Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3132382e3234302e302f32302d3234203d3e2032373136.roa
File:                     3230302e3132382e3234302e302f32302d3234203d3e2032373136.roa (raw, json)
Hash identifier:          BgjyE+ke9iq+7aenCjdPJd81VAy207z1/kD6Z8kl9yo=
Subject key identifier:   30:1E:87:8F:6C:F1:01:04:74:EB:D7:4D:F4:3B:D6:10:37:CE:97:DB
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       43F508BDA1ABB72ECFB3E220E18178436837752F
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3132382e3234302e302f32302d3234203d3e2032373136.roa
Signing time:             Fri 26 Nov 2021 12:42:07 +0000
ROA not before:           Fri 26 Nov 2021 12:37:07 +0000
ROA not after:            Fri 25 Nov 2022 12:42:07 +0000
asID:                     2716
IP address blocks:        200.128.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f5:08:bd:a1:ab:b7:2e:cf:b3:e2:20:e1:81:78:43:68:37:75:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Nov 26 12:37:07 2021 GMT
            Not After : Nov 25 12:42:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:4d:03:b4:b9:d2:83:2c:08:85:92:ec:22:
                    31:29:52:e5:01:34:42:62:07:d1:44:0c:9a:ce:70:
                    31:e0:77:ab:58:fe:f1:55:40:4c:aa:09:82:c7:4c:
                    c2:23:c4:ac:86:f7:e1:20:41:20:1d:c5:19:8e:06:
                    da:c7:70:de:6b:29:06:6b:c4:c3:75:16:17:4c:08:
                    1d:97:07:f9:eb:0e:bc:d3:b9:ab:fe:42:48:40:ae:
                    a3:75:0d:20:9e:b0:1f:f9:32:e0:7d:fb:07:e0:6a:
                    3e:6b:56:83:5c:87:c6:84:72:90:28:fb:88:29:70:
                    12:81:8a:4b:bf:07:90:6b:fa:b4:b9:aa:2c:6f:15:
                    af:97:63:ed:a5:3d:c9:9e:38:f7:cd:03:95:2e:00:
                    c5:f0:ed:8b:a7:fe:9d:15:cf:ac:84:68:a2:9a:d7:
                    41:9e:41:6d:44:41:0d:f2:67:3d:cc:ae:1a:33:06:
                    5e:29:8c:b5:83:04:5e:c1:ff:ec:e5:e7:23:85:28:
                    af:25:d9:5b:04:89:64:5e:76:41:97:82:2f:ac:92:
                    ee:bf:15:12:ec:8b:ef:44:08:c5:b5:d5:1d:db:b9:
                    59:ef:2d:1c:b1:18:a7:ec:cf:d2:fb:13:71:7f:3c:
                    25:68:12:fb:23:d7:96:45:ef:84:de:af:a5:84:20:
                    0e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1E:87:8F:6C:F1:01:04:74:EB:D7:4D:F4:3B:D6:10:37:CE:97:DB
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3132382e3234302e302f32302d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:df:74:49:b2:15:32:39:46:21:05:c2:31:ec:4c:39:3d:14:
         c7:10:85:44:05:d4:0a:fa:fb:f0:92:51:19:96:29:93:bf:20:
         75:df:b9:86:1a:e0:65:27:3a:b2:d0:ad:8c:0c:4f:66:50:60:
         d9:6b:d5:31:27:d7:35:6e:fb:77:65:13:8f:93:2d:58:8d:48:
         e9:2a:1d:79:38:d9:84:c6:dd:56:dd:26:b5:fd:24:e5:3c:78:
         16:b4:d9:18:15:c4:c6:f7:d7:75:d8:0f:ea:bc:7e:de:e2:f0:
         2a:c4:da:fc:e2:f3:22:57:dc:6b:b4:b0:69:a8:af:6a:a9:a4:
         0c:c6:5c:28:42:73:f2:1e:18:41:b0:17:ed:44:e8:6a:e8:87:
         fd:37:ba:3b:6a:66:90:c4:7a:79:4b:16:c1:30:e1:45:7b:c3:
         0d:7c:30:0f:49:3f:05:9c:28:bb:e8:11:d9:46:f3:e4:9d:8d:
         d7:55:5c:08:82:4c:f2:ca:9e:f6:21:1d:ff:24:b9:cd:05:e1:
         f6:20:aa:3e:6d:0c:61:f0:fb:15:f7:2d:43:4e:a5:17:4b:d8:
         7e:8f:3e:ac:51:59:a2:df:e3:61:90:e4:65:9e:9a:ac:9b:d9:
         ea:06:eb:69:cb:bd:32:71:b3:04:bd:0d:17:cf:ef:28:cd:5f:
         b6:9a:f7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org