Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31392e302e302f32312d3231203d3e2032373136.roa
File:                     3230302e31392e302e302f32312d3231203d3e2032373136.roa (raw, json)
Hash identifier:          C7aiDOVBBJGbbscCOG8xgcJ6PQwQmijR7kqXAzUifuE=
Subject key identifier:   F9:FC:68:4F:17:C4:FF:A1:5B:7F:AB:D2:08:9B:74:7B:2C:40:8E:6D
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       775F73A0AC07EECF33457300EE2881C940C669A8
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31392e302e302f32312d3231203d3e2032373136.roa
Signing time:             Fri 07 Jul 2023 15:00:01 +0000
ROA not before:           Fri 07 Jul 2023 14:55:01 +0000
ROA not after:            Fri 05 Jul 2024 15:00:01 +0000
asID:                     2716
IP address blocks:        200.19.0.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5f:73:a0:ac:07:ee:cf:33:45:73:00:ee:28:81:c9:40:c6:69:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul  7 14:55:01 2023 GMT
            Not After : Jul  5 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:e1:35:ef:25:fb:fc:d9:53:ad:8f:c4:79:
                    fd:d6:49:ef:00:1e:3a:c4:42:fe:15:b5:fd:61:28:
                    4e:aa:3a:33:10:a0:07:d5:df:e0:47:96:be:3f:2f:
                    35:35:57:52:61:32:af:02:ff:de:20:7d:f1:c9:45:
                    f9:f7:a4:2c:f9:fa:f1:f3:57:5d:0c:88:20:6c:2e:
                    f5:68:e4:b5:de:f6:5c:f1:17:f1:cd:de:b2:93:d2:
                    8c:6c:1a:ee:d4:85:76:f7:a5:2e:5b:83:39:8b:aa:
                    60:6c:61:e3:2e:a0:82:ce:ac:f6:df:db:43:55:d9:
                    06:46:d0:4e:96:33:d3:b6:3a:ee:ac:c3:b1:0a:f7:
                    cb:b3:6b:c7:2d:bf:e4:b7:1a:c7:f3:2a:de:52:3b:
                    6c:73:66:89:d9:55:c7:8e:23:16:5d:e9:0a:cd:0e:
                    36:5e:30:0e:7b:dc:47:99:af:2d:12:b4:33:64:87:
                    46:28:da:e4:55:c2:bf:b5:6b:bc:8d:e1:71:a9:0d:
                    8b:e5:6f:ac:5e:bb:11:3b:01:75:08:c0:c3:fe:6b:
                    ca:04:c2:aa:b2:a7:de:16:5e:95:ac:b1:ee:ea:b3:
                    28:e0:f9:cd:99:64:8b:95:35:ff:7f:07:4c:65:2a:
                    d2:c8:6f:c8:23:51:9a:7c:ca:a4:fa:a2:a7:74:72:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FC:68:4F:17:C4:FF:A1:5B:7F:AB:D2:08:9B:74:7B:2C:40:8E:6D
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31392e302e302f32312d3231203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:5a:ba:02:62:d4:0f:09:7c:53:b7:a8:70:aa:a4:67:d8:44:
         fe:a5:9d:13:96:16:8e:71:20:f9:55:f3:30:b4:d5:7d:d1:88:
         a5:55:34:67:69:32:13:27:ae:6f:fd:4b:c9:7a:d7:c8:01:de:
         29:27:bd:2c:a4:c2:bd:ab:9b:3c:2b:33:79:f9:03:3f:e3:62:
         1d:e9:28:e9:71:ff:a7:41:b9:0b:55:95:72:11:88:ff:dc:76:
         bd:f0:55:93:45:ed:17:38:16:29:d3:f4:6a:6f:e3:50:83:c1:
         d3:37:7e:6d:9f:58:96:8d:7e:66:5f:45:24:c6:cb:da:d8:08:
         7f:10:f1:56:e9:79:db:6a:bd:6a:c3:d8:e2:f7:89:2d:d8:5b:
         58:f4:22:6a:99:4a:d9:7f:53:5b:39:cf:39:11:c9:25:f0:44:
         4a:ef:56:45:fc:4a:d5:c4:b6:66:46:f9:dc:e3:ff:e2:94:a0:
         7e:cc:6f:f3:8a:bc:e4:c8:a9:71:8e:03:03:51:4e:ee:08:c1:
         21:c7:f2:e9:ea:ba:19:5f:30:c6:86:ee:d2:76:d3:a1:81:2f:
         ef:ec:1c:22:00:64:eb:81:d4:a7:26:eb:51:41:05:b4:da:47:
         92:61:c3:2a:87:c3:33:6f:32:36:99:b8:a3:41:4c:a1:53:da:
         3e:7f:5a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org