Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e302e302f32332d3233203d3e20323731303137.roa
File:                     3230302e3231392e302e302f32332d3233203d3e20323731303137.roa (raw, json)
Hash identifier:          2B/Haz9l14wqBIKRpoWIWN7CphBZBTJKrNx3AVL/UDs=
Subject key identifier:   C1:71:8E:4C:4C:2C:74:77:33:9C:06:6B:15:FE:21:A4:96:6C:F7:CE
Certificate issuer:       /CN=227999345B6825C592F26D792A9A591CD758367B
Certificate serial:       1F56D2AD15783B8DFC8DDE3FB950794B6F68D0F7
Authority key identifier: 22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e302e302f32332d3233203d3e20323731303137.roa
Signing time:             Thu 28 Mar 2024 18:51:22 +0000
ROA not before:           Thu 28 Mar 2024 18:46:22 +0000
ROA not after:            Thu 27 Mar 2025 18:51:22 +0000
asID:                     271017
IP address blocks:        200.219.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:56:d2:ad:15:78:3b:8d:fc:8d:de:3f:b9:50:79:4b:6f:68:d0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227999345B6825C592F26D792A9A591CD758367B
        Validity
            Not Before: Mar 28 18:46:22 2024 GMT
            Not After : Mar 27 18:51:22 2025 GMT
        Subject: CN=C1718E4C4C2C7477339C066B15FE21A4966CF7CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:cf:9c:73:04:57:b9:f1:74:a3:e9:72:6e:
                    40:e9:34:86:dc:25:03:4a:75:c7:56:62:15:40:dc:
                    ad:19:9b:e5:1d:e7:d3:58:7c:b0:e9:b5:52:d4:82:
                    fb:bd:84:ac:b7:a2:04:43:21:96:12:84:89:bb:4b:
                    05:8b:93:3f:f7:44:d2:ca:29:e9:95:15:45:41:1a:
                    ff:cd:74:42:af:17:91:b7:d4:96:57:7e:07:c7:7c:
                    e3:fc:e2:f4:f6:96:6f:23:95:c0:89:7d:b7:94:17:
                    f2:7c:5e:65:c8:ea:c2:0e:8f:0b:5f:a8:81:a0:cf:
                    9a:52:4b:16:06:b6:52:61:c6:9f:f5:73:38:4b:f2:
                    76:ae:a3:0a:0a:2b:3e:c2:40:43:21:45:30:ee:20:
                    47:b5:93:b2:c3:45:9e:85:3e:7d:dd:24:7d:9e:4a:
                    2c:d1:62:f9:e3:a7:73:ab:b6:bd:20:9e:71:a3:24:
                    ff:d4:f7:ef:71:a2:b4:c0:46:11:1d:32:80:45:15:
                    21:8e:b7:e3:ea:aa:0b:12:18:35:d5:bf:b8:7e:00:
                    d7:f1:26:7e:67:12:43:0d:b1:57:5c:c4:69:d4:70:
                    56:0c:73:30:b4:a4:3e:39:7d:11:b8:0f:d5:bb:66:
                    98:b4:ed:6e:10:1d:52:dd:0b:8e:bc:ed:b5:90:48:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:71:8E:4C:4C:2C:74:77:33:9C:06:6B:15:FE:21:A4:96:6C:F7:CE
            X509v3 Authority Key Identifier:
                keyid:22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/227999345B6825C592F26D792A9A591CD758367B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e302e302f32332d3233203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:0f:b5:7b:d5:6f:10:79:c6:9f:f6:ac:e6:20:38:3f:1e:24:
         ad:f7:ab:50:38:7a:c8:3a:0f:e4:46:b5:f9:b0:c3:06:9d:8b:
         0c:ea:e8:3c:46:58:d9:f4:11:f3:ca:03:e7:49:81:b8:ca:d4:
         ba:0f:f1:86:71:fb:d8:bc:0f:ea:89:0d:df:28:f3:30:95:9e:
         65:2b:b8:a4:07:39:8b:76:3c:cd:8d:30:7b:64:13:be:28:92:
         e1:79:4a:fc:fc:05:70:a6:0d:c2:1e:b6:bf:c9:cc:79:a6:4d:
         cb:05:73:71:73:0c:ae:1e:30:4e:89:8e:44:89:72:82:65:1e:
         2b:3e:52:04:f2:54:0d:f9:00:74:8e:d7:cf:23:fa:01:19:29:
         8a:49:a2:9f:50:54:f6:ec:f8:7f:d3:23:5e:db:90:4a:10:4d:
         8f:42:03:39:6a:51:bb:85:c4:5f:f6:8a:2d:2d:62:fe:51:e8:
         4f:53:02:9d:2e:0d:9e:a9:e3:61:79:5f:8c:d9:6d:cd:1a:ca:
         73:60:c0:40:57:f2:83:e9:80:76:1a:a4:3d:ce:f3:a0:18:25:
         7c:6c:49:2e:23:75:e8:21:5f:7d:36:57:8c:72:c2:83:29:67:
         83:56:46:d4:93:07:be:2e:e3:37:88:9b:19:db:2d:d8:90:c9:
         c5:ef:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org