Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38302e302f32302d3234203d3e2032373136.roa
File:                     3230302e31372e38302e302f32302d3234203d3e2032373136.roa (raw, json)
Hash identifier:          Ca5QlQLoZJpgRauvvXmLjxEVS14GYn3s6pb6tetgVso=
Subject key identifier:   CA:69:47:5C:31:B3:EB:86:2A:37:DB:2C:D7:60:3B:D0:E2:77:24:71
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       24E6B100EE0B34B7052CF6F8309913F9B5629166
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38302e302f32302d3234203d3e2032373136.roa
Signing time:             Fri 26 Nov 2021 12:42:07 +0000
ROA not before:           Fri 26 Nov 2021 12:37:07 +0000
ROA not after:            Fri 25 Nov 2022 12:42:07 +0000
asID:                     2716
IP address blocks:        200.17.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e6:b1:00:ee:0b:34:b7:05:2c:f6:f8:30:99:13:f9:b5:62:91:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Nov 26 12:37:07 2021 GMT
            Not After : Nov 25 12:42:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f8:d3:02:40:25:66:57:12:82:da:75:07:2b:
                    90:63:10:c6:bd:72:38:2d:9b:e1:36:24:a9:2f:85:
                    21:26:3c:87:22:5e:4c:73:b2:c1:97:d8:c1:77:7d:
                    d5:21:28:0d:c3:03:79:10:b5:0c:f9:5d:f9:09:1d:
                    cb:0f:c5:c1:4f:28:fd:49:4e:33:34:65:13:fd:f5:
                    09:33:ed:2b:03:f9:d5:43:50:47:02:96:49:99:69:
                    c7:63:89:9b:47:18:5e:e0:fc:f0:6b:bc:19:9e:36:
                    2e:23:81:a4:c6:25:55:03:8b:25:74:ae:e4:a0:0f:
                    e7:a8:a7:ae:7b:67:44:50:22:49:1e:29:ec:7f:f5:
                    f2:05:da:fb:0c:4f:44:51:55:ea:3e:ce:e0:c2:1a:
                    b6:b3:60:51:79:d3:e0:44:9b:4f:19:55:cc:e4:33:
                    b8:a7:1e:2d:fe:23:54:7a:7f:28:cb:f8:ea:80:4f:
                    8e:a6:37:69:93:4e:90:10:86:51:c1:b6:89:94:6a:
                    5b:d9:2d:9c:5e:10:99:5d:67:a0:61:de:cb:78:37:
                    8e:96:75:60:05:ed:87:da:33:cf:00:c4:05:b0:2e:
                    c9:a2:ae:ac:6a:bb:c6:67:c5:72:66:7f:a3:a1:ac:
                    d6:f1:3f:37:59:93:50:69:7a:e5:51:0d:73:36:6a:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:69:47:5C:31:B3:EB:86:2A:37:DB:2C:D7:60:3B:D0:E2:77:24:71
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38302e302f32302d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:66:86:81:70:13:14:b3:19:0e:56:1c:05:04:62:0e:be:
         78:08:5c:dd:c6:21:bf:9a:22:2a:45:21:aa:ca:5e:52:c4:9a:
         be:ae:57:0e:e4:d2:26:14:1c:9b:86:3e:da:e4:fa:6f:45:37:
         00:42:74:d5:5d:a0:7d:55:0d:62:3e:a2:df:96:e9:62:43:0c:
         7f:92:0d:14:94:8f:ac:7b:88:3e:31:54:c5:0e:bc:1e:93:7f:
         9f:51:5e:51:72:f1:60:f3:52:a5:22:c4:c5:be:64:84:fe:f5:
         7b:67:8a:76:07:9d:26:ba:1a:5c:0c:30:6f:2c:24:9e:d1:4b:
         39:bb:64:ea:ef:93:79:55:3c:1b:4d:b9:d0:64:5d:ee:0c:32:
         c7:ea:58:00:78:b2:ac:9b:b3:b5:f6:e3:a7:f3:b5:09:33:9c:
         86:ef:d1:3b:57:44:85:6f:f7:6f:5b:18:94:ab:a8:0f:98:5e:
         27:81:1b:0d:7f:ed:eb:99:a6:4b:c7:49:da:73:9e:3d:c8:f7:
         a5:35:c8:29:41:39:c5:39:62:dc:48:d5:63:69:1d:49:04:a4:
         bc:1c:36:bf:81:8f:22:00:7f:f5:90:5d:8d:e6:c0:67:8f:a4:
         ad:8b:05:32:dc:a5:7c:74:ec:fb:3b:67:65:fc:00:60:ab:41:
         c9:e1:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org