Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38302e302f32302d3230203d3e2032373136.roa
File:                     3230302e31372e38302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          y1IR8nXdKX+AJL23pcpZyNuUyraIIu+YSgF8jExeyLo=
Subject key identifier:   05:08:B9:45:7F:3B:6D:9E:29:EC:BE:D7:74:E5:49:BC:E2:82:39:23
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       399BC9B11DF374FDF33DA4E2BB209CF0957C984B
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38302e302f32302d3230203d3e2032373136.roa
Signing time:             Fri 07 Jul 2023 15:00:01 +0000
ROA not before:           Fri 07 Jul 2023 14:55:01 +0000
ROA not after:            Fri 05 Jul 2024 15:00:01 +0000
asID:                     2716
IP address blocks:        200.17.80.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9b:c9:b1:1d:f3:74:fd:f3:3d:a4:e2:bb:20:9c:f0:95:7c:98:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul  7 14:55:01 2023 GMT
            Not After : Jul  5 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:71:fa:b7:05:e8:92:5e:e4:f4:fd:95:d6:
                    e0:06:5b:7c:27:0f:6f:7c:77:bd:ee:9d:07:7f:50:
                    8b:a5:ae:b6:8e:35:46:4b:ad:c3:32:4f:2a:55:29:
                    eb:34:6f:a4:56:9b:fc:c4:d4:ad:29:72:26:4e:01:
                    4a:72:8e:23:cb:91:ba:4e:0f:0c:76:8d:01:5f:6e:
                    3e:b7:df:ad:44:2c:c6:b7:f8:31:3c:0b:61:d6:d1:
                    2d:d2:84:ea:44:df:41:06:dc:b7:8e:83:0c:91:b4:
                    c9:ed:a7:e6:6e:da:74:8c:78:54:0a:7b:8b:fe:a2:
                    50:35:d4:97:af:30:e2:55:a0:01:55:7a:4f:db:22:
                    aa:63:6b:8e:ec:e1:7b:ad:e1:bf:de:7b:ae:af:d4:
                    a3:c8:b0:6a:aa:da:7f:8c:c3:25:b4:e3:26:5d:8e:
                    1a:c8:15:16:bf:22:44:3c:ad:b5:49:ee:53:5e:a8:
                    19:7e:dc:6c:d0:6f:4b:50:10:44:30:5a:3b:a9:77:
                    f4:31:d0:b4:29:7e:11:57:3e:67:14:75:af:b4:7b:
                    e6:79:47:54:ef:5b:de:c4:49:75:a6:14:81:11:72:
                    a1:c0:05:d4:6a:1a:58:ec:e4:17:ae:2d:cb:7a:83:
                    86:26:cb:ea:11:65:e0:a7:b4:3a:48:b4:b2:96:01:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:08:B9:45:7F:3B:6D:9E:29:EC:BE:D7:74:E5:49:BC:E2:82:39:23
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:64:1c:6e:97:1d:5a:ac:30:4d:56:ad:6f:6c:e1:0e:aa:
         36:8b:87:2b:db:d0:a2:c0:08:79:d9:12:15:ad:24:34:ce:db:
         bd:3f:bf:a9:09:68:b9:e9:f7:63:c6:79:f8:f6:28:da:61:cc:
         8c:28:4f:4a:5b:ab:09:1a:73:bb:68:9f:46:4f:db:4c:b3:7a:
         f8:4f:28:1b:5c:d3:43:c2:12:f8:d5:11:2f:f7:d4:92:d2:42:
         25:d9:dd:31:7c:c9:e5:de:85:f8:d3:cc:9a:de:80:44:7e:1a:
         e5:65:77:de:8c:77:99:a7:03:26:16:0f:b3:70:81:b6:36:9a:
         5e:60:b2:00:b5:52:4e:7a:f5:d3:a1:65:f2:9d:4b:74:64:fb:
         3a:bf:63:f0:92:82:3c:fc:e0:a3:31:0b:f0:a0:3c:7d:ab:0f:
         26:c2:a4:42:b5:6c:c1:75:24:dc:33:fb:73:b5:de:a9:9a:cc:
         eb:ce:18:2c:c8:37:57:7a:00:65:27:2a:28:63:23:39:c8:5b:
         16:3c:05:de:f9:23:1c:4b:1b:56:aa:e0:6f:fb:dd:3a:fa:4b:
         16:21:b0:6b:89:cd:07:7b:e3:81:ee:5d:26:da:90:f2:af:9c:
         f1:ee:83:67:4e:28:09:f6:f3:0a:07:d7:9b:e2:11:8a:ae:2e:
         c2:38:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org