Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130342e302f32322d3234203d3e20323730343532.roa
File:                     3230302e37312e3130342e302f32322d3234203d3e20323730343532.roa (raw, json)
Hash identifier:          suHksKcEgh/2zE4pP6YYDCO9/kVUI/QMwOjlbZNgSr4=
Subject key identifier:   FE:30:EE:E5:8A:D8:64:94:E3:8E:83:7D:9B:91:C9:E3:48:7F:DD:46
Certificate issuer:       /CN=33E1E61B84252FD68E843A85B994ECA6425F8953
Certificate serial:       13F1F05B3A53A8EDAB920A7B10290232437E7E18
Authority key identifier: 33:E1:E6:1B:84:25:2F:D6:8E:84:3A:85:B9:94:EC:A6:42:5F:89:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33E1E61B84252FD68E843A85B994ECA6425F8953.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130342e302f32322d3234203d3e20323730343532.roa
Signing time:             Wed 09 Feb 2022 18:18:06 +0000
ROA not before:           Wed 09 Feb 2022 18:13:06 +0000
ROA not after:            Wed 08 Feb 2023 18:18:06 +0000
asID:                     270452
IP address blocks:        200.71.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f1:f0:5b:3a:53:a8:ed:ab:92:0a:7b:10:29:02:32:43:7e:7e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E1E61B84252FD68E843A85B994ECA6425F8953
        Validity
            Not Before: Feb  9 18:13:06 2022 GMT
            Not After : Feb  8 18:18:06 2023 GMT
        Subject: CN=FE30EEE58AD86494E38E837D9B91C9E3487FDD46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:60:6a:61:1c:e6:9d:41:cc:9e:08:80:5d:
                    d5:11:6f:89:9e:16:f8:d8:6f:73:df:01:92:b2:68:
                    80:72:03:70:ff:f7:8f:a5:a1:d3:77:f8:bf:f6:e6:
                    6c:1f:77:3c:10:48:63:a5:76:08:97:c9:5c:ce:e2:
                    2e:c9:74:b4:19:28:e9:f0:71:a7:d3:40:92:7c:97:
                    a3:67:68:10:5a:67:74:7e:7c:3b:d1:22:8f:50:12:
                    85:ea:e9:de:01:96:5a:1d:fa:ee:db:5e:ef:98:58:
                    fe:86:90:e0:81:4a:43:1d:af:d5:d3:10:82:b8:d1:
                    43:d8:cc:eb:84:ff:b1:73:22:4b:5a:e2:9a:04:ca:
                    47:ad:6a:b8:0d:d3:28:ef:51:42:a2:cd:38:52:6f:
                    4f:1a:94:c5:cf:d8:29:90:7d:ef:1f:b7:f2:e0:82:
                    f6:bd:a8:ea:41:24:e9:fb:af:d2:8c:de:e5:1c:ce:
                    f7:a1:44:ab:f6:0c:dc:c6:69:8f:2a:49:25:ac:ac:
                    79:e7:b8:d2:d2:93:3a:b7:4f:b0:ec:1d:5d:e2:42:
                    04:0e:73:69:8a:b4:eb:b8:83:5f:cb:13:e6:a0:67:
                    10:74:e7:d1:9c:e2:3f:17:b0:84:e2:bb:64:c7:f9:
                    43:77:6e:75:32:3f:ec:f2:68:50:62:b0:44:5e:c2:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:30:EE:E5:8A:D8:64:94:E3:8E:83:7D:9B:91:C9:E3:48:7F:DD:46
            X509v3 Authority Key Identifier:
                keyid:33:E1:E6:1B:84:25:2F:D6:8E:84:3A:85:B9:94:EC:A6:42:5F:89:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/33E1E61B84252FD68E843A85B994ECA6425F8953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33E1E61B84252FD68E843A85B994ECA6425F8953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130342e302f32322d3234203d3e20323730343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:39:bb:b5:87:5f:a3:ab:aa:ed:1a:eb:bf:c6:8f:bc:d2:73:
         05:c0:45:27:83:a3:4d:39:1c:b4:61:01:14:b6:79:37:43:16:
         2d:80:37:03:ce:bb:85:73:be:3d:ab:a6:6d:5d:5b:ff:23:a2:
         dd:6f:e5:05:c9:8d:08:d6:2b:0f:ff:e2:9b:e8:6b:38:00:b6:
         e4:7b:c8:12:cd:86:de:97:4b:24:fa:37:07:3d:4c:b4:d0:37:
         ba:63:a1:3d:43:f3:aa:67:f3:d8:b0:72:ac:8e:37:cd:80:bc:
         7e:14:57:f8:35:5e:b5:1e:b1:4c:f8:3e:6c:a3:63:17:3d:d5:
         2b:84:c7:10:e2:ec:f7:3c:16:46:56:6d:b0:cf:03:0f:2c:82:
         1e:c1:0d:ef:af:ad:0e:23:e7:4e:27:f6:9d:93:06:d1:31:df:
         45:7a:fc:af:c3:63:94:44:a1:64:17:36:ae:bf:9b:9f:82:58:
         dc:d3:cc:52:49:f5:aa:24:91:26:59:2e:68:c2:40:b0:8c:eb:
         90:28:c0:5f:aa:23:13:ee:18:92:c1:7a:bf:c8:a4:3a:7d:61:
         dd:c1:e2:d4:8d:d1:8f:d5:1f:d2:b5:90:76:f1:ac:41:68:a2:
         ab:6c:4b:37:93:05:88:82:3d:21:e1:04:95:3b:48:7e:fb:cc:
         7b:20:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org