Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa
File:                     3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          mnO7Rcak7Ee1tK2lHhIhmbWR6BF8+5ELzyZtfeRxcC4=
Subject key identifier:   C2:07:4D:F0:96:04:EE:7A:EB:3B:FB:FA:92:7D:AD:E6:A1:C4:E2:5A
Certificate issuer:       /CN=8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D
Certificate serial:       45427C775FBCF72F43984340EE52CD8177443587
Authority key identifier: 8E:6E:B0:E2:DE:E0:B2:77:EC:86:0C:DA:EA:FE:64:32:83:2A:86:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa
Signing time:             Tue 28 Nov 2023 18:36:25 +0000
ROA not before:           Tue 28 Nov 2023 18:31:25 +0000
ROA not after:            Tue 26 Nov 2024 18:36:25 +0000
asID:                     396982
IP address blocks:        200.196.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:42:7c:77:5f:bc:f7:2f:43:98:43:40:ee:52:cd:81:77:44:35:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D
        Validity
            Not Before: Nov 28 18:31:25 2023 GMT
            Not After : Nov 26 18:36:25 2024 GMT
        Subject: CN=C2074DF09604EE7AEB3BFBFA927DADE6A1C4E25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:57:df:82:6c:e7:e7:77:a8:86:fa:a1:40:
                    e6:8b:24:4c:20:e0:ec:ac:e9:2d:5f:79:5c:bb:8f:
                    e3:0b:92:39:4d:2a:53:f9:dd:8e:38:c8:5e:70:10:
                    10:06:46:8e:93:a4:ff:22:cc:98:eb:28:b4:2c:a2:
                    0e:be:c6:30:61:d7:ee:81:0e:7b:c9:c2:b1:54:a8:
                    0a:b4:0f:49:b8:65:06:a5:b6:1c:6c:69:36:fa:b3:
                    7f:f8:29:95:3c:9a:e7:25:6d:1f:5e:5e:14:5d:23:
                    09:8c:18:70:28:31:d7:70:1d:cf:be:b8:62:05:91:
                    3d:20:16:78:8f:54:47:47:00:0b:4f:8b:e1:10:57:
                    49:76:df:38:2d:67:d5:46:e7:c0:af:64:eb:f3:c7:
                    8f:5b:31:f6:e5:7a:08:ec:36:bc:88:7d:e0:8e:dc:
                    d2:87:ae:6c:77:fa:b8:b4:8e:76:aa:c2:32:8a:e5:
                    87:38:98:75:f8:36:3e:9c:5c:e9:b7:e0:41:20:68:
                    c8:de:9e:77:e4:8d:f4:bb:8f:76:fa:dc:da:f7:92:
                    38:24:dd:fe:e3:db:a1:ed:5b:84:41:4f:fa:f3:7b:
                    87:a5:70:3e:e3:95:bd:ce:7a:1f:65:55:c7:38:03:
                    36:d9:1e:83:2f:e2:4f:15:0e:b8:41:d4:6c:09:7e:
                    7c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:07:4D:F0:96:04:EE:7A:EB:3B:FB:FA:92:7D:AD:E6:A1:C4:E2:5A
            X509v3 Authority Key Identifier:
                keyid:8E:6E:B0:E2:DE:E0:B2:77:EC:86:0C:DA:EA:FE:64:32:83:2A:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:c7:df:da:b2:ca:dd:9b:32:e9:bd:fc:50:6b:e5:40:59:
         7c:c9:99:97:9e:bf:9b:0e:57:6f:ab:c7:d5:35:c1:5f:d5:e1:
         f9:19:e8:5e:ec:3b:bc:e0:0d:7b:f1:4d:6d:4a:85:b5:9c:ee:
         3f:34:e1:67:b4:71:45:26:4f:26:70:68:3c:6d:07:89:39:9f:
         f1:dd:d3:2a:86:26:50:38:13:88:27:6c:5c:26:7d:f6:2d:39:
         4d:bd:11:9d:42:ce:47:c7:c9:5a:d4:bb:80:e7:ca:27:ae:d5:
         5d:20:24:a1:08:b7:23:ac:11:0b:5c:0c:be:e0:48:11:65:c1:
         25:d7:f1:02:93:15:ae:4a:a9:ba:aa:34:e2:0a:fb:1e:99:58:
         3b:1b:8f:e0:46:dc:66:17:c4:5f:00:5a:b0:f8:4e:54:fb:6e:
         6c:82:e5:dd:87:d5:a5:49:a4:06:ec:99:d8:3e:03:b0:2a:37:
         55:cf:62:3b:bc:56:7a:20:37:90:3a:9b:2f:ab:3e:aa:1f:53:
         1f:82:be:4e:fd:2f:58:f0:1b:e4:94:a2:60:11:d7:d3:04:3c:
         af:a2:08:eb:93:9a:43:7a:e9:bb:5a:e1:98:31:a5:2d:a8:2b:
         80:fc:e8:a7:d8:10:14:c0:e7:54:73:42:f5:57:fb:eb:4c:32:
         23:1c:53:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org