Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130362e302f32332d3233203d3e20323730343532.roa
File:                     3230302e37312e3130362e302f32332d3233203d3e20323730343532.roa (raw, json)
Hash identifier:          j5NLe8wIUWkGoTb0UzfwQ2CZI9G4UXDrornwv7RvMBA=
Subject key identifier:   70:E2:1F:25:8C:F1:54:5C:AE:77:B4:FD:C8:73:3C:0B:B5:F7:32:10
Certificate issuer:       /CN=8E3851F43313167D4BDB68376AC94B4FD8516560
Certificate serial:       4A11BD24D9815FCED70A341EB6B51CD2CB119549
Authority key identifier: 8E:38:51:F4:33:13:16:7D:4B:DB:68:37:6A:C9:4B:4F:D8:51:65:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E3851F43313167D4BDB68376AC94B4FD8516560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130362e302f32332d3233203d3e20323730343532.roa
Signing time:             Thu 21 Dec 2023 14:07:51 +0000
ROA not before:           Thu 21 Dec 2023 14:02:51 +0000
ROA not after:            Thu 19 Dec 2024 14:07:51 +0000
asID:                     270452
IP address blocks:        200.71.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:11:bd:24:d9:81:5f:ce:d7:0a:34:1e:b6:b5:1c:d2:cb:11:95:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E3851F43313167D4BDB68376AC94B4FD8516560
        Validity
            Not Before: Dec 21 14:02:51 2023 GMT
            Not After : Dec 19 14:07:51 2024 GMT
        Subject: CN=70E21F258CF1545CAE77B4FDC8733C0BB5F73210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:ee:80:5e:40:18:0d:7d:f0:c6:50:a4:5a:
                    33:c5:b1:4a:3d:ff:39:c3:08:cc:36:85:76:ee:04:
                    77:62:8c:3a:48:4a:70:6e:97:1e:c2:f1:69:c5:8a:
                    01:34:55:13:3f:c9:81:b6:f1:0f:20:ab:52:b6:a2:
                    38:91:13:32:09:82:60:4e:c8:26:c6:b2:7f:db:a2:
                    33:26:13:c0:b2:2d:75:65:0c:ec:bd:a8:42:cd:4a:
                    16:9e:86:40:1b:48:f6:5e:63:59:01:24:19:7b:d6:
                    9f:9a:9d:11:90:02:d5:31:43:39:30:c3:fb:ef:0a:
                    7d:5c:b6:8a:df:c3:5e:a8:b3:66:53:8c:78:33:dc:
                    ad:6e:01:2b:e5:7a:e7:a6:ae:52:78:c3:86:7d:ba:
                    b6:27:62:eb:f6:34:2f:0c:f8:63:9c:81:61:3a:57:
                    11:9e:74:34:61:9c:0d:ab:f5:66:82:57:40:f5:77:
                    66:e8:f1:86:d0:2f:be:76:c0:68:92:69:d1:e0:fb:
                    07:20:95:a8:31:62:f5:cf:14:23:03:29:52:6d:0f:
                    fd:4b:15:05:6b:cd:4c:ab:a9:76:d7:83:89:66:25:
                    9d:a3:75:e0:ab:86:d9:35:2a:22:9c:4f:41:4f:84:
                    73:92:32:93:6d:1c:70:48:e2:00:f5:5c:11:86:08:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E2:1F:25:8C:F1:54:5C:AE:77:B4:FD:C8:73:3C:0B:B5:F7:32:10
            X509v3 Authority Key Identifier:
                keyid:8E:38:51:F4:33:13:16:7D:4B:DB:68:37:6A:C9:4B:4F:D8:51:65:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/8E3851F43313167D4BDB68376AC94B4FD8516560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E3851F43313167D4BDB68376AC94B4FD8516560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/3230302e37312e3130362e302f32332d3233203d3e20323730343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:6c:35:1a:f2:ef:b0:46:f5:17:4f:39:f7:a3:bc:5e:f7:46:
         86:33:c8:57:d2:50:4d:57:1a:6d:e6:51:dd:41:d7:66:ac:4d:
         b0:df:e4:9c:6a:ec:8a:9b:65:99:e5:f5:f8:94:b2:88:17:4a:
         60:bb:91:c1:9e:90:6a:5f:02:c3:62:21:2f:dc:9c:1a:38:13:
         55:02:bc:91:4d:90:18:65:d6:7c:f7:33:11:9f:93:be:b3:ec:
         11:0f:a1:c7:85:35:7c:bc:32:8e:82:95:fb:9f:4c:42:f3:76:
         45:af:4f:da:d8:e1:c2:05:66:f8:80:cd:3f:fd:4c:32:bc:8f:
         3f:ee:40:57:9c:42:4d:47:74:63:a8:a6:88:c4:f0:f4:90:ff:
         e9:b4:93:5e:47:e4:a6:e6:59:40:04:39:e3:c9:fd:89:f5:d4:
         39:ca:14:58:48:70:f7:8f:6a:81:48:6f:dc:3c:91:55:72:87:
         0e:c3:93:65:d2:a0:32:13:e0:02:02:b3:42:94:b3:a8:c4:9e:
         45:93:cd:79:3a:d9:d3:74:01:df:57:af:38:10:a4:e9:80:5f:
         75:e8:75:7f:6d:2b:48:53:6a:6b:af:08:f3:99:dc:4f:ee:fb:
         63:bd:11:f4:a1:25:53:98:64:aa:13:f3:3c:67:23:3c:9c:90:
         25:a9:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org