Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3137362e302f32302d3230203d3e20323638373434.roa
File:                     3230302e3133322e3137362e302f32302d3230203d3e20323638373434.roa (raw, json)
Hash identifier:          GSVpxazVXgv/Y7wB908m3YWpDuy/PjlRoWujVqn/4Wg=
Subject key identifier:   3D:12:CF:76:38:AE:1F:8D:71:D6:FB:9F:05:33:FB:53:9C:72:A5:F6
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       2C294F5A7EE5F466B07F1A567AAC2883E857D23B
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3137362e302f32302d3230203d3e20323638373434.roa
Signing time:             Mon 23 Oct 2023 20:48:10 +0000
ROA not before:           Mon 23 Oct 2023 20:43:10 +0000
ROA not after:            Mon 21 Oct 2024 20:48:10 +0000
asID:                     268744
IP address blocks:        200.132.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:29:4f:5a:7e:e5:f4:66:b0:7f:1a:56:7a:ac:28:83:e8:57:d2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Oct 23 20:43:10 2023 GMT
            Not After : Oct 21 20:48:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:fd:a2:ca:d2:49:7e:b9:0f:74:06:2c:d2:
                    a5:59:d3:d5:ea:08:6c:ef:30:32:17:fd:7c:9a:bf:
                    ff:fd:a0:60:e9:b0:87:24:af:db:b6:25:b4:86:f8:
                    78:71:c5:5f:c4:23:ce:5e:7b:17:29:f5:f3:aa:ee:
                    a7:20:78:31:3f:2d:13:04:ed:75:c8:47:81:20:68:
                    2e:23:38:b6:82:d1:df:27:60:fe:c8:3a:f6:49:64:
                    ce:9d:ee:62:e5:a1:2a:5f:1e:28:76:46:37:dc:a3:
                    26:5c:da:7d:f6:ac:92:94:be:7a:78:9a:f7:fb:ac:
                    14:35:67:e6:32:78:e1:89:05:ea:12:94:6f:2e:58:
                    88:30:21:45:c2:87:d5:c4:78:fb:87:aa:ee:ba:9a:
                    83:9d:70:4f:75:81:48:31:cf:38:c8:0e:3b:ce:e0:
                    91:44:66:1b:40:80:94:4d:8a:9a:c3:36:4a:75:51:
                    04:e3:01:de:59:c0:20:34:5b:75:d5:51:fa:44:c7:
                    7f:fd:4a:ba:f1:13:ff:57:f6:2d:14:61:fb:d0:49:
                    16:fa:ec:4f:ca:07:e4:29:5d:80:e1:a0:76:27:87:
                    1e:37:26:61:d8:ab:9c:6a:c6:70:5f:f3:a4:7b:5c:
                    09:a0:3b:3c:f9:7c:13:81:2d:b9:0e:43:79:6a:ce:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:12:CF:76:38:AE:1F:8D:71:D6:FB:9F:05:33:FB:53:9C:72:A5:F6
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3137362e302f32302d3230203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:5d:02:61:07:42:f0:30:d8:3a:b2:3d:9c:6d:2d:12:67:eb:
         c6:17:16:f0:01:1a:a6:3b:5f:f8:39:6d:cd:6e:ae:e8:67:b1:
         99:4a:2b:eb:e1:05:af:04:54:e6:70:dc:09:84:e1:0f:fa:26:
         73:34:00:30:48:b7:51:ac:b3:80:74:bc:92:be:2d:e7:69:45:
         19:c9:e7:02:18:95:94:ac:8b:eb:60:6b:66:50:66:11:12:ba:
         47:81:89:e3:1b:61:13:0e:c2:b9:f9:18:7f:68:2f:33:28:50:
         38:c5:ef:54:a9:61:c8:fe:3f:c2:b4:00:b9:9b:30:76:0e:72:
         ab:00:6e:39:dd:5c:c7:6c:b1:4d:b2:8d:06:fa:71:58:02:55:
         bf:31:a6:55:b8:c0:61:d7:9b:a0:d7:c7:ad:8e:6a:4b:c6:eb:
         d2:03:0b:95:f7:8e:30:74:36:fb:12:bb:2c:ab:b2:0c:49:d8:
         ae:6f:e1:9f:ff:e5:91:b4:f1:77:7e:99:f8:5f:f1:3a:c3:0b:
         df:28:81:48:38:ab:6b:e1:ac:47:dd:a9:c0:b9:cd:05:49:b3:
         37:89:25:b8:76:d9:4b:83:52:58:3e:6d:48:af:e2:42:5b:0e:
         29:ee:96:01:d7:51:55:7f:ef:4b:be:d3:b9:21:67:8e:32:14:
         2c:a7:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org