Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/0/3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa
File:                     3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa (raw, json)
Hash identifier:          /dcSVjSoPsNAS/wNYuw5j64N/cg3rZiq4c6WSLYV2bs=
Subject key identifier:   82:B2:54:DF:9A:80:D2:20:6F:03:28:68:3F:F0:0E:56:BD:34:B4:F7
Certificate issuer:       /CN=7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A
Certificate serial:       16DE013A68FEE58711A04AC8A930D8AA0B017107
Authority key identifier: 7D:CD:4B:07:3D:74:EB:8E:7D:4B:5B:AB:57:6B:BE:C8:35:9C:93:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/0/3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa
Signing time:             Wed 27 Mar 2024 01:33:07 +0000
ROA not before:           Wed 27 Mar 2024 01:28:07 +0000
ROA not after:            Wed 26 Mar 2025 01:33:07 +0000
asID:                     271600
IP address blocks:        200.24.120.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:de:01:3a:68:fe:e5:87:11:a0:4a:c8:a9:30:d8:aa:0b:01:71:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A
        Validity
            Not Before: Mar 27 01:28:07 2024 GMT
            Not After : Mar 26 01:33:07 2025 GMT
        Subject: CN=82B254DF9A80D2206F0328683FF00E56BD34B4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:e9:fc:19:2b:8d:04:6c:77:53:ae:fb:ba:
                    90:ac:26:5b:eb:c8:cf:19:57:e0:9c:19:36:f4:c6:
                    d9:6b:c6:8d:9e:94:c7:11:0f:c0:36:51:e3:0e:c5:
                    5f:3d:83:95:2e:72:7d:b8:87:7c:2a:bf:75:52:96:
                    8b:9b:60:ae:f4:f8:f4:16:36:fd:38:e0:e9:c5:12:
                    8c:d0:e5:86:86:48:23:15:1a:6e:a8:51:2a:8d:ac:
                    93:df:a7:de:08:f7:55:2f:bd:86:88:9b:6a:a9:34:
                    b8:42:7d:4e:8e:71:9b:6c:64:9e:75:2c:3a:0d:27:
                    98:b2:5f:28:7e:e2:ee:9d:e9:64:71:38:c9:ea:fa:
                    e7:30:a8:00:1b:e2:3c:e0:72:6a:f3:e0:22:41:e5:
                    4c:b8:d8:77:27:66:dc:14:60:eb:74:f1:3f:d5:ca:
                    c4:36:48:c6:2b:02:ae:a1:d2:3c:1a:f4:02:3e:6f:
                    25:4c:46:4b:56:0f:f7:ae:a3:8c:e1:76:2d:fa:2c:
                    d9:bc:3e:23:d0:6e:02:3f:ba:7b:62:58:c8:50:da:
                    be:98:df:f1:f9:75:e5:33:36:5a:ea:f8:93:d4:1b:
                    63:6b:49:5b:e4:cd:c6:6e:06:59:c2:f0:cc:9d:c2:
                    30:97:94:fa:0a:c8:5e:f2:93:a5:a1:43:81:84:de:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B2:54:DF:9A:80:D2:20:6F:03:28:68:3F:F0:0E:56:BD:34:B4:F7
            X509v3 Authority Key Identifier:
                keyid:7D:CD:4B:07:3D:74:EB:8E:7D:4B:5B:AB:57:6B:BE:C8:35:9C:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/0/7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/0/3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:73:32:62:2c:00:52:3e:d7:85:c9:28:ad:a0:d3:e4:2f:80:
         92:24:ae:0f:63:3f:0a:ff:d6:d5:6d:0a:48:28:47:fd:65:50:
         3a:48:76:71:c2:b0:b5:9c:e8:2e:db:70:aa:ee:4f:b6:55:97:
         7b:a2:ec:62:4b:7e:1f:30:4e:dc:99:7f:20:93:6e:c5:49:6c:
         d2:fc:21:1a:e8:98:c3:a0:d7:4d:fe:6f:e8:60:6b:1e:c7:34:
         df:91:d0:ce:97:24:8b:58:6e:9a:9d:e2:ce:b7:8e:21:1c:1a:
         b1:e4:ae:84:ae:77:82:1a:62:35:70:67:4b:d9:41:95:22:80:
         5a:e7:1d:67:e7:8f:6e:1c:5a:9e:e9:50:6f:f1:12:0b:47:08:
         e1:43:23:3f:b1:df:d5:aa:cb:7c:5e:53:45:b0:a1:1d:f0:52:
         99:aa:12:05:ba:00:ee:48:2b:8d:07:be:92:a8:94:8a:31:9f:
         a1:94:41:e9:35:01:cd:13:89:8d:95:b6:2a:76:79:42:7d:82:
         54:55:fe:6f:86:86:2a:4e:5a:27:6f:a1:83:41:ed:62:db:15:
         af:35:98:88:8e:cd:ce:90:bf:d3:93:6f:fb:4e:78:1d:8e:e0:
         26:12:86:af:c9:42:ae:d9:7b:ec:11:05:ec:c8:96:7a:bc:cf:
         6c:8b:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org