Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32322d3232203d3e20323636323136.roa
File:                     3230302e37312e37322e302f32322d3232203d3e20323636323136.roa (raw, json)
Hash identifier:          nQAcIUPOvQrRL0SJikoN+A1wiS2vk3xcpIi3XJ3shZM=
Subject key identifier:   BC:82:E0:54:0E:09:66:C8:48:22:1C:43:1D:A0:D4:70:42:72:E2:85
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       354CA1B54C25722820C9908F733448765C6E63A8
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32322d3232203d3e20323636323136.roa
Signing time:             Fri 17 Mar 2023 18:43:30 +0000
ROA not before:           Fri 17 Mar 2023 18:38:30 +0000
ROA not after:            Fri 15 Mar 2024 18:43:30 +0000
asID:                     266216
IP address blocks:        200.71.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4c:a1:b5:4c:25:72:28:20:c9:90:8f:73:34:48:76:5c:6e:63:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Mar 17 18:38:30 2023 GMT
            Not After : Mar 15 18:43:30 2024 GMT
        Subject: CN=BC82E0540E0966C848221C431DA0D4704272E285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:29:50:82:12:9a:bc:e1:94:a6:7f:25:c3:
                    19:ae:e8:6c:ff:25:6e:53:b7:7a:84:e1:9b:8a:b8:
                    f9:32:02:21:1c:45:68:1b:0c:2e:67:69:a0:8c:bc:
                    bf:c4:aa:63:bf:80:58:50:b1:42:05:bb:61:dc:97:
                    a4:15:8c:16:b6:12:5c:52:55:92:d9:88:be:1c:b2:
                    89:b5:68:8d:44:85:22:61:c9:4f:e8:26:fe:bb:6f:
                    1e:75:b6:fd:4e:87:05:9c:8e:18:f3:20:a7:a3:b5:
                    6e:33:84:ae:b5:68:ad:74:49:c4:f7:21:af:22:e8:
                    26:44:9e:b7:6a:aa:ab:48:48:a3:95:3d:fe:b3:a3:
                    78:6a:a2:7f:0f:da:b5:ba:08:09:7b:b5:76:cd:b5:
                    ee:55:75:9e:77:35:6b:71:22:c9:d5:b0:0d:07:81:
                    41:45:59:47:d7:81:f2:1e:1e:b4:74:fe:49:93:04:
                    55:e7:5c:9e:df:cc:49:ad:7e:aa:da:8c:56:38:75:
                    36:63:a3:95:4c:0c:43:9d:2e:0e:28:c6:fe:6a:5f:
                    ec:19:91:69:cc:7d:c8:cb:af:e9:72:d2:46:42:51:
                    0d:76:9c:83:ec:3b:4f:04:4b:f7:15:fb:04:fe:8b:
                    10:72:94:ce:1c:24:6e:3e:f7:6b:b6:51:25:02:ea:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:82:E0:54:0E:09:66:C8:48:22:1C:43:1D:A0:D4:70:42:72:E2:85
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32322d3232203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:60:2e:5d:ee:e1:56:3f:9e:f6:4c:fd:e0:f7:7c:d2:0e:
         23:77:9e:4c:aa:d1:2e:bf:41:b8:c5:af:c2:68:c3:dd:39:17:
         f0:91:41:7c:a9:5a:d8:48:ee:5e:82:6f:a8:a9:47:2f:05:59:
         f9:8c:49:7a:dc:e9:67:56:5b:cd:bc:12:95:48:9a:e5:18:2c:
         0a:ba:37:db:4c:dc:a1:17:5a:92:53:7f:6e:1c:62:23:b1:f0:
         cc:8c:f8:28:00:6f:ba:a9:a7:5a:0a:79:26:44:97:0b:b5:07:
         69:59:3c:c3:5f:72:26:9e:57:50:8c:1d:4e:1b:a4:d9:3f:e4:
         a5:e4:c9:91:1f:24:9e:60:f9:11:dd:90:a3:30:0b:06:29:ea:
         90:0d:0c:3a:0b:b8:49:fe:28:59:48:86:6e:66:fe:58:e1:1c:
         d9:97:0b:a0:5c:c1:22:9f:b7:48:2c:bc:6d:74:25:ae:c6:f0:
         8a:28:19:bd:dd:b2:88:1c:e1:c4:9e:fb:b6:23:55:10:a6:e7:
         48:ce:2e:8c:81:d8:18:7a:c0:01:98:3b:cc:68:7a:a3:c8:9a:
         44:e2:b0:c4:03:8f:f0:cd:19:83:cd:fe:e3:96:39:9b:12:4d:
         80:aa:fa:02:3d:8a:09:62:08:a9:e9:d0:c8:ca:82:8a:c9:3c:
         2f:ee:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org