Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa
File:                     3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          +8Qh3pKctAIDGncbayXXFAJOzp9uQVbDQba9WpnEsJQ=
Subject key identifier:   56:6B:C1:94:8D:02:04:FC:53:44:D8:8D:FD:01:C3:4B:7D:8C:A0:85
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       563AFAF5B7F0631BECDB7D9492E80D1BFF836BD6
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa
Signing time:             Wed 21 Dec 2022 17:16:47 +0000
ROA not before:           Wed 21 Dec 2022 17:11:47 +0000
ROA not after:            Wed 20 Dec 2023 17:16:47 +0000
asID:                     262688
IP address blocks:        200.229.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3a:fa:f5:b7:f0:63:1b:ec:db:7d:94:92:e8:0d:1b:ff:83:6b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:47 2022 GMT
            Not After : Dec 20 17:16:47 2023 GMT
        Subject: CN=566BC1948D0204FC5344D88DFD01C34B7D8CA085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:35:66:2e:ff:5d:89:7f:2f:c7:90:ce:9a:
                    8c:2c:b4:ad:98:08:c3:8f:74:6e:44:81:81:99:be:
                    d3:58:38:23:ed:d8:d0:64:e2:98:08:98:82:8d:bf:
                    0e:7d:0a:5e:0f:78:b4:a8:cb:db:ec:55:a2:d7:a3:
                    75:a5:a9:75:b6:f5:7d:f7:e2:8e:41:ac:1b:b9:ce:
                    bc:93:d8:84:27:f6:06:77:70:dd:e5:bc:0b:24:42:
                    81:f3:b9:3a:00:4b:57:ac:16:78:c2:d4:a3:44:a6:
                    85:f5:63:82:43:c0:fc:5a:a4:07:8e:ea:55:26:fe:
                    b6:39:95:2f:d9:2b:dc:47:48:68:0b:4b:47:97:6d:
                    82:ab:4b:ef:9e:b6:88:4f:54:97:6f:25:00:28:4f:
                    d7:83:c3:b3:27:8b:18:1d:6b:89:c4:26:f4:8e:c2:
                    ef:30:24:36:8b:e8:5a:25:80:0b:0b:b1:e5:4d:72:
                    9f:3f:4b:f9:2b:02:0e:d2:cf:60:ed:02:a2:a0:18:
                    e1:39:d5:a9:29:83:eb:6b:ec:14:21:3b:c4:02:41:
                    3a:89:c7:02:26:97:f0:d7:6d:fd:d2:a8:72:4e:17:
                    1f:2a:62:ef:b4:9a:9b:85:1a:a3:40:70:6c:e4:17:
                    f7:c5:d2:4e:69:65:c0:a7:54:68:65:40:86:3d:5c:
                    dd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6B:C1:94:8D:02:04:FC:53:44:D8:8D:FD:01:C3:4B:7D:8C:A0:85
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:a3:81:95:61:4b:d1:91:d1:c7:20:38:f3:8f:43:ba:ec:27:
         d4:e2:ce:f7:e2:02:78:f8:d4:38:91:3e:97:63:81:8b:1d:8a:
         65:a6:f0:03:8b:43:db:cc:a9:c8:22:d4:3f:26:e7:8c:ad:d0:
         e6:95:4a:91:b8:33:c7:83:e0:f2:a4:49:97:9d:f7:3e:86:b9:
         5e:a9:8c:28:44:1a:bd:47:21:b7:55:5e:91:69:8d:ee:e0:e5:
         ca:d8:2f:9e:f6:22:42:10:25:79:12:9a:f9:db:61:e4:4c:fc:
         0b:49:15:26:4e:91:de:38:a9:16:51:f5:81:7f:1b:2a:3c:be:
         59:cb:d6:20:2f:1f:3f:0b:d3:c6:00:1a:73:7c:c2:bf:bf:2d:
         11:1b:ee:81:a3:83:05:39:29:48:9a:a5:e0:d4:0b:83:5d:2e:
         d3:40:1a:23:9c:47:f5:f0:a8:72:6a:12:ce:13:71:02:52:14:
         dc:ba:3e:31:26:19:1b:10:01:b1:01:e4:7d:97:e7:36:1a:18:
         74:93:fa:a0:e4:55:ef:19:56:79:a1:4f:ae:34:a9:a1:ec:f8:
         7f:63:7b:00:6b:69:5e:4c:06:95:ad:54:76:28:a4:a9:b4:a2:
         1f:35:52:6a:6f:b0:23:f0:a1:49:5d:94:c5:a4:11:df:dc:a1:
         2b:c6:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org