Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa
File:                     3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa (raw, json)
Hash identifier:          9lErLWLwehTkDSADFm1OX6lTZuBtj4r5nyl12YML/m4=
Subject key identifier:   EA:B8:7D:2A:71:A0:D3:11:A3:C6:64:5A:FC:01:3B:EC:08:4F:60:76
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       556B4D1FEC0E98B06D8AEAF6CE533E5BD21AD1B4
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa
Signing time:             Mon 23 Oct 2023 20:48:27 +0000
ROA not before:           Mon 23 Oct 2023 20:43:27 +0000
ROA not after:            Mon 21 Oct 2024 20:48:27 +0000
asID:                     268744
IP address blocks:        200.132.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6b:4d:1f:ec:0e:98:b0:6d:8a:ea:f6:ce:53:3e:5b:d2:1a:d1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Oct 23 20:43:27 2023 GMT
            Not After : Oct 21 20:48:27 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:c7:a7:0d:11:68:f5:37:77:5d:ef:60:03:
                    03:d5:97:44:02:10:f8:1d:6d:f6:a2:14:50:cc:84:
                    31:05:b2:38:61:60:7d:79:01:8b:f5:b5:f1:b8:22:
                    8b:04:c1:fc:db:e7:6b:7d:92:e7:20:ed:53:bc:da:
                    3f:19:4b:a0:04:bc:92:fc:cd:11:09:f7:e9:1d:95:
                    f4:98:2d:dd:f5:27:34:a9:f8:94:0c:09:3e:36:70:
                    81:1e:8c:14:4c:63:4f:38:29:14:72:aa:e5:79:8d:
                    8a:5e:42:90:8f:7f:94:38:5c:96:32:72:54:40:a9:
                    9b:f7:bf:05:8d:ff:b0:a7:a3:0c:b3:91:93:eb:86:
                    dd:5c:aa:d1:b6:f6:ed:b2:21:85:3a:1c:49:86:b0:
                    47:c6:c1:59:8f:c6:69:a1:7a:98:0d:43:ad:93:83:
                    64:26:c6:ff:10:30:e1:e4:c6:79:92:79:66:22:26:
                    fd:da:2f:47:e0:9b:41:80:6f:65:23:0f:92:7b:40:
                    45:69:6e:c1:2e:9c:b6:c6:c3:29:4d:46:2f:de:26:
                    df:e2:91:61:b5:28:01:86:96:97:c1:a8:58:09:26:
                    68:f7:0c:22:69:65:dc:43:95:35:f1:47:d8:c4:73:
                    28:00:f4:ea:20:d6:14:fa:e6:7c:4e:05:d7:e0:2e:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B8:7D:2A:71:A0:D3:11:A3:C6:64:5A:FC:01:3B:EC:08:4F:60:76
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:06:69:2a:a5:0e:34:9e:ec:81:74:22:bc:e4:e8:dd:7d:
         77:c6:29:1d:34:35:61:2a:3c:58:84:bf:9e:04:13:d8:f1:a7:
         b7:0d:c8:73:a2:a3:df:36:cd:d4:6c:cf:41:3f:d4:43:3a:ae:
         f5:b9:d3:f4:91:fa:dc:df:e8:50:f3:93:fe:86:58:b8:dc:57:
         dd:92:3c:af:86:b0:98:82:65:72:28:98:a2:18:e7:8a:1a:25:
         c6:36:69:f6:16:6b:07:dc:c8:e4:74:10:cb:f9:4b:ea:31:f3:
         26:7f:fd:f1:49:db:35:d0:d1:30:61:d2:83:90:97:03:64:81:
         b9:8d:e8:19:b0:1d:46:33:9a:f9:42:ef:ae:34:66:61:e6:8f:
         ed:62:24:61:f9:7d:d2:6d:97:af:d3:59:28:92:43:d0:9c:ea:
         59:e8:0e:4c:75:7e:86:91:66:1a:ed:e2:d3:99:96:d7:af:d3:
         b8:77:d5:4f:7f:b7:cc:e8:86:f5:1d:84:5a:8f:20:73:9c:df:
         22:19:c6:49:cf:da:bd:5f:0c:9c:2a:86:6b:d8:d9:e3:b9:f9:
         96:02:e3:a6:b3:2b:19:34:2e:3e:05:e8:d7:7f:72:fb:37:d8:
         9f:bf:bf:7e:ec:94:66:5f:fc:45:0a:c0:03:92:61:c1:fd:8a:
         5a:fa:4b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org