Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37342e302f32332d3233203d3e20323636323136.roa
File:                     3230302e37312e37342e302f32332d3233203d3e20323636323136.roa (raw, json)
Hash identifier:          c3CQM6S5GYXaEyil6342VSIHy/LoLGT7vQtj4aY8KAo=
Subject key identifier:   E9:A6:BA:6A:0A:08:97:82:B9:94:A0:03:29:02:C1:2A:A6:78:4E:54
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       490A136262796FBDF3291BB30C0BA039D93E7185
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37342e302f32332d3233203d3e20323636323136.roa
Signing time:             Fri 17 Mar 2023 18:43:29 +0000
ROA not before:           Fri 17 Mar 2023 18:38:29 +0000
ROA not after:            Fri 15 Mar 2024 18:43:29 +0000
asID:                     266216
IP address blocks:        200.71.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0a:13:62:62:79:6f:bd:f3:29:1b:b3:0c:0b:a0:39:d9:3e:71:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Mar 17 18:38:29 2023 GMT
            Not After : Mar 15 18:43:29 2024 GMT
        Subject: CN=E9A6BA6A0A089782B994A0032902C12AA6784E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:15:f0:8d:fe:90:4d:9a:24:0a:11:d4:4e:77:
                    84:f0:6d:e9:a6:0a:40:4a:68:91:30:5a:c6:b5:68:
                    ab:1e:26:4a:05:c9:5d:3f:b7:d5:b7:bb:ac:87:9d:
                    89:b2:60:6a:d2:34:5d:73:c9:6c:24:71:b2:e6:6b:
                    48:04:91:76:5c:2e:fe:98:ec:5a:85:ff:45:9d:5d:
                    99:b1:33:0e:d3:08:53:42:30:e5:2e:7a:88:b4:bf:
                    e6:2b:3b:c8:00:4d:df:be:e5:19:8f:53:e3:cc:ec:
                    31:39:31:5f:2a:c0:34:c8:68:6e:8f:b4:8c:a5:bc:
                    1a:c3:3f:3f:ca:f8:d6:cb:07:8e:81:7c:f7:e0:32:
                    03:5a:f9:a8:98:85:e8:ba:ae:6e:e6:94:8d:93:9d:
                    bb:e3:dc:f0:ce:ea:79:a9:d5:bc:4e:2a:69:a2:f3:
                    c2:36:5e:50:0f:98:fd:f5:64:bc:41:76:d2:4f:5a:
                    45:98:2b:45:34:0a:8f:67:e6:c7:5c:7c:2b:51:a7:
                    e8:83:43:67:5c:e5:49:98:a1:39:d7:4c:d8:c5:7e:
                    1b:ae:fb:5a:44:e0:e6:5b:03:87:62:e7:4f:e7:7b:
                    72:93:8a:d4:69:9d:4c:c4:16:34:cf:1f:66:1f:23:
                    ff:d8:9e:8f:5b:4c:5e:76:59:a4:e5:dd:1e:77:16:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:BA:6A:0A:08:97:82:B9:94:A0:03:29:02:C1:2A:A6:78:4E:54
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37342e302f32332d3233203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:22:99:fe:f3:7e:82:41:58:e5:d4:a1:2b:04:ff:a8:af:
         a1:c2:28:8b:f9:4b:91:56:22:a1:ae:35:7d:99:6b:87:81:23:
         09:1a:b7:10:74:5f:b9:4b:f7:e6:d0:6f:c6:69:0b:64:13:37:
         5b:19:eb:90:55:d0:b2:d5:79:6a:71:ff:cc:fe:47:c2:16:2a:
         38:62:04:65:08:d8:fa:fb:51:88:97:2e:af:0a:3f:08:4a:bb:
         d4:2e:82:47:d2:8e:6f:b9:40:8d:71:bd:27:3f:a6:e7:be:50:
         3d:33:7d:51:41:5b:0f:4c:a8:bb:81:f8:0b:b0:dc:25:6c:9d:
         90:a7:3a:84:e8:a3:b6:93:b4:84:0d:2a:41:52:31:4e:4f:b2:
         ff:da:cf:10:c2:ce:2c:37:2a:00:68:02:03:70:52:ec:36:4d:
         3b:86:45:28:5f:f2:78:21:56:28:96:27:35:d7:8b:30:86:90:
         22:ed:80:77:6c:ab:c2:5e:36:8a:ba:2f:09:39:09:df:16:24:
         59:f4:68:56:86:b1:7f:1e:62:60:17:d4:ef:11:e0:a4:cf:f1:
         4b:5b:a3:c7:ca:b9:ae:db:f7:92:d4:0f:1b:44:2e:ef:55:d8:
         3f:42:24:5d:71:59:13:d3:52:19:c7:4b:cf:87:3a:82:d4:cf:
         15:ee:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org