Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa
File:                     3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          O3MDWYxfVbLIOJJDUV2JMy9BYnHm9R3bY0ElbwmSR38=
Subject key identifier:   BB:5A:80:65:05:1B:47:13:E1:CB:F7:02:6B:74:46:24:9D:B3:C1:20
Certificate issuer:       /CN=8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D
Certificate serial:       12B67C90DB2766B813F2FCC520D737F5C060CCCB
Authority key identifier: 8E:6E:B0:E2:DE:E0:B2:77:EC:86:0C:DA:EA:FE:64:32:83:2A:86:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa
Signing time:             Tue 28 Nov 2023 18:36:25 +0000
ROA not before:           Tue 28 Nov 2023 18:31:25 +0000
ROA not after:            Tue 26 Nov 2024 18:36:25 +0000
asID:                     396982
IP address blocks:        200.196.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b6:7c:90:db:27:66:b8:13:f2:fc:c5:20:d7:37:f5:c0:60:cc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D
        Validity
            Not Before: Nov 28 18:31:25 2023 GMT
            Not After : Nov 26 18:36:25 2024 GMT
        Subject: CN=BB5A8065051B4713E1CBF7026B7446249DB3C120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:52:49:ad:cb:d2:05:6c:a4:c6:94:3a:f1:0b:
                    7e:8d:71:9d:a2:81:19:3d:cb:0a:ee:a7:86:91:97:
                    01:1c:ac:00:b6:f9:7c:e6:45:8f:e1:65:e6:e1:f3:
                    7a:d7:78:34:75:0a:a2:e9:2e:60:97:2a:da:e6:f8:
                    63:49:22:98:62:55:7a:44:ab:18:b4:be:40:76:33:
                    c0:9f:42:c9:02:62:44:71:e7:42:e8:4b:0e:ac:ea:
                    ca:57:d0:48:79:a8:50:9e:6d:c2:e0:94:e3:b9:2b:
                    3b:45:24:ca:b4:b4:b4:3e:38:38:b9:30:19:a6:d9:
                    3f:e4:9f:1a:11:a4:25:7d:de:3a:75:46:2b:82:81:
                    cc:3b:56:89:28:d0:65:87:3d:5d:68:21:2a:ed:4c:
                    0d:05:33:ca:0e:02:7c:96:aa:72:e0:5f:a7:2a:bc:
                    7b:82:e3:c2:8e:27:05:c2:e6:3d:b5:49:01:78:f9:
                    de:ac:d0:30:8b:8e:a9:d1:db:7e:a5:3d:ac:88:10:
                    79:58:9d:55:7e:a9:7a:02:9c:23:c5:22:7f:12:09:
                    f1:78:29:02:b3:98:57:29:c6:f2:39:63:f6:20:89:
                    e8:bf:e4:9d:4a:e8:9c:98:96:30:24:a5:74:db:98:
                    24:7b:f4:9d:99:f8:79:fb:6d:a6:ea:d5:e7:ec:26:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5A:80:65:05:1B:47:13:E1:CB:F7:02:6B:74:46:24:9D:B3:C1:20
            X509v3 Authority Key Identifier:
                keyid:8E:6E:B0:E2:DE:E0:B2:77:EC:86:0C:DA:EA:FE:64:32:83:2A:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:7d:6a:ce:91:f6:d2:c8:3f:0b:e2:d4:21:fa:fc:9d:fd:
         59:32:2f:a5:be:2d:8c:2a:23:ac:bc:4a:5c:01:b7:bf:87:f3:
         09:0b:41:bf:1d:72:5b:4b:a0:60:d6:53:30:a3:22:f7:40:39:
         4f:dd:b7:9b:cc:00:be:a7:dc:de:3f:3f:b1:80:ae:79:92:af:
         ec:51:6f:42:a2:b9:83:77:49:0d:76:b9:07:0a:f5:49:36:c1:
         04:e9:c2:63:7c:6c:4c:b8:ea:c9:51:de:02:4b:c4:f2:c9:81:
         24:2a:6f:04:00:12:73:c2:3a:10:ba:a9:39:fb:c2:fc:39:5a:
         1b:8a:24:ee:a3:65:79:1d:ef:2d:45:63:dc:f4:2a:e0:23:87:
         1e:e2:2c:ca:0d:b7:61:27:03:b8:c4:69:40:86:bc:8c:de:7e:
         5e:d5:10:12:0b:f9:6a:15:70:e7:9f:d2:c6:21:21:02:67:94:
         f3:fb:17:a5:d7:d6:19:72:53:ff:ce:d2:b6:2f:f6:71:13:96:
         7d:9c:26:b8:6d:1f:e6:2b:1c:1a:cd:05:e8:14:eb:a5:04:80:
         a7:60:63:6f:3d:b9:4e:9b:ed:ad:bf:fc:a5:72:7a:ea:bf:8d:
         0f:f7:2d:03:57:ac:eb:c6:9f:36:38:5e:85:66:34:f6:46:73:
         bf:71:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org