Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/3230302e3231392e32342e302f32332d3233203d3e20323730383132.roa
File:                     3230302e3231392e32342e302f32332d3233203d3e20323730383132.roa (raw, json)
Hash identifier:          qjNsuNe2qzif20z3hWLCqtLrQ6s65EqLmO8+9oAHxNc=
Subject key identifier:   A9:64:AF:26:6A:F4:61:87:45:BB:F2:62:43:4A:70:5B:22:BB:60:8B
Certificate issuer:       /CN=560605179B30D49AEA47E96B1FE2EA49771A2340
Certificate serial:       1716AF5CAE820FAC13BBF3CC849DBC574A846D64
Authority key identifier: 56:06:05:17:9B:30:D4:9A:EA:47:E9:6B:1F:E2:EA:49:77:1A:23:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/560605179B30D49AEA47E96B1FE2EA49771A2340.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/3230302e3231392e32342e302f32332d3233203d3e20323730383132.roa
Signing time:             Tue 21 Feb 2023 22:45:26 +0000
ROA not before:           Tue 21 Feb 2023 22:40:26 +0000
ROA not after:            Tue 20 Feb 2024 22:45:26 +0000
asID:                     270812
IP address blocks:        200.219.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:16:af:5c:ae:82:0f:ac:13:bb:f3:cc:84:9d:bc:57:4a:84:6d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560605179B30D49AEA47E96B1FE2EA49771A2340
        Validity
            Not Before: Feb 21 22:40:26 2023 GMT
            Not After : Feb 20 22:45:26 2024 GMT
        Subject: CN=A964AF266AF4618745BBF262434A705B22BB608B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:ad:fd:e6:fc:44:f2:4d:76:9f:9f:56:41:
                    67:95:da:9d:b8:7a:46:09:8b:8e:fe:8f:65:2f:6b:
                    12:c9:6b:89:27:28:29:7c:e1:8e:94:13:0d:9c:d3:
                    ec:ff:ff:5f:33:c0:b2:0a:a2:bf:a6:b2:81:df:e7:
                    9e:8e:cf:44:39:05:6c:a3:45:c4:07:f8:38:c7:29:
                    ed:fd:c4:e2:b1:3f:ff:2c:66:72:76:2c:a9:b7:88:
                    8e:42:63:f0:b6:b8:a6:f9:01:ee:f3:cc:3a:39:ee:
                    7a:3e:64:36:f8:b9:66:6f:66:41:ee:e9:27:e1:50:
                    82:50:59:ba:b9:02:23:c5:c9:54:02:29:c3:bb:29:
                    f9:44:ea:2e:d8:a2:30:05:36:0d:45:11:24:3b:a3:
                    c2:d4:90:a9:87:9f:67:40:aa:f0:4a:4d:b4:6b:39:
                    84:4d:ab:20:d6:ff:f9:97:1b:92:7c:b5:46:e1:2c:
                    bb:fa:5c:38:97:46:4b:a6:dc:97:a7:18:6c:1c:75:
                    99:74:5b:dd:3a:92:07:09:f3:46:b7:8a:b8:1b:f9:
                    60:76:16:fe:e4:2d:87:90:7a:b0:21:60:0b:e3:a4:
                    bd:63:30:3f:c7:38:15:8d:bf:4f:e5:b5:fa:3b:9a:
                    31:2e:06:05:aa:15:e5:73:b1:91:e5:10:40:0c:0f:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:64:AF:26:6A:F4:61:87:45:BB:F2:62:43:4A:70:5B:22:BB:60:8B
            X509v3 Authority Key Identifier:
                keyid:56:06:05:17:9B:30:D4:9A:EA:47:E9:6B:1F:E2:EA:49:77:1A:23:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/560605179B30D49AEA47E96B1FE2EA49771A2340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/560605179B30D49AEA47E96B1FE2EA49771A2340.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/3230302e3231392e32342e302f32332d3233203d3e20323730383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:b8:4b:e1:42:ae:6f:86:a3:cb:fb:fa:65:20:cc:90:06:
         5c:9b:13:96:a7:f7:ae:00:9f:02:60:df:16:4a:f8:7d:50:11:
         57:44:0f:bc:af:8a:44:9a:34:8f:00:15:c0:8f:1e:11:f3:e5:
         01:0c:6c:47:85:2b:79:1b:aa:1d:e3:47:b8:6f:0c:a3:c5:29:
         af:ed:ce:8a:f6:65:cc:98:3e:71:69:b5:4f:b0:36:b8:db:11:
         04:a6:0e:12:e7:7a:4c:5a:b1:ec:ab:2f:73:a0:31:97:aa:24:
         1c:e3:1a:63:dd:f6:22:ab:13:e5:f8:1b:20:c8:62:4a:cf:32:
         29:e3:9c:cc:03:e6:99:f6:1c:65:63:a2:d7:87:ae:10:ba:68:
         ac:b1:55:6a:89:a9:cb:2f:42:4f:4b:b7:0f:b2:2a:91:2c:8e:
         d8:5a:47:86:41:a4:19:58:58:a7:bd:28:b5:cd:9f:be:e2:55:
         81:8b:63:cb:e1:8e:a8:f2:dd:b8:18:07:a0:7a:09:69:3e:9d:
         ae:85:e6:0c:05:0a:c2:34:1f:53:87:7e:ba:af:2f:78:88:84:
         95:e6:f9:04:35:95:98:44:0d:e1:92:34:b6:52:23:c2:07:98:
         fb:1e:f9:b2:70:b8:0b:53:b1:0e:8c:03:96:47:61:cd:74:55:
         f6:9d:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org