d6:b8:b2:79:cb:46:fe:86:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FB:8E:8F:14:23:81:A6:6F:6A:2E:30:46:C7:DC:0D:B7:66:01:AF
            X509v3 Authority Key Identifier:
                keyid:64:CF:7F:A7:AF:F5:D7:80:6F:86:7C:5F:3E:DF:CE:14:61:E7:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:b1:f7:74:2c:54:a9:ed:79:ef:b7:3f:80:9f:f5:6d:02:88:
         6f:0b:f2:35:4d:e5:bb:b1:d6:75:55:b2:58:93:40:f3:ab:cc:
         41:6d:6d:be:ee:82:8a:7e:f5:1d:cc:32:77:5d:c1:8e:0d:c5:
         5a:21:e4:9a:16:46:ea:71:f0:1b:10:4c:75:83:f2:a2:fc:7d:
         cb:ac:24:92:bf:23:fb:27:8c:85:04:2b:de:2c:c0:35:e9:d5:
         56:29:c9:6c:d2:50:3e:4a:b9:6a:85:3c:04:7f:45:16:d3:e2:
         87:2b:7b:d9:5b:09:c7:67:89:ba:93:ec:72:d0:ed:89:2c:ba:
         4a:f7:f6:ab:82:8a:a6:68:9b:a3:1d:e9:6b:b5:fc:71:d9:06:
         85:68:27:39:05:44:12:41:fe:1e:d4:3e:c3:79:99:db:f9:33:
         f2:32:f4:94:af:04:85:e3:af:92:45:73:77:e9:5f:5f:b9:4a:
         7e:e3:b6:63:20:cc:ed:ce:93:d3:fd:a6:73:cf:a4:04:4d:88:
         6a:e0:e1:b2:47:5a:85:db:4e:2a:b7:a7:40:0e:e5:40:b2:26:
         f8:68:f5:af:cb:e1:cd:da:e2:eb:39:79:1e:78:76:22:14:bc:
         e9:a0:46:06:23:47:ec:45:ec:77:4a:55:38:05:14:47:23:87:
         a8:66:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org