Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa
File:                     3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa (raw, json)
Hash identifier:          jHEnge8cbrtlJD5Qpe8oRM8T/nMo00rkpCF5a5dHgA0=
Subject key identifier:   2B:92:DB:FF:A8:75:15:37:30:FE:E8:36:4B:07:F5:A3:AC:E4:8A:1C
Certificate issuer:       /CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
Certificate serial:       23238EBB36CBB93C0D9B699181019D6A4F62CED9
Authority key identifier: 8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa
Signing time:             Fri 16 Feb 2024 18:38:41 +0000
ROA not before:           Fri 16 Feb 2024 18:33:41 +0000
ROA not after:            Fri 14 Feb 2025 18:38:41 +0000
asID:                     270615
IP address blocks:        200.215.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:23:8e:bb:36:cb:b9:3c:0d:9b:69:91:81:01:9d:6a:4f:62:ce:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
        Validity
            Not Before: Feb 16 18:33:41 2024 GMT
            Not After : Feb 14 18:38:41 2025 GMT
        Subject: CN=2B92DBFFA875153730FEE8364B07F5A3ACE48A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:59:04:81:c5:56:ab:bc:25:f0:d9:46:e5:
                    43:cb:9a:b0:9a:ef:a0:f8:29:98:bc:f1:c8:fc:e8:
                    30:c0:50:7f:2b:f2:79:5e:09:b1:76:e0:7e:67:c2:
                    fc:97:a7:c0:54:6a:28:42:fa:61:0a:9d:74:a5:71:
                    2f:35:74:c0:42:81:45:64:70:ab:67:d5:31:a0:63:
                    e5:ea:c3:a6:7a:45:2c:2c:93:e7:44:eb:9a:5e:2b:
                    50:92:27:0d:cd:9a:af:9c:28:85:02:a2:9a:74:76:
                    e4:35:d5:86:41:6e:ae:ad:90:87:a1:31:cf:0b:99:
                    8f:ae:78:98:d5:7c:7b:42:db:d9:d9:ae:72:a3:da:
                    d5:ed:3c:a6:e2:92:74:9e:19:bd:79:59:0c:4f:8d:
                    8e:7f:b4:ba:fe:df:f9:73:9c:4b:59:18:95:b4:f1:
                    b7:52:1d:77:fb:c7:ef:8a:90:55:e6:ce:3f:76:03:
                    54:b8:b9:86:c7:a0:5f:b4:6d:3f:8d:0e:4b:db:62:
                    54:1f:21:6a:22:bd:91:f6:04:5b:cc:42:f4:9f:ce:
                    6f:bc:62:13:26:07:e4:15:b4:19:42:5a:65:5f:90:
                    20:49:ef:05:3e:e6:fa:28:ee:d2:9d:6f:b0:43:b9:
                    09:7d:d1:93:d9:7c:e0:86:cd:92:6d:6c:3e:4e:82:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:92:DB:FF:A8:75:15:37:30:FE:E8:36:4B:07:F5:A3:AC:E4:8A:1C
            X509v3 Authority Key Identifier:
                keyid:8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:14:a8:4c:ca:e7:d0:00:83:6d:f3:0f:95:9f:79:84:2e:bc:
         62:94:a2:82:a2:23:24:27:8c:69:2b:a4:76:e1:8c:8c:b2:c9:
         f3:76:f3:b2:f7:61:d5:98:95:2f:c7:f3:92:82:ec:04:5c:fa:
         22:93:26:11:12:b2:2f:38:93:3e:d3:92:2b:7d:3e:c1:d2:d3:
         e2:87:0d:49:f6:11:ad:f6:31:c9:eb:d8:e1:e3:d6:be:8d:19:
         23:d9:b6:d7:12:26:3b:31:42:8d:c6:cd:78:10:78:b1:c1:6e:
         b9:f6:be:42:b7:2d:a4:92:62:83:e3:d0:2e:74:16:59:d0:2e:
         85:a3:b7:39:28:51:12:cc:70:a9:c5:29:d3:fb:8a:3b:15:78:
         e5:a0:75:4b:76:66:8b:00:69:41:ac:f7:85:03:66:00:8b:c7:
         b0:20:d7:82:32:64:1f:ef:f7:8c:39:d6:0d:15:af:2d:e9:5b:
         5d:e4:96:6e:ef:f8:89:6b:38:75:36:a4:4b:13:5c:89:12:f8:
         6e:d3:2f:d4:a5:97:60:12:e9:30:96:c3:17:07:32:6f:81:ea:
         9b:b0:86:32:05:4a:44:f1:c6:ad:17:2b:e2:c6:db:14:14:ac:
         45:59:07:ff:6e:0a:3a:55:b4:eb:77:94:fd:ce:e2:11:ba:a5:
         0c:bf:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org