Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37332e302f32342d3234203d3e20323636323136.roa
File:                     3230302e37312e37332e302f32342d3234203d3e20323636323136.roa (raw, json)
Hash identifier:          hiUzV3Y2jCDSC0DJIjgNK9V58EK5K32kboCLFMgLupg=
Subject key identifier:   56:72:D7:6F:0A:0A:1A:56:7A:9C:6A:73:2B:70:5C:EA:2A:07:87:5D
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       5B4469DC8250371F328A648DF192F4DC4321710D
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37332e302f32342d3234203d3e20323636323136.roa
Signing time:             Fri 17 Mar 2023 18:43:29 +0000
ROA not before:           Fri 17 Mar 2023 18:38:29 +0000
ROA not after:            Fri 15 Mar 2024 18:43:29 +0000
asID:                     266216
IP address blocks:        200.71.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:44:69:dc:82:50:37:1f:32:8a:64:8d:f1:92:f4:dc:43:21:71:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Mar 17 18:38:29 2023 GMT
            Not After : Mar 15 18:43:29 2024 GMT
        Subject: CN=5672D76F0A0A1A567A9C6A732B705CEA2A07875D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:e0:f6:62:66:ad:ad:1c:b1:0f:0e:04:eb:
                    59:ac:9d:b8:df:bc:4b:1e:f8:40:73:48:e0:fd:68:
                    7a:a0:d2:e5:3b:00:fe:b1:d0:e0:c8:7c:19:93:ad:
                    79:ab:78:6d:62:32:3d:f9:98:97:66:dd:85:4c:4a:
                    85:a2:3a:ff:ad:6f:be:eb:d3:3f:49:6e:d3:d2:5b:
                    e3:6b:56:44:6b:5b:03:25:bb:0a:2c:0e:6f:5c:9e:
                    f7:7e:61:b6:86:71:a1:9f:21:4c:52:4e:be:a8:ec:
                    82:24:8a:e6:70:7a:60:4b:de:af:86:8d:09:11:d8:
                    de:de:23:4a:85:6c:95:59:b2:ac:04:a2:fb:84:df:
                    4e:05:82:35:57:90:fe:44:45:a2:45:ea:19:cf:e1:
                    2a:16:da:67:58:02:da:49:13:62:c5:aa:26:1e:29:
                    8a:d6:16:f9:bb:c7:14:28:1a:4c:97:85:0f:dd:3d:
                    15:dd:70:4a:a2:a3:4e:75:94:89:ce:31:b1:b1:8a:
                    76:2b:6c:82:25:88:53:bc:1f:51:26:28:8b:c1:aa:
                    a7:33:5a:2a:a5:11:36:36:65:79:18:cf:44:3e:5f:
                    9a:92:d8:2b:77:92:d5:c6:70:8d:dd:af:9e:0f:db:
                    0c:de:fa:92:5d:7b:d1:df:1d:7e:4c:df:99:94:29:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:72:D7:6F:0A:0A:1A:56:7A:9C:6A:73:2B:70:5C:EA:2A:07:87:5D
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37332e302f32342d3234203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a6:dc:79:b7:b1:d0:09:90:54:65:98:04:60:71:ce:86:50:
         0b:dd:b4:7d:e2:18:5c:8e:36:b5:1f:04:b9:9b:e7:d5:1f:fe:
         d7:71:86:2c:2b:e2:10:9f:a7:ac:1c:5c:9c:66:cb:fe:1e:a2:
         79:44:cc:ac:27:d7:e2:1c:57:e6:dd:da:1d:2d:eb:55:7c:3e:
         00:da:17:68:ce:2a:da:33:23:e1:bf:51:8e:ae:f8:d8:df:21:
         ad:85:e5:e6:5a:c3:0a:7b:18:f8:c8:cc:97:e6:5b:a6:cc:9d:
         88:a9:b9:55:ac:de:ea:56:52:4f:85:3b:8d:bc:c4:3a:17:f7:
         f8:7a:a4:fd:07:68:1d:cb:ba:ef:e0:94:21:25:57:05:16:45:
         26:9e:d3:fe:a8:f2:c2:34:6d:67:35:0a:5e:9f:c5:2e:20:cb:
         71:ce:01:6e:bf:df:8a:8c:20:8f:b6:5f:05:5b:9c:c2:01:5b:
         d3:22:1b:a7:1f:33:f2:b0:9e:b8:4d:35:94:c9:5b:1a:cd:48:
         2a:7a:8d:22:80:b3:cc:5e:ee:5d:98:8d:f0:27:e4:1d:8b:1e:
         ac:b7:65:1c:e3:e8:89:a3:fd:d2:57:cb:9b:f4:77:cc:02:c6:
         b6:90:7d:c0:73:83:15:58:90:73:8f:3b:62:29:ec:d4:04:41:
         83:73:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org