Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235322e302f32342d3234203d3e20323730363135.roa
File:                     3230302e3231352e3235322e302f32342d3234203d3e20323730363135.roa (raw, json)
Hash identifier:          D0X5Z5deSth0X5pyayEHQ7kKt0BWGdPMRBvfBcL6Kiw=
Subject key identifier:   86:31:7F:31:5A:DB:D2:82:1C:67:98:6D:4B:F9:C9:8A:A4:D2:E6:1A
Certificate issuer:       /CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
Certificate serial:       09FCD5789CB5CB3A2F8A7D0FBB356F4DCF294A1E
Authority key identifier: 8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235322e302f32342d3234203d3e20323730363135.roa
Signing time:             Fri 16 Feb 2024 18:38:38 +0000
ROA not before:           Fri 16 Feb 2024 18:33:38 +0000
ROA not after:            Fri 14 Feb 2025 18:38:38 +0000
asID:                     270615
IP address blocks:        200.215.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fc:d5:78:9c:b5:cb:3a:2f:8a:7d:0f:bb:35:6f:4d:cf:29:4a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
        Validity
            Not Before: Feb 16 18:33:38 2024 GMT
            Not After : Feb 14 18:38:38 2025 GMT
        Subject: CN=86317F315ADBD2821C67986D4BF9C98AA4D2E61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:07:82:7c:1d:45:08:4e:d4:fa:c1:39:51:
                    47:d1:f5:cb:12:2b:c5:31:74:6f:ad:9a:46:57:ed:
                    bb:46:dc:db:6b:46:ad:17:7f:e8:10:11:be:11:19:
                    ad:a6:7d:0f:0e:52:25:11:50:a3:e5:9b:ee:b2:07:
                    c3:ed:64:04:57:8f:b9:83:da:87:d3:58:fb:d7:fa:
                    2c:8a:e3:b3:ba:4b:72:1a:40:b8:ca:6c:a7:d8:d9:
                    38:07:97:4b:9f:e0:c5:a3:ff:ea:67:27:d5:3d:99:
                    7a:e5:e8:13:31:b9:7a:bb:60:fc:0c:db:ff:98:ed:
                    2f:ca:c2:b0:4c:d8:6f:de:d5:6c:79:f5:62:a4:9d:
                    07:57:d3:2e:0d:3f:32:42:70:f9:86:cd:16:21:3f:
                    d2:c7:f5:a7:eb:ec:32:a0:1d:ae:19:bc:f9:b2:ef:
                    b9:57:28:7d:95:b0:2b:ae:16:07:29:f7:f1:57:7d:
                    98:8c:4e:51:7c:10:c3:30:21:7c:71:a1:48:2b:27:
                    b1:35:58:d5:1b:1d:c1:95:cb:9a:72:8f:9f:a8:a4:
                    02:22:23:c1:d7:75:94:91:4a:e0:f2:2b:ba:19:1b:
                    1c:b6:69:62:2b:a0:d1:e6:14:b4:7d:3e:e8:00:4b:
                    e1:74:34:1d:81:71:6c:9e:df:5d:84:df:85:0d:0f:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:31:7F:31:5A:DB:D2:82:1C:67:98:6D:4B:F9:C9:8A:A4:D2:E6:1A
            X509v3 Authority Key Identifier:
                keyid:8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235322e302f32342d3234203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:62:57:c4:3b:84:a9:f9:7b:dd:79:a9:4e:8a:76:a7:5a:4c:
         db:a3:c3:db:f2:f9:92:c7:92:99:a4:36:94:bd:48:3b:a4:8f:
         6d:f9:fc:7f:51:01:03:55:b7:d8:c9:35:ef:f8:0e:1f:49:b1:
         97:94:66:f9:d1:89:a6:68:26:3b:8f:28:d5:c9:2c:61:00:33:
         23:a8:65:1d:2f:62:a6:81:20:ad:54:7f:7d:21:0d:29:3c:e8:
         64:83:8d:48:a1:12:63:60:e3:22:c9:27:6d:6f:1d:0b:b0:93:
         51:21:12:13:20:56:45:63:49:fd:bc:f9:4b:6a:bd:b8:11:d1:
         25:f3:cf:ba:98:d0:e2:e1:7e:aa:5d:dc:2e:d4:0d:29:5c:07:
         12:f4:ba:bb:2b:52:04:b3:3c:17:be:55:38:02:df:17:83:9b:
         76:97:e3:7e:08:9a:c9:4b:50:a8:65:60:80:f2:36:61:cf:5b:
         66:d2:87:f9:02:b8:e6:7a:15:4a:65:d5:d9:6c:81:7c:52:18:
         91:b2:40:07:99:38:2d:19:af:6a:9c:9e:68:62:fa:e2:59:62:
         37:18:ef:bf:59:21:89:f5:25:0a:43:c0:05:62:34:c3:a9:75:
         37:fd:aa:61:8b:3e:f6:61:53:27:73:bc:1c:b3:78:83:af:de:
         39:89:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org