Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/3230302e35332e342e302f32322d3234203d3e20323730323633.roa
File:                     3230302e35332e342e302f32322d3234203d3e20323730323633.roa (raw, json)
Hash identifier:          3tgh4ggsJemnvUy0a8YNBVxU3phayxN8hYUkyi2vl0g=
Subject key identifier:   5C:A5:34:EB:73:5D:38:21:45:A3:BF:65:CB:AB:10:22:F1:D8:76:91
Certificate issuer:       /CN=7B688C41F3A6BB806F255EA1032B8DA1525EAA71
Certificate serial:       4824DCE0D9D1D7423E01DF02C493EA6ECFA01C2D
Authority key identifier: 7B:68:8C:41:F3:A6:BB:80:6F:25:5E:A1:03:2B:8D:A1:52:5E:AA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/3230302e35332e342e302f32322d3234203d3e20323730323633.roa
Signing time:             Fri 16 Feb 2024 18:14:47 +0000
ROA not before:           Fri 16 Feb 2024 18:09:47 +0000
ROA not after:            Fri 14 Feb 2025 18:14:47 +0000
asID:                     270263
IP address blocks:        200.53.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:24:dc:e0:d9:d1:d7:42:3e:01:df:02:c4:93:ea:6e:cf:a0:1c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B688C41F3A6BB806F255EA1032B8DA1525EAA71
        Validity
            Not Before: Feb 16 18:09:47 2024 GMT
            Not After : Feb 14 18:14:47 2025 GMT
        Subject: CN=5CA534EB735D382145A3BF65CBAB1022F1D87691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:81:e1:b3:63:80:d2:6f:67:61:b8:ac:1b:
                    96:d6:bd:56:4b:21:4b:24:b1:c6:7c:fd:56:44:4a:
                    d7:32:76:b3:56:85:59:9f:a6:ae:fe:70:7e:b4:14:
                    44:b4:ed:61:52:61:d8:cd:01:77:56:de:7d:66:4e:
                    7e:bb:c7:58:15:af:00:9b:8f:07:09:b4:83:51:2d:
                    aa:ca:79:b2:ec:58:a2:af:e4:42:2f:11:7a:de:27:
                    15:16:4b:6f:60:6c:14:18:14:b1:cc:4a:cc:2b:71:
                    63:0e:57:97:7d:d1:c9:3f:a8:93:a8:2d:f6:89:51:
                    07:fb:b6:ae:53:b6:53:35:60:6d:ff:37:41:d9:d6:
                    44:93:98:d5:c5:c0:43:24:da:94:ae:0a:8e:cb:3d:
                    9d:e2:ce:52:39:98:ff:fc:e6:b2:39:6a:ef:7f:42:
                    89:e8:27:69:c3:af:d3:1e:42:f1:4b:b5:16:ec:59:
                    df:50:31:36:bc:09:2b:7d:7f:95:de:fd:ab:75:fc:
                    0b:93:86:6b:b9:fc:b9:aa:2f:06:3e:f3:ae:0b:4b:
                    9b:08:90:d8:f8:4f:69:9b:95:05:a8:bc:91:13:e3:
                    3d:cd:c3:04:ef:36:1b:02:08:54:77:99:01:71:e6:
                    07:d4:c8:38:f0:6e:90:05:fe:e6:da:31:5f:d7:ed:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A5:34:EB:73:5D:38:21:45:A3:BF:65:CB:AB:10:22:F1:D8:76:91
            X509v3 Authority Key Identifier:
                keyid:7B:68:8C:41:F3:A6:BB:80:6F:25:5E:A1:03:2B:8D:A1:52:5E:AA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/3230302e35332e342e302f32322d3234203d3e20323730323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:ac:e3:0a:bf:cb:92:8b:2f:cd:32:a8:69:da:b2:49:ec:4d:
         c9:9a:8c:e6:c7:28:f0:e3:91:22:fb:fd:b6:3b:59:a0:11:82:
         90:5e:77:9f:b7:6f:97:5e:13:1d:ce:b5:cb:a4:95:7c:fd:e4:
         16:ee:7a:02:c1:72:a6:29:df:29:35:d7:6c:25:56:ee:78:6b:
         00:30:e5:00:8e:0f:aa:c8:72:c6:b3:55:e4:ba:43:88:df:93:
         02:5c:70:9f:51:02:ce:21:9f:5a:be:40:56:b9:61:50:ed:37:
         44:57:05:4f:56:1f:42:bc:15:6a:7f:a2:c6:c1:31:45:a8:4f:
         29:1b:0c:50:6c:86:36:c8:0f:d2:b1:cd:00:4d:55:40:f6:db:
         e9:c6:9a:20:79:48:55:2c:2d:43:d4:fe:98:b2:2f:2b:5d:5b:
         b7:14:97:88:7a:ad:29:50:69:c0:cb:93:77:ec:38:f8:96:e7:
         aa:1e:f2:f0:75:e1:ad:6f:9c:5d:99:0e:60:a0:d6:48:12:f4:
         70:61:13:f1:d8:37:4d:43:58:5d:5c:2c:63:49:b5:cd:59:ec:
         3f:48:8f:1b:2f:2b:93:0b:d8:38:95:84:53:dc:06:13:d8:20:
         21:2a:88:3c:12:63:25:74:eb:d1:27:e7:bb:35:7c:c8:f5:5d:
         ec:f3:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org