Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/3230302e3231392e32362e302f32342d3234203d3e20323730383132.roa
File:                     3230302e3231392e32362e302f32342d3234203d3e20323730383132.roa (raw, json)
Hash identifier:          tlyLlfpd4ueYEv0TOB7svHh3CdPtsSfsm0oQWXXoyPs=
Subject key identifier:   D8:D4:42:CE:44:CF:3A:0B:DB:D2:93:5C:5D:B8:85:FE:7E:FA:AF:65
Certificate issuer:       /CN=560605179B30D49AEA47E96B1FE2EA49771A2340
Certificate serial:       73F1B37A74945A0F927DE9B389A4688FA834AFA5
Authority key identifier: 56:06:05:17:9B:30:D4:9A:EA:47:E9:6B:1F:E2:EA:49:77:1A:23:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/560605179B30D49AEA47E96B1FE2EA49771A2340.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/3230302e3231392e32362e302f32342d3234203d3e20323730383132.roa
Signing time:             Mon 20 Feb 2023 14:48:45 +0000
ROA not before:           Mon 20 Feb 2023 14:43:45 +0000
ROA not after:            Mon 19 Feb 2024 14:48:45 +0000
asID:                     270812
IP address blocks:        200.219.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f1:b3:7a:74:94:5a:0f:92:7d:e9:b3:89:a4:68:8f:a8:34:af:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560605179B30D49AEA47E96B1FE2EA49771A2340
        Validity
            Not Before: Feb 20 14:43:45 2023 GMT
            Not After : Feb 19 14:48:45 2024 GMT
        Subject: CN=D8D442CE44CF3A0BDBD2935C5DB885FE7EFAAF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:e8:fa:db:a3:aa:29:3c:94:ca:00:be:bf:
                    46:4f:46:2d:e0:8d:74:5c:11:90:7e:8c:d4:26:6e:
                    35:d6:92:7a:1a:07:69:d8:b6:cd:93:b7:97:46:a0:
                    59:f1:29:9a:b6:5d:f1:2a:82:cc:ea:c5:50:32:f0:
                    2a:8c:90:99:89:21:78:c7:22:a8:3b:dc:71:b2:5d:
                    78:8e:7d:73:ba:ef:1f:e3:b4:c8:4a:a7:8c:5e:89:
                    61:fc:8a:1c:9c:28:33:d1:54:02:05:db:72:89:af:
                    f9:fa:4a:e3:9f:6f:ef:fd:ae:30:79:cd:de:6f:18:
                    a2:dd:0e:35:83:2a:8b:67:b7:09:d9:6a:0f:80:07:
                    e9:fd:57:e7:1c:9b:50:05:50:44:40:13:c6:ff:bc:
                    55:28:7c:5c:71:bd:af:78:b9:dc:d7:87:d7:a1:cf:
                    52:50:4a:ec:d6:71:75:49:9d:88:b3:2e:23:a6:23:
                    59:11:ca:6a:c4:01:49:f2:0f:63:12:86:4c:8c:8e:
                    b9:54:ae:3d:23:59:7c:02:e8:93:2a:11:da:d4:57:
                    e7:96:81:12:8b:a9:f4:7e:2e:b2:ef:0d:ed:8c:71:
                    a6:de:f6:ff:a9:e5:23:a1:5c:67:98:21:18:f0:f3:
                    1b:d7:97:31:d9:f0:d4:58:2e:7e:51:6c:17:ee:48:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D4:42:CE:44:CF:3A:0B:DB:D2:93:5C:5D:B8:85:FE:7E:FA:AF:65
            X509v3 Authority Key Identifier:
                keyid:56:06:05:17:9B:30:D4:9A:EA:47:E9:6B:1F:E2:EA:49:77:1A:23:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/560605179B30D49AEA47E96B1FE2EA49771A2340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/560605179B30D49AEA47E96B1FE2EA49771A2340.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/3230302e3231392e32362e302f32342d3234203d3e20323730383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d9:8a:c7:41:c6:97:67:ed:ef:31:af:1b:fd:d3:ea:1e:24:
         6b:19:35:d2:4e:1c:11:b4:20:30:d7:50:1d:b9:f2:de:e5:61:
         84:a1:1c:2f:84:fe:0f:0b:f4:36:77:3b:ad:95:41:52:64:96:
         e1:12:87:fa:06:c9:3b:44:ae:a4:56:41:1f:e7:14:06:6f:67:
         ed:79:b5:70:db:d6:ca:d0:f8:59:3e:0b:5f:7a:4d:bd:94:42:
         48:62:24:ef:27:04:d8:15:dc:e0:29:01:39:4d:75:d5:83:e5:
         f3:b9:05:6b:c1:a1:d3:54:8c:c2:44:48:29:2a:84:19:51:29:
         48:a2:ca:d7:1b:de:56:ae:5f:85:7f:16:49:51:91:b3:9f:96:
         f3:31:01:a6:53:d8:81:c7:bf:cd:77:66:67:1d:b0:e3:b9:67:
         12:63:a8:d8:95:46:ad:a3:42:34:18:ed:b8:2a:0e:00:a9:95:
         d4:1c:da:61:96:b2:de:5b:81:c3:a7:18:f4:48:d4:57:cc:53:
         75:d7:de:6e:6a:ff:63:8b:83:57:45:7c:b2:b9:7f:8a:06:ae:
         0b:4e:81:8a:09:08:ec:bc:4e:f6:7f:c3:a2:47:07:bb:53:8e:
         26:94:f3:98:d4:c6:23:f4:71:89:2f:1f:61:90:f5:6b:d6:ba:
         3f:15:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org