Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130342e302f32322d3232203d3e20323730343532.roa
File:                     3230302e37312e3130342e302f32322d3232203d3e20323730343532.roa (raw, json)
Hash identifier:          OziQ6c7GZiiIxIPJyEenMmsbxlhyzfOW71fozOLm5ow=
Subject key identifier:   4B:2E:2D:06:1F:CA:85:AA:CA:29:CA:40:DC:5D:F6:3D:9B:C2:F6:25
Certificate issuer:       /CN=8E3851F43313167D4BDB68376AC94B4FD8516560
Certificate serial:       7E04802D20552A82C8EDBF6AECC4665A30FF1A6E
Authority key identifier: 8E:38:51:F4:33:13:16:7D:4B:DB:68:37:6A:C9:4B:4F:D8:51:65:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E3851F43313167D4BDB68376AC94B4FD8516560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130342e302f32322d3232203d3e20323730343532.roa
Signing time:             Thu 21 Dec 2023 14:07:51 +0000
ROA not before:           Thu 21 Dec 2023 14:02:51 +0000
ROA not after:            Thu 19 Dec 2024 14:07:51 +0000
asID:                     270452
IP address blocks:        200.71.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:04:80:2d:20:55:2a:82:c8:ed:bf:6a:ec:c4:66:5a:30:ff:1a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E3851F43313167D4BDB68376AC94B4FD8516560
        Validity
            Not Before: Dec 21 14:02:51 2023 GMT
            Not After : Dec 19 14:07:51 2024 GMT
        Subject: CN=4B2E2D061FCA85AACA29CA40DC5DF63D9BC2F625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:c9:d5:9a:97:0a:55:ec:9c:06:b4:59:dd:
                    ed:4f:9c:d6:80:88:af:ca:88:0a:f5:02:f3:54:e0:
                    ce:8f:44:1d:f2:48:e2:b9:f2:0d:d3:c0:d8:0a:a5:
                    e6:5d:64:ff:d6:b6:46:95:ee:d2:ee:bf:e5:cc:82:
                    99:cc:cd:28:7c:f2:50:5d:34:c6:33:89:84:42:c4:
                    ab:bc:82:11:d8:86:ad:1a:be:1c:03:e9:98:d5:f9:
                    7b:95:b9:ef:36:09:8a:8e:5d:d1:ac:6c:22:4d:44:
                    fe:a9:a2:ad:52:e9:b2:1c:96:3e:74:d7:99:38:26:
                    5f:4f:1b:d1:8d:c2:21:23:b8:cc:e6:c2:b8:eb:5d:
                    c2:48:bc:44:38:dd:c0:bf:8e:45:cf:40:ea:54:92:
                    31:1c:47:e5:fe:cc:10:e3:97:a6:14:fe:f1:6c:79:
                    5d:0b:33:1f:34:eb:c3:48:2a:26:21:26:8c:d8:86:
                    36:15:7b:92:ed:ce:58:ad:09:2c:a4:7e:c2:25:a2:
                    02:24:9a:63:5d:42:f9:ee:67:a9:65:fe:5c:d2:03:
                    b5:0c:f7:dc:30:40:52:b6:9f:75:da:62:be:5f:85:
                    c0:d6:ba:3a:98:22:36:14:9f:c0:3c:d2:c6:2d:44:
                    53:c6:55:ce:6d:d1:e4:55:3f:c2:57:01:9e:2d:86:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2E:2D:06:1F:CA:85:AA:CA:29:CA:40:DC:5D:F6:3D:9B:C2:F6:25
            X509v3 Authority Key Identifier:
                keyid:8E:38:51:F4:33:13:16:7D:4B:DB:68:37:6A:C9:4B:4F:D8:51:65:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/8E3851F43313167D4BDB68376AC94B4FD8516560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E3851F43313167D4BDB68376AC94B4FD8516560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130342e302f32322d3232203d3e20323730343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:71:1e:5a:0c:43:7a:84:2b:dc:e9:ca:06:89:f0:1d:4a:fa:
         b1:24:17:cc:6a:ed:23:ff:2f:e8:1a:27:44:68:3c:f0:ec:3f:
         0c:e6:7a:00:94:15:50:f1:5e:b6:e4:9c:9a:3a:9b:c2:97:5c:
         9d:e6:ca:c5:36:8d:85:6f:f9:46:3e:97:d9:68:4b:ce:34:87:
         04:b8:85:11:08:e2:b0:d1:9c:f7:37:7e:47:af:bd:56:ba:85:
         b0:fd:23:a3:7e:aa:88:bd:a4:fd:a5:3d:7e:2b:89:c9:34:a3:
         6d:9b:ee:08:7d:86:cc:6e:f7:d2:88:7a:73:c4:05:e2:fa:2d:
         39:64:50:c5:4d:d3:a3:53:57:72:d7:a9:98:9c:79:3c:a5:cf:
         6c:bd:18:74:e0:df:49:0e:9c:bc:50:3d:7d:47:d2:5e:31:3d:
         46:14:f6:96:a6:e8:c9:24:b0:1d:f8:08:41:30:e7:ff:5c:a6:
         19:29:6c:06:72:22:f0:27:c6:8a:aa:ed:9c:3e:00:e6:1b:6d:
         69:a3:c5:2a:4c:6f:da:7c:ca:7f:ec:11:1f:7b:c5:16:80:50:
         19:fb:83:c3:27:c9:25:95:9a:d6:54:4c:36:67:5e:98:ce:72:
         51:6a:29:f2:8e:4b:c6:71:b3:3c:d0:9f:fa:f4:7f:17:11:05:
         00:a0:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org