Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3234203d3e20323732363435.roa
File:                     3230312e3231362e3130342e302f32322d3234203d3e20323732363435.roa (raw, json)
Hash identifier:          JXFGb/9l1yjnHyzPjcKm56Y3W4541H2TudiT/RJB07A=
Subject key identifier:   68:D5:87:E3:1B:25:52:E5:5A:15:99:21:2B:2D:D4:D1:53:0F:09:32
Certificate issuer:       /CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
Certificate serial:       4039BBE76950E25AB3189EB12537B3723B1BF087
Authority key identifier: 3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3234203d3e20323732363435.roa
Signing time:             Thu 21 Mar 2024 00:05:01 +0000
ROA not before:           Thu 21 Mar 2024 00:00:01 +0000
ROA not after:            Thu 20 Mar 2025 00:05:01 +0000
asID:                     272645
IP address blocks:        201.216.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:39:bb:e7:69:50:e2:5a:b3:18:9e:b1:25:37:b3:72:3b:1b:f0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Validity
            Not Before: Mar 21 00:00:01 2024 GMT
            Not After : Mar 20 00:05:01 2025 GMT
        Subject: CN=68D587E31B2552E55A1599212B2DD4D1530F0932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:1c:a6:07:d3:14:36:ef:66:3c:60:1e:91:
                    81:a0:22:03:f9:45:f8:3d:c0:0c:28:1b:b8:84:ca:
                    65:be:ba:ae:08:ff:a0:9c:9a:ee:13:f8:3f:d6:91:
                    50:5c:50:ec:73:59:1e:62:37:55:cb:35:9f:1d:f3:
                    67:9c:6f:31:65:1c:7a:e1:d0:fc:bb:36:9c:dc:9d:
                    cd:fa:81:6d:0b:2a:64:fd:a0:ff:0e:df:5f:5f:29:
                    45:41:d6:f1:5e:7b:63:42:47:08:6d:3d:75:e9:ba:
                    07:f8:b3:ac:35:8f:5d:66:17:fc:15:1e:30:3d:af:
                    bd:9e:d3:35:c4:93:f3:2d:8a:3f:56:6d:a8:a9:67:
                    7d:8e:de:c3:94:1d:d7:e8:d3:53:ea:1e:46:8d:1a:
                    72:8a:df:92:75:f2:4c:82:db:24:c1:fd:85:50:70:
                    c9:de:1c:20:c5:93:68:af:67:78:e8:f3:5c:5e:c0:
                    bc:fb:ed:65:ab:f2:28:03:92:2e:ca:b5:a9:7e:b9:
                    90:61:b7:1d:bd:a8:d0:12:82:07:c6:74:61:e2:fe:
                    fe:e7:32:51:b3:7a:91:f5:20:29:9a:29:c8:ae:f5:
                    8d:56:0e:4a:3e:43:bf:84:d2:15:f0:3a:36:1f:48:
                    04:27:4c:9d:70:39:2b:90:88:6f:54:cb:4e:53:e4:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D5:87:E3:1B:25:52:E5:5A:15:99:21:2B:2D:D4:D1:53:0F:09:32
            X509v3 Authority Key Identifier:
                keyid:3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3234203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:75:09:95:3d:1e:33:d6:c2:01:41:a6:67:4d:27:7f:44:1f:
         39:f7:a7:2f:5b:d7:7f:d9:71:8d:2a:d1:ba:0a:6c:17:55:34:
         ae:c6:9a:f3:2f:30:80:61:eb:20:9f:b1:16:9e:75:42:2c:4d:
         2b:03:4c:b7:b9:f4:05:56:48:0b:92:6a:14:25:a0:7b:c9:8b:
         93:76:09:c6:c4:7e:19:bd:e9:31:60:41:28:46:fb:d5:18:35:
         ee:63:ea:c6:56:75:00:c1:38:77:d2:a4:1a:d3:46:25:90:0a:
         8f:25:af:dd:cd:bc:cb:f4:5a:9d:2f:7e:75:f4:54:ba:f6:97:
         ec:c9:52:1a:b5:ea:e4:0e:40:0d:f7:dc:c5:07:fd:b7:58:75:
         cf:81:b3:eb:db:1f:10:ea:85:fd:b0:ef:ff:ac:0b:06:e7:af:
         cb:3c:c1:da:69:ba:bf:5b:04:ff:33:cc:30:96:27:1b:54:69:
         d7:de:51:a6:15:7f:1c:55:d4:27:fe:62:01:1f:28:17:ac:85:
         9b:42:a2:7c:1c:82:1b:cf:42:99:77:11:af:74:f5:13:df:b1:
         12:71:aa:91:00:60:86:9d:75:f2:92:72:d3:f5:b9:39:db:46:
         ec:e1:d5:61:9b:82:ed:a4:c3:50:32:b2:b0:24:db:1d:81:63:
         b5:5a:14:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org