Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e302e302f31362d3136203d3e2032373136.roa
File:                     3230302e3133322e302e302f31362d3136203d3e2032373136.roa (raw, json)
Hash identifier:          IFT7QYfwM5ozWh4MTHwFSpxepYPh6DEQAb7BrkQ9ogc=
Subject key identifier:   63:1B:A3:A8:F5:6E:0F:03:9F:24:0D:29:09:57:BA:1D:25:BC:CE:01
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       48740DB7BB337AFB2C5BE4F482B667F61BD07CEB
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e302e302f31362d3136203d3e2032373136.roa
Signing time:             Fri 07 Jul 2023 15:00:01 +0000
ROA not before:           Fri 07 Jul 2023 14:55:01 +0000
ROA not after:            Fri 05 Jul 2024 15:00:01 +0000
asID:                     2716
IP address blocks:        200.132.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:74:0d:b7:bb:33:7a:fb:2c:5b:e4:f4:82:b6:67:f6:1b:d0:7c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul  7 14:55:01 2023 GMT
            Not After : Jul  5 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:1a:b8:c0:6d:f3:e0:f0:7f:80:48:3f:05:
                    59:e2:d6:0a:8a:d0:9b:c3:88:c3:3d:2a:79:21:11:
                    fd:2c:f8:7d:2d:2d:f3:06:61:fe:03:00:63:80:5b:
                    a0:26:ce:f1:65:5d:55:eb:c8:bb:c4:ee:1b:be:fd:
                    9f:1a:9c:c1:2f:6f:ca:a9:b0:0c:af:22:1e:79:97:
                    81:17:11:07:56:fc:70:ec:34:51:ad:1f:4f:3f:73:
                    ce:e5:e2:94:8f:0c:41:80:23:84:a6:0f:4d:4b:b7:
                    8a:7b:54:fc:cb:f4:30:26:11:fb:04:2a:6e:ed:25:
                    66:aa:1d:eb:c6:7c:56:22:b0:51:50:91:b8:10:0a:
                    7a:14:98:16:7c:60:12:fa:62:c2:d4:4e:a7:3a:d0:
                    62:02:38:f8:39:69:99:40:8e:31:e4:ec:4f:b2:1f:
                    c6:e8:ee:20:54:e5:4e:73:ff:8b:40:77:96:1d:a6:
                    b8:7f:c2:1e:76:c5:ad:77:63:5b:ba:bf:a5:9f:3c:
                    fe:cc:c8:16:43:6d:76:0c:dd:40:07:a7:00:ca:0f:
                    d2:9c:14:14:b5:17:1d:80:1f:55:43:77:54:4a:8e:
                    38:43:31:19:65:cc:ca:91:8e:45:8f:9e:c4:e1:10:
                    5a:f8:a2:89:0c:f7:69:91:fe:a9:54:5a:3a:9f:29:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1B:A3:A8:F5:6E:0F:03:9F:24:0D:29:09:57:BA:1D:25:BC:CE:01
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e302e302f31362d3136203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:0b:82:c0:20:7a:70:09:d7:ad:52:14:af:23:cb:6d:62:
         a9:59:6f:9d:bf:83:2a:74:77:e3:e9:19:75:c6:58:01:a8:ff:
         db:be:a2:d3:71:14:67:e8:4c:82:46:f1:21:a3:86:88:9d:82:
         f3:83:b0:35:58:29:6a:13:c9:e1:18:0d:de:ad:32:af:f9:14:
         31:6e:29:39:da:f5:2b:01:0e:d5:58:1d:5a:d3:ae:e1:62:01:
         8b:6d:46:d4:70:9f:7b:38:f5:b3:8d:ad:00:11:98:83:cb:5b:
         a1:84:e9:c7:46:b0:2b:10:2d:f5:65:51:a1:eb:b4:bc:aa:5b:
         a2:bd:18:40:7d:34:bd:07:c8:03:8c:20:5c:8f:45:76:9c:0e:
         6e:2e:1b:00:f8:b9:fc:c5:35:a4:0d:ef:74:8b:04:2a:fe:da:
         11:90:79:6a:31:4e:8e:90:20:c3:7f:c6:64:51:39:cf:96:4d:
         13:f0:12:13:ac:be:78:ee:ec:91:22:48:71:bb:e2:23:07:92:
         74:4a:1c:10:2c:ee:e3:2b:e4:83:f2:c3:f7:51:a2:43:81:7e:
         03:64:fa:ff:7f:48:60:b1:16:a5:90:be:a3:1d:18:23:4d:d9:
         68:df:5b:cf:7f:a2:85:f2:b9:5f:b3:31:ee:b7:f3:6a:b8:e7:
         bc:7a:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org