Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e332e302f32342d3234203d3e20323731303137.roa
File:                     3230302e3231392e332e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier:          NtX5kabPrkSjIN83bf9U6lhn8xDkZ4W6nHhlwmmewWw=
Subject key identifier:   8D:2B:15:B3:28:E5:AB:A6:58:32:78:61:B1:C6:61:8B:6A:63:93:E8
Certificate issuer:       /CN=227999345B6825C592F26D792A9A591CD758367B
Certificate serial:       04C6BE9F39C461DFEDA06335C0E850200F16C667
Authority key identifier: 22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e332e302f32342d3234203d3e20323731303137.roa
Signing time:             Thu 28 Mar 2024 18:51:21 +0000
ROA not before:           Thu 28 Mar 2024 18:46:21 +0000
ROA not after:            Thu 27 Mar 2025 18:51:21 +0000
asID:                     271017
IP address blocks:        200.219.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c6:be:9f:39:c4:61:df:ed:a0:63:35:c0:e8:50:20:0f:16:c6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227999345B6825C592F26D792A9A591CD758367B
        Validity
            Not Before: Mar 28 18:46:21 2024 GMT
            Not After : Mar 27 18:51:21 2025 GMT
        Subject: CN=8D2B15B328E5ABA658327861B1C6618B6A6393E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:18:1c:fb:0e:12:94:bf:ee:a1:c4:03:eb:
                    ff:c1:3c:ad:41:7a:8f:53:7a:9a:e8:9a:0e:74:36:
                    f9:dd:7e:b1:36:ed:ec:01:3f:7c:d1:8f:2c:6b:c9:
                    e0:ec:5f:2f:22:c5:b8:7b:cb:16:5b:a5:16:d8:b1:
                    f4:9e:38:39:24:d7:83:31:cc:cb:be:74:e0:5c:79:
                    d6:c6:bb:69:e0:e2:f8:de:19:5f:e7:cf:8f:2d:5e:
                    a7:04:66:22:9c:63:78:9e:1c:fb:97:7a:f4:b3:dd:
                    ab:35:93:36:52:15:d2:4d:4d:84:83:62:0e:c3:c3:
                    40:65:32:8a:88:d8:39:bc:46:78:9f:c4:af:b1:3a:
                    cb:84:05:bd:33:32:d4:7a:da:6e:a2:be:2e:a2:ba:
                    42:56:9d:65:09:5c:7d:eb:c9:44:42:92:3c:75:c7:
                    f3:8b:05:e8:91:29:91:ad:59:68:13:d2:0f:ab:30:
                    02:9a:2d:09:e9:26:d8:3c:89:c8:79:64:7c:96:33:
                    b8:03:1f:aa:f3:51:2a:a2:cf:05:7f:c5:c2:f4:1b:
                    7f:2d:05:2d:3e:54:ae:d3:c4:b8:21:b4:ca:a8:78:
                    20:73:cb:f6:8f:e1:c4:ee:14:60:00:3c:d5:ee:e8:
                    1f:1c:c7:84:09:02:ce:cc:23:ab:5c:7e:be:cf:08:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2B:15:B3:28:E5:AB:A6:58:32:78:61:B1:C6:61:8B:6A:63:93:E8
            X509v3 Authority Key Identifier:
                keyid:22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/227999345B6825C592F26D792A9A591CD758367B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e332e302f32342d3234203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:23:b0:d9:eb:3f:d2:5b:a0:98:66:20:1f:11:d9:eb:7e:3d:
         61:ad:e3:17:aa:7b:e2:de:6b:b1:66:04:d7:1e:a9:9a:55:e0:
         27:24:6d:16:92:2f:c9:7a:78:76:5e:96:e2:8e:75:6a:6e:8f:
         d9:1e:82:6f:c9:85:e1:94:1a:30:c9:7d:dc:aa:41:f9:c6:fa:
         99:dc:7d:6a:a8:3c:83:22:de:62:19:9a:4d:33:96:41:a1:b5:
         a2:61:64:51:0e:4c:2f:47:61:6f:e6:b8:46:a5:d0:77:c8:3d:
         ef:98:05:07:ed:ec:6b:ec:62:c5:46:92:a4:01:e4:2d:e8:15:
         3d:01:81:91:1a:55:8d:f2:0d:18:ed:46:7c:d0:a9:3e:af:b4:
         82:dd:9c:ee:de:fd:e5:8b:77:73:64:0f:53:f6:55:00:ca:c9:
         1e:55:71:d9:67:b0:df:4b:d1:c3:d2:3f:a8:3c:e0:7e:0e:a0:
         16:f8:56:39:7f:cc:c5:90:02:df:5d:aa:09:96:5a:f5:47:52:
         3e:f3:88:a7:b7:7f:b2:d0:3c:e3:45:28:00:61:a8:fd:40:74:
         7e:b2:74:df:fb:42:ed:32:9c:75:58:b5:d2:71:7a:5d:c3:42:
         a1:67:8d:a8:9c:16:a2:8e:c8:08:30:19:83:87:5b:17:40:78:
         de:d1:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org