Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa
File:                     3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (raw, json)
Hash identifier:          B1+CW7Z4FMDNY6oXbwPprisU8h5lvnsrCceE1Dv2yhA=
Subject key identifier:   D5:88:5F:52:39:14:35:B5:90:7C:EB:7B:21:AD:E2:B0:62:93:39:0C
Certificate issuer:       /CN=A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF
Certificate serial:       1178EB8AB2C3402AF0A2DC9AE49D64FB11DBC338
Authority key identifier: A1:6B:CE:F6:31:94:7F:5E:E2:C8:F6:80:7E:B5:1C:84:AB:1F:9C:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa
Signing time:             Wed 09 Aug 2023 18:00:00 +0000
ROA not before:           Wed 09 Aug 2023 17:55:00 +0000
ROA not after:            Wed 07 Aug 2024 18:00:00 +0000
asID:                     266191
IP address blocks:        200.71.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:78:eb:8a:b2:c3:40:2a:f0:a2:dc:9a:e4:9d:64:fb:11:db:c3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF
        Validity
            Not Before: Aug  9 17:55:00 2023 GMT
            Not After : Aug  7 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:c2:4e:90:b5:84:6d:a8:6c:40:6b:10:f3:
                    f1:7e:da:15:a6:af:24:ef:e2:aa:f8:f9:a8:1e:4b:
                    7b:0a:48:37:43:a8:7b:0c:4f:9d:ad:9e:ce:81:e1:
                    62:c1:40:81:9c:75:06:a3:54:8a:af:5e:d0:2b:cd:
                    85:98:4e:73:f6:89:00:0e:79:ae:c7:46:fc:0f:75:
                    82:42:84:8b:2f:58:2f:1e:5e:94:44:a9:58:8b:58:
                    4e:fd:7e:7c:7c:3e:bd:06:0e:3c:00:c7:65:f3:9b:
                    df:7b:e3:6e:59:5c:6c:cc:c3:3d:2b:cf:db:86:86:
                    f2:9d:89:81:fa:be:25:5a:19:af:ad:68:1b:ab:57:
                    d0:63:a0:1d:a9:d0:72:34:e1:f3:19:dd:77:07:4f:
                    18:7f:54:c8:b3:66:f4:b8:d8:89:c7:e2:1f:21:f6:
                    ed:eb:53:a0:80:64:22:5a:4f:49:ef:e9:21:ee:26:
                    bf:ce:85:69:c0:61:cc:9e:f4:db:b6:d6:29:5a:c4:
                    71:ac:c6:b9:f8:4e:bf:16:6f:e8:6e:9e:ac:1f:6a:
                    e0:4a:4f:3b:44:bb:21:5b:07:0d:3a:2d:9c:5b:3e:
                    31:09:cd:5e:96:68:b8:65:5a:63:a3:a2:0f:6a:1a:
                    0a:24:e7:ce:13:89:eb:9b:b4:7f:9b:0d:73:ef:65:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:88:5F:52:39:14:35:B5:90:7C:EB:7B:21:AD:E2:B0:62:93:39:0C
            X509v3 Authority Key Identifier:
                keyid:A1:6B:CE:F6:31:94:7F:5E:E2:C8:F6:80:7E:B5:1C:84:AB:1F:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:18:9b:fc:96:98:7d:2a:21:df:c8:73:52:12:8e:e0:6f:25:
         98:aa:c5:57:94:bc:dd:5f:d8:eb:16:90:b3:f5:7d:b9:5c:cc:
         53:1c:86:8f:da:d1:ad:d9:04:10:e5:da:8b:46:72:a8:23:48:
         f4:41:b5:50:a5:a7:76:55:46:83:55:ee:28:b6:af:5b:08:d0:
         f7:7c:1f:4b:1c:60:1a:6d:1c:80:e5:92:21:d4:e2:22:26:b5:
         2f:d5:6e:d0:26:19:b9:06:a6:e3:fc:c3:51:ea:19:a6:d6:dd:
         51:69:f9:4b:11:53:97:5a:f3:ba:0a:ac:86:6e:f3:94:b5:3f:
         46:d1:37:43:ae:65:d1:3b:9e:7c:14:f0:27:ba:29:64:12:1a:
         b5:fd:2c:7b:3d:f2:ea:62:46:9a:61:58:6e:76:40:20:43:3e:
         cc:57:d1:8f:f9:d6:4a:b6:58:8c:89:ad:e4:c9:52:aa:9c:93:
         59:b0:5a:7e:99:9c:56:33:3d:0f:0c:66:3d:94:34:78:91:83:
         e8:6b:9e:4d:74:37:cf:ed:ed:0e:c2:b1:ac:25:f6:6c:4e:34:
         33:c8:a2:23:bb:50:ff:48:c2:d4:1a:27:be:f8:ab:36:26:9f:
         de:b2:48:e8:d6:5a:83:9a:cc:88:fd:f8:be:a9:f8:dd:33:25:
         fa:e3:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org