Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/3230302e3133352e302e302f31362d3234203d3e203130373135.roa
File:                     3230302e3133352e302e302f31362d3234203d3e203130373135.roa (raw, json)
Hash identifier:          qdLe+g1lXsLekCzx/AveWoatE2jEilY3lb16rvRfec8=
Subject key identifier:   B3:12:0A:5F:54:91:8F:72:88:00:88:28:C4:9C:03:5F:84:49:BB:E2
Certificate issuer:       /CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
Certificate serial:       3425BFA047904DECEF88C6B22C9D87364BA86E75
Authority key identifier: 2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/3230302e3133352e302e302f31362d3234203d3e203130373135.roa
Signing time:             Mon 25 Mar 2024 12:02:30 +0000
ROA not before:           Mon 25 Mar 2024 11:57:30 +0000
ROA not after:            Mon 24 Mar 2025 12:02:30 +0000
asID:                     10715
IP address blocks:        200.135.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:25:bf:a0:47:90:4d:ec:ef:88:c6:b2:2c:9d:87:36:4b:a8:6e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
        Validity
            Not Before: Mar 25 11:57:30 2024 GMT
            Not After : Mar 24 12:02:30 2025 GMT
        Subject: CN=B3120A5F54918F7288008828C49C035F8449BBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:c0:2f:42:f8:0c:5e:49:ee:1a:55:a4:47:
                    69:17:f3:c8:3d:aa:41:a8:d0:e2:67:a8:72:ff:a6:
                    22:61:be:9e:1a:eb:3c:04:86:a8:aa:30:5b:32:79:
                    0d:ce:37:8b:27:43:af:66:41:e7:c2:7e:f9:f7:ac:
                    64:83:9f:1e:ba:cd:e8:a3:b3:3b:29:57:82:15:fc:
                    82:dc:fc:fc:67:b4:4d:2a:8c:52:0e:92:3e:4d:39:
                    b9:9a:5d:ff:2f:55:2f:ab:6d:37:93:47:cb:03:60:
                    2a:4a:5b:b4:1c:dc:6e:32:2a:31:ee:1d:56:05:77:
                    a5:b5:6d:ed:ec:fa:60:48:42:9e:67:f2:3c:9c:25:
                    a4:c4:47:39:e8:ce:35:14:09:44:27:da:fd:b0:46:
                    00:fa:6f:8e:44:87:3e:0d:a2:72:f1:30:16:b8:cf:
                    f0:16:c0:75:f3:2f:5d:3f:68:8b:81:b4:70:5f:ac:
                    3c:04:b0:bb:4b:75:f8:37:07:82:8d:2e:8e:f2:69:
                    59:ff:ed:3b:ca:8b:30:d9:84:2c:b6:81:a7:04:7f:
                    b5:30:86:4b:48:2b:dc:34:0a:0c:57:6b:6b:0e:f2:
                    14:df:2d:30:c4:56:ae:79:d2:45:07:85:d9:36:1d:
                    3c:2c:c8:e2:20:5f:2c:4b:2d:11:7e:d0:95:f9:96:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:12:0A:5F:54:91:8F:72:88:00:88:28:C4:9C:03:5F:84:49:BB:E2
            X509v3 Authority Key Identifier:
                keyid:2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/3230302e3133352e302e302f31362d3234203d3e203130373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:5c:22:12:79:57:d1:a3:4e:e4:71:da:ed:4a:22:12:0d:
         1d:9c:33:d9:1e:ec:8f:48:34:1a:11:3d:dd:af:06:3d:3b:c1:
         e2:13:d8:11:17:10:ae:bf:92:17:74:85:fb:7a:e9:6e:01:a1:
         b1:a9:5e:d3:90:8f:32:71:0a:5d:1d:dd:ab:f2:e1:db:5a:d7:
         1a:06:0d:36:ba:7b:81:bd:0f:70:ee:51:b5:be:a9:0b:25:31:
         c4:6b:fc:38:0c:19:39:61:50:44:e8:e4:f5:f6:f1:d0:c1:d2:
         9a:e5:5e:56:ba:56:6c:bb:4c:ce:f3:8e:2e:b9:e8:bb:92:9e:
         55:e8:98:d9:dc:3b:d9:17:1e:07:3a:00:78:de:08:8b:e2:c0:
         82:a0:59:13:5c:23:d7:43:45:5e:24:fb:6d:04:73:87:c0:34:
         3c:cf:5b:44:87:6b:7f:a7:66:fb:ce:76:29:db:73:15:55:47:
         80:55:57:be:0b:22:d2:af:0c:e8:89:21:9b:ea:11:a8:0d:26:
         c6:0d:bc:52:28:55:85:95:ad:a9:49:9e:0e:46:99:23:4d:15:
         a7:d0:53:10:c8:0c:28:50:1f:44:8d:02:b2:ab:79:88:bf:5e:
         3c:03:c1:4e:9d:00:6b:21:2b:0a:bd:fb:e8:d0:66:ab:c7:7e:
         b8:f6:f3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org