Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa
File:                     3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa (raw, json)
Hash identifier:          KGr0XvJeXG6PAnaI32kArnad8hPhCx6Nm97XmcdnVJI=
Subject key identifier:   47:08:98:E4:58:42:C7:CE:E4:FF:C1:80:6E:54:7D:AE:FE:39:4C:BE
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       3CAE45348E3921C1304DCC42EE159A0027BA24E5
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:24 +0000
ROA not before:           Wed 03 Apr 2024 13:48:24 +0000
ROA not after:            Wed 02 Apr 2025 13:53:24 +0000
asID:                     270266
IP address blocks:        200.115.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ae:45:34:8e:39:21:c1:30:4d:cc:42:ee:15:9a:00:27:ba:24:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:24 2024 GMT
            Not After : Apr  2 13:53:24 2025 GMT
        Subject: CN=470898E45842C7CEE4FFC1806E547DAEFE394CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:17:22:12:e1:cc:e6:78:49:bb:9a:31:8d:
                    3d:6d:45:02:ff:46:01:38:46:41:8b:18:9e:a6:e0:
                    b3:e5:20:be:7b:ce:ab:94:b3:32:b0:5b:1c:85:e1:
                    21:2a:de:f5:c9:e1:e3:d1:cd:9a:ee:83:ff:48:5d:
                    20:ed:7b:c8:92:8a:0a:d0:a8:5f:e1:b3:4d:26:42:
                    ad:be:86:85:ce:d2:a0:98:d7:9b:ee:99:96:c4:68:
                    ee:4b:55:7d:85:21:be:d0:a6:c0:8c:c4:39:d2:d7:
                    65:99:13:bd:93:81:93:d5:fb:0c:c5:05:6d:2b:c6:
                    83:05:1d:f9:9b:e0:50:fb:b7:69:50:1b:02:a9:87:
                    b4:0e:3e:67:4a:3b:61:24:bb:a7:c7:52:5d:94:79:
                    85:6c:5f:8e:ed:05:21:ca:57:9d:7c:7e:06:f3:e9:
                    12:70:b6:cc:b8:60:61:24:68:98:3e:d0:dd:5e:d9:
                    5f:a6:74:5b:1b:1d:9b:7b:25:d2:fe:16:9f:38:79:
                    d6:0b:70:95:c0:a5:b8:12:4c:0f:17:f2:89:dc:d2:
                    63:44:df:d7:46:ac:bb:13:d3:20:64:a3:8e:72:53:
                    f1:73:70:14:0c:db:1d:ea:2f:f7:d7:f5:3b:be:c3:
                    f2:b1:59:46:b7:ee:ac:4e:3c:c7:cd:70:03:c3:cd:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:08:98:E4:58:42:C7:CE:E4:FF:C1:80:6E:54:7D:AE:FE:39:4C:BE
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:57:c9:60:ef:e6:b3:ef:06:59:dd:f1:e1:61:74:7f:d7:
         9e:95:75:1a:21:e9:af:2f:e5:35:1a:77:fb:2b:47:21:75:31:
         9c:8e:a2:76:0e:43:77:2c:fd:b4:20:0f:86:52:73:35:12:24:
         71:7e:49:40:5e:2a:f4:de:c8:4e:47:83:95:eb:b3:e6:8f:ba:
         f0:f1:c4:94:2e:7c:a3:dc:31:1f:42:a4:15:3a:91:1c:eb:05:
         63:79:35:de:fb:dd:98:63:cf:ad:ca:31:9e:30:93:01:75:c4:
         fc:41:3a:dd:19:88:fb:b5:9f:66:c2:77:f3:9c:df:8f:2d:e3:
         fb:d2:7c:44:a5:51:24:bb:14:4a:ed:15:58:30:b3:8b:93:20:
         7d:23:ef:3c:01:b7:33:ec:02:c8:eb:a7:08:6e:6f:c3:2b:b1:
         a8:62:14:bd:a8:a0:24:c8:47:53:07:f4:27:be:57:23:51:47:
         44:c1:f3:a0:59:2d:05:5a:dc:30:f5:11:f0:bc:2a:41:17:1b:
         b8:87:03:0d:58:82:2e:c2:61:22:c0:9e:b3:ee:bb:7a:8a:d4:
         c2:ff:63:9d:f3:fb:d0:27:08:af:4d:9d:00:2c:4f:5b:1e:ef:
         05:58:57:51:45:c6:35:5f:21:09:3e:d1:11:74:8a:f7:c4:a3:
         e3:8c:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org