Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa
File:                     3230302e3233332e39362e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          Yr2csXeDqSfZERU3/L3yhjGEa0/++ueDT+tRYicYKqw=
Subject key identifier:   1C:1E:EE:10:71:A7:F3:3C:43:37:7F:0A:54:E3:51:03:57:49:F9:D1
Certificate issuer:       /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial:       76690108DB23B306F13212EE7357764FC846BB1C
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa
Signing time:             Tue 20 Feb 2024 16:57:03 +0000
ROA not before:           Tue 20 Feb 2024 16:52:03 +0000
ROA not after:            Tue 18 Feb 2025 16:57:03 +0000
asID:                     22689
IP address blocks:        200.233.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:69:01:08:db:23:b3:06:f1:32:12:ee:73:57:76:4f:c8:46:bb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
        Validity
            Not Before: Feb 20 16:52:03 2024 GMT
            Not After : Feb 18 16:57:03 2025 GMT
        Subject: CN=1C1EEE1071A7F33C43377F0A54E351035749F9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:9a:11:f3:b7:64:19:d6:2b:e3:fb:db:08:
                    26:8e:37:05:16:05:88:a8:80:0a:a5:34:5b:b6:e3:
                    40:a5:a7:d2:81:7e:16:d8:87:1a:11:f2:85:9a:d7:
                    96:5e:ba:a3:30:f1:fa:ff:6a:a8:73:b2:53:0b:c8:
                    f2:95:c2:3b:5f:2f:da:b3:e6:6b:0e:4c:72:1b:80:
                    99:c9:34:45:35:31:65:b4:3a:7d:b2:75:a2:7d:9c:
                    ad:d3:ff:37:85:cc:04:b9:60:92:9b:17:d3:a1:71:
                    fe:17:43:71:8e:75:22:10:e2:d0:08:10:cf:5c:d7:
                    f9:54:bd:0a:ba:61:32:ff:8b:6a:d1:b6:e3:bb:a0:
                    90:3d:c3:f0:eb:29:58:74:81:28:8b:c6:c2:7a:6b:
                    45:5c:b9:39:1a:69:a2:d3:03:64:b3:ae:60:5b:dd:
                    09:ae:80:4c:e4:42:29:e8:37:03:39:54:0d:d7:6b:
                    01:e9:04:0f:01:3f:ff:35:b3:52:7e:93:f2:32:52:
                    7b:19:20:8c:63:40:67:da:e2:ae:b6:65:90:22:e1:
                    ba:a1:e5:0f:4d:43:eb:28:c6:0e:5e:62:9e:60:89:
                    2f:2c:8a:68:57:38:96:23:89:cd:21:9e:f2:66:33:
                    fe:ec:52:43:99:de:48:14:9e:e3:ec:90:ab:d5:ad:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1E:EE:10:71:A7:F3:3C:43:37:7F:0A:54:E3:51:03:57:49:F9:D1
            X509v3 Authority Key Identifier:
                keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:40:45:59:3e:14:b5:a6:19:3e:c6:a2:5b:cc:c1:77:e0:cb:
         ee:0b:b1:10:18:6a:68:c4:01:18:c6:96:6e:af:01:92:25:0e:
         1d:89:8c:56:4c:eb:80:a0:bd:d1:9f:fd:67:77:53:88:63:5b:
         ee:bf:4a:01:d0:3b:85:9f:6c:76:1a:82:5f:eb:d4:c1:64:3d:
         24:52:5d:60:ff:61:cd:56:d1:f8:9f:d9:9b:2b:20:c3:0f:7e:
         f4:88:f8:db:e1:30:a5:f2:a4:ea:c9:63:ec:29:1c:46:fd:80:
         6e:62:fb:de:de:95:45:d3:72:a4:1b:df:d7:fb:ff:9b:cb:09:
         3e:d7:3d:66:17:d8:bc:f7:36:80:60:89:0e:5f:f8:cb:60:45:
         e5:72:5e:80:92:52:9f:4c:b5:9d:8c:c6:75:c5:5d:ce:98:98:
         c4:a8:b9:17:76:2e:68:1f:fa:d9:54:c1:49:69:75:e1:9d:25:
         d8:a5:b1:11:74:db:b3:bb:e9:85:54:7c:98:52:dc:73:fd:3d:
         01:9a:34:d5:ff:7e:a5:15:08:70:3a:88:f6:18:dc:54:8e:4d:
         16:0b:63:29:b7:42:00:a6:eb:1e:ab:42:a4:62:48:1b:61:3e:
         90:29:8d:6f:99:d8:2b:ca:02:35:ff:83:17:c4:cf:9a:ab:a4:
         d4:18:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org