Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa
File:                     3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          XQLiqe6ykMn3Er+tyYfc+XI1n0izbZMW28dqd91/m3k=
Subject key identifier:   87:F5:5E:A2:EC:4E:95:92:C0:11:BE:03:57:11:7D:31:52:A3:76:88
Certificate issuer:       /CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
Certificate serial:       2DE042219882EEA14B965B360A9A26C9D62F993B
Authority key identifier: 2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa
Signing time:             Mon 04 Mar 2024 14:21:37 +0000
ROA not before:           Mon 04 Mar 2024 14:16:37 +0000
ROA not after:            Mon 03 Mar 2025 14:21:37 +0000
asID:                     52968
IP address blocks:        200.229.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e0:42:21:98:82:ee:a1:4b:96:5b:36:0a:9a:26:c9:d6:2f:99:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
        Validity
            Not Before: Mar  4 14:16:37 2024 GMT
            Not After : Mar  3 14:21:37 2025 GMT
        Subject: CN=87F55EA2EC4E9592C011BE0357117D3152A37688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:43:1e:5a:1c:e1:71:cc:b8:ba:4d:1e:6b:
                    7d:83:bb:36:c4:20:32:00:58:3c:10:4e:ae:82:de:
                    b9:c8:77:92:f7:2c:d8:ae:f5:8b:5e:82:c2:b6:81:
                    1e:1a:b4:9a:83:c3:98:c4:5a:f0:fe:8a:f1:6a:1f:
                    24:74:26:18:cb:4b:5a:08:20:e8:68:17:fb:03:7c:
                    6f:56:1f:15:e3:de:8b:14:40:0a:5e:a9:0d:cb:83:
                    04:b4:d5:50:ed:6e:98:3e:60:f3:31:e7:b4:b7:57:
                    f9:ad:82:f2:78:18:7d:be:55:64:48:cd:06:7f:59:
                    52:a7:87:d4:0d:aa:1c:85:eb:be:e1:1a:2c:8d:9e:
                    0f:c3:0c:59:24:4c:bf:7b:ca:e9:ab:eb:0b:d9:da:
                    86:ab:f9:ad:66:d2:cd:f3:3d:08:ee:3a:8b:6d:45:
                    b8:8b:c0:f4:c2:72:b7:e3:9b:bb:f9:eb:6f:99:0c:
                    00:2f:64:69:54:2a:2d:e3:4c:10:b8:19:e6:8f:26:
                    a8:2d:a7:8b:f0:ba:e8:c3:f0:57:a7:b2:c3:83:f0:
                    46:e9:1e:42:46:ec:e6:02:02:70:d5:8e:a3:8e:e1:
                    f7:bc:71:60:b5:d8:3b:c2:a8:a0:28:16:60:e5:2d:
                    e9:08:12:3d:65:58:32:7a:20:58:be:01:fd:44:b3:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F5:5E:A2:EC:4E:95:92:C0:11:BE:03:57:11:7D:31:52:A3:76:88
            X509v3 Authority Key Identifier:
                keyid:2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:2e:99:36:5e:78:a2:df:02:4f:c4:33:5e:aa:c4:83:ff:c4:
         e0:ff:62:5d:ec:83:cf:86:1a:e3:b6:b8:69:8d:96:7f:b3:fa:
         34:f2:ba:be:6c:9b:13:95:fd:25:8a:12:69:bf:c6:aa:f6:4d:
         47:a1:51:a5:cd:f1:4e:d7:83:b4:97:1d:d8:c8:5a:3a:a5:db:
         df:65:39:bd:d6:1d:56:ae:33:1f:af:15:3b:7c:5e:b4:2e:fd:
         5a:1b:62:9e:c1:4d:bd:72:89:e2:e8:f8:7d:6a:dd:f5:19:c0:
         57:4b:3b:f8:e8:16:47:5a:61:1c:fa:a8:82:a4:40:b1:f0:36:
         c2:1b:c4:f1:79:80:c3:69:88:91:83:9c:bc:e9:9f:b5:1d:2d:
         43:64:4c:66:92:d8:82:b5:22:29:97:ac:ac:62:4a:2c:a9:2e:
         52:4f:80:ee:2d:51:69:be:04:98:42:b0:07:b0:d1:48:d6:85:
         07:22:10:d0:17:97:f3:15:2f:3c:89:b6:42:3c:11:cf:5b:2c:
         40:dc:60:33:c1:1a:16:eb:d3:37:8e:90:45:7a:d6:49:ad:aa:
         bb:77:ff:e8:3f:a6:77:fb:11:a3:a2:0c:3a:b0:95:5e:4a:6f:
         03:3e:62:fe:60:f9:fe:bd:d9:46:6d:8e:fd:03:20:83:e1:fa:
         39:84:d2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org