Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130362e302f32342d3234203d3e20323730323636.roa
File:                     3230302e3131352e3130362e302f32342d3234203d3e20323730323636.roa (raw, json)
Hash identifier:          VtAtO33uLxQCVU4Vhv9T1XEf58EsqvVonObz2lmHiZ8=
Subject key identifier:   66:4C:74:D0:06:43:9A:7E:7F:93:38:C0:B5:64:4D:EA:15:EB:6B:36
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       79C6809083175789AB54B50C11FA797DA70B4BA1
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130362e302f32342d3234203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:35 +0000
ROA not before:           Wed 03 Apr 2024 13:48:35 +0000
ROA not after:            Wed 02 Apr 2025 13:53:35 +0000
asID:                     270266
IP address blocks:        200.115.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c6:80:90:83:17:57:89:ab:54:b5:0c:11:fa:79:7d:a7:0b:4b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:35 2024 GMT
            Not After : Apr  2 13:53:35 2025 GMT
        Subject: CN=664C74D006439A7E7F9338C0B5644DEA15EB6B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5e:56:ef:73:fd:b0:6e:7a:fa:54:9d:a4:d5:
                    11:ac:d2:ab:14:b8:ee:d3:3b:5e:26:08:59:81:8e:
                    db:e4:36:ae:8f:2f:7a:f4:8c:f8:35:25:c5:5d:f8:
                    d0:91:a0:15:c5:54:e5:bd:c4:68:0d:a0:6a:0f:0e:
                    8e:1c:c5:db:d0:ec:53:85:f1:35:3d:3c:f5:f9:1a:
                    b7:73:46:12:89:74:07:49:b0:c0:03:ba:16:4c:6c:
                    5d:77:00:b8:5d:f3:1f:ac:ff:9b:1d:84:a3:b7:2b:
                    09:c6:41:26:2a:27:a2:30:a6:e2:12:f1:63:c1:cf:
                    aa:f4:57:d2:9f:00:4b:9a:71:7a:52:e4:63:7d:a0:
                    ce:1e:60:34:25:62:bc:fe:e0:5a:c9:4d:a4:c6:8d:
                    f2:2c:65:bf:d4:e6:84:ed:a3:8e:8a:3d:d1:dd:de:
                    3d:ea:fa:8d:29:a9:05:66:93:7d:12:fc:b0:cf:2a:
                    1b:7b:73:d0:02:bd:c2:8b:c6:f2:f2:43:a3:32:a5:
                    f0:f1:55:af:84:91:7e:ae:e7:b5:fb:2e:a3:34:b9:
                    35:8a:2a:3b:4c:2d:da:4e:43:bc:59:2e:ae:55:35:
                    fb:98:6b:ba:f2:46:33:49:a6:fd:55:91:6b:be:ad:
                    77:ee:61:00:7d:b1:de:9a:c0:b5:2f:e8:14:62:20:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4C:74:D0:06:43:9A:7E:7F:93:38:C0:B5:64:4D:EA:15:EB:6B:36
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130362e302f32342d3234203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:dc:4e:cb:48:32:db:24:94:76:38:06:64:8b:4b:f5:23:44:
         c7:bb:c1:21:cd:fb:f6:7f:fa:8a:1a:a4:5b:65:16:de:7f:e8:
         6b:a1:81:62:fa:b6:f0:b7:e8:ca:ae:66:2c:69:47:c2:4b:ac:
         47:34:30:84:68:a0:65:7b:ed:03:97:68:05:5e:a9:ad:9d:4e:
         45:87:25:3f:9d:40:ee:7f:6f:6d:b0:92:1e:26:63:60:54:43:
         9d:dd:3c:99:6e:dd:60:56:90:a8:f7:44:82:c8:eb:dd:d6:8c:
         b4:3f:3e:b4:68:a4:a8:c8:a3:32:be:1e:29:19:fa:c2:8c:f6:
         94:3b:2c:50:a2:31:a1:ed:d9:e6:c4:93:c8:63:74:5b:d0:a7:
         c3:b1:51:9a:ff:75:be:ea:82:c8:bc:f3:b2:c0:a8:2c:37:2b:
         1b:98:eb:1f:ea:97:17:e0:92:7a:87:3b:41:3c:3c:93:6d:fb:
         a7:4f:44:b4:d9:cd:d7:45:d9:69:7d:b4:e3:49:a8:a3:a6:91:
         fe:d6:8a:54:89:2b:e4:67:80:85:a1:2e:aa:84:a0:23:66:85:
         2f:ae:58:79:db:2c:b9:9f:73:d3:b8:dd:ba:85:93:ee:55:2e:
         86:1c:ce:a6:4e:8d:43:19:dc:02:0b:ae:95:87:a4:02:57:5a:
         22:ef:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org