Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa
File:                     3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa (raw, json)
Hash identifier:          ETnZssD0iRTbt6aZewQLKfdy83QWeJu4El49ZMCvg/w=
Subject key identifier:   2C:8B:3F:5A:43:F7:1D:6C:2D:B2:7D:60:66:66:7E:18:CC:58:78:30
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       2BA10B96735C84AE303342C143B600A028EEAAD2
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa
Signing time:             Thu 13 Jul 2023 14:00:00 +0000
ROA not before:           Thu 13 Jul 2023 13:55:00 +0000
ROA not after:            Thu 11 Jul 2024 14:00:00 +0000
asID:                     2716
IP address blocks:        200.132.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a1:0b:96:73:5c:84:ae:30:33:42:c1:43:b6:00:a0:28:ee:aa:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul 13 13:55:00 2023 GMT
            Not After : Jul 11 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:44:ad:92:c9:0c:34:f7:0b:07:98:d2:d2:
                    c5:18:0f:b0:af:d2:9c:8c:92:9d:67:a8:cd:37:65:
                    d6:f8:2e:c4:50:3d:4f:dc:40:39:11:ce:34:39:52:
                    cf:d2:23:a7:10:e0:37:4d:2d:c8:f2:6d:40:52:b9:
                    2b:11:42:cc:5c:8e:1b:41:74:63:dd:a0:e5:63:4e:
                    f2:2c:ac:51:73:c8:70:ea:12:02:a2:75:74:20:71:
                    70:e5:17:e3:ee:c3:d5:88:ae:75:b4:1b:96:86:1e:
                    46:0c:7f:4c:d8:f6:56:ca:0c:de:dc:ac:ba:e9:c6:
                    05:12:38:a2:5e:da:ee:6a:7a:f9:3c:c8:45:2a:45:
                    c0:9a:e5:b3:bf:a0:9b:69:5a:b1:12:4f:71:d4:96:
                    26:4b:64:56:2c:32:9f:d1:a6:6f:70:e8:aa:1c:ba:
                    72:79:a3:82:ca:01:3f:71:94:6e:a0:3d:92:3d:7b:
                    bc:22:9c:0a:91:ad:64:9f:ff:c5:fd:fc:04:37:b2:
                    f1:6d:cb:0c:58:c1:c5:e7:bc:94:8f:a3:78:76:55:
                    a1:21:c1:8d:7f:84:d0:2d:60:44:a7:f0:b9:d3:1e:
                    12:9c:2d:f0:f1:88:08:94:e7:ac:2d:59:a5:41:3e:
                    ed:ba:a3:fa:cf:8c:8a:0a:a5:7c:0c:9d:6f:71:6d:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8B:3F:5A:43:F7:1D:6C:2D:B2:7D:60:66:66:7E:18:CC:58:78:30
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:be:dd:41:18:25:59:74:b7:06:1b:bc:6b:5c:1b:5d:5b:97:
         0f:e8:01:82:d8:1e:a1:e6:8c:55:d9:81:74:01:f0:63:a6:7b:
         ba:5e:43:56:b9:a2:e4:c1:18:d6:fa:94:ee:ae:9b:23:d4:6e:
         07:7a:9f:fd:53:9e:b4:22:37:09:b9:24:f2:50:12:5a:59:8a:
         19:a6:6b:23:dc:07:6e:e9:fb:69:0c:c1:66:3a:9b:61:76:c1:
         59:bb:97:fd:5f:b5:eb:68:7f:fe:1d:2b:14:7b:6c:42:a3:82:
         63:c8:13:ac:55:7f:66:97:25:12:73:ce:91:76:2d:05:bd:4c:
         6d:3b:36:ae:2d:07:55:8c:9b:69:a7:46:a2:96:50:60:f9:c8:
         3d:9c:4b:d4:9d:50:57:ad:6e:3c:aa:e5:f2:aa:a3:49:e3:36:
         74:fc:77:2a:2a:f0:6e:3c:9d:ea:66:ed:84:7c:10:cc:af:b3:
         14:ca:1c:b8:bb:58:a0:e4:43:64:c3:ad:9e:43:98:88:a0:dc:
         6a:6b:1f:1d:28:a3:83:bd:b2:44:ca:09:f4:dd:5e:05:83:71:
         e7:83:99:c1:bc:13:5d:01:64:ab:7b:07:78:1f:a4:7a:56:2b:
         d2:60:9c:43:4e:0f:d7:ae:f2:12:b0:18:ba:6f:be:30:77:6f:
         26:33:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org