Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32342d3234203d3e20323730383034.roa
File:                     3230302e3231392e36302e302f32342d3234203d3e20323730383034.roa (raw, json)
Hash identifier:          chQEtsulgCrnBQfol+KoPzGY7hfyG8KDTkcsOwKE4pU=
Subject key identifier:   83:82:E1:D2:C3:1E:FA:CF:24:4C:F0:29:1B:81:14:72:5C:DC:2B:81
Certificate issuer:       /CN=11940404721F06E74ACB28F99297DF2466241940
Certificate serial:       13EB93502CA95018E77E2C58B78B976CBF49E195
Authority key identifier: 11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32342d3234203d3e20323730383034.roa
Signing time:             Wed 27 Jul 2022 19:23:33 +0000
ROA not before:           Wed 27 Jul 2022 19:18:33 +0000
ROA not after:            Thu 27 Jul 2023 19:23:33 +0000
asID:                     270804
IP address blocks:        200.219.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:eb:93:50:2c:a9:50:18:e7:7e:2c:58:b7:8b:97:6c:bf:49:e1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11940404721F06E74ACB28F99297DF2466241940
        Validity
            Not Before: Jul 27 19:18:33 2022 GMT
            Not After : Jul 27 19:23:33 2023 GMT
        Subject: CN=3082010A0282010100CC08188C43B651FC5F93FE6559430F65EAF28492DA7DEAAB625DAF6B837E52FF17087888900F7C21909AE573EA2F3462B1A606A6462547E5C50096AFCD8EEE870620940CCD51ADBCD86D9A4490D83D2F97F840F587425D24F6580F17072F3E2A35CB9FBFF3BC5AE9BFBBAE295A27CB7118378812AFA804496ABB801660A4EC6F65C525B074CF7805F90535A9174AEBCBE81E053A655641AD7D840AEDDF19681A7456E59678881A2047E5580D20F2655BEA9B2075792AC636B38A79E427EE2F76110713AF26C36D9EB9894CDF82E96925FED3F1555AA2D77C0D81AE9D31159485C7FC6AFB8AA0AE1A01E47E22D6A565E83F8C5D6F2A951A4A65638F8D4E95EB330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:18:8c:43:b6:51:fc:5f:93:fe:65:59:43:
                    0f:65:ea:f2:84:92:da:7d:ea:ab:62:5d:af:6b:83:
                    7e:52:ff:17:08:78:88:90:0f:7c:21:90:9a:e5:73:
                    ea:2f:34:62:b1:a6:06:a6:46:25:47:e5:c5:00:96:
                    af:cd:8e:ee:87:06:20:94:0c:cd:51:ad:bc:d8:6d:
                    9a:44:90:d8:3d:2f:97:f8:40:f5:87:42:5d:24:f6:
                    58:0f:17:07:2f:3e:2a:35:cb:9f:bf:f3:bc:5a:e9:
                    bf:bb:ae:29:5a:27:cb:71:18:37:88:12:af:a8:04:
                    49:6a:bb:80:16:60:a4:ec:6f:65:c5:25:b0:74:cf:
                    78:05:f9:05:35:a9:17:4a:eb:cb:e8:1e:05:3a:65:
                    56:41:ad:7d:84:0a:ed:df:19:68:1a:74:56:e5:96:
                    78:88:1a:20:47:e5:58:0d:20:f2:65:5b:ea:9b:20:
                    75:79:2a:c6:36:b3:8a:79:e4:27:ee:2f:76:11:07:
                    13:af:26:c3:6d:9e:b9:89:4c:df:82:e9:69:25:fe:
                    d3:f1:55:5a:a2:d7:7c:0d:81:ae:9d:31:15:94:85:
                    c7:fc:6a:fb:8a:a0:ae:1a:01:e4:7e:22:d6:a5:65:
                    e8:3f:8c:5d:6f:2a:95:1a:4a:65:63:8f:8d:4e:95:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:82:E1:D2:C3:1E:FA:CF:24:4C:F0:29:1B:81:14:72:5C:DC:2B:81
            X509v3 Authority Key Identifier:
                keyid:11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11940404721F06E74ACB28F99297DF2466241940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32342d3234203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:4e:88:4a:7a:74:d8:ac:a9:06:1f:a0:97:e1:f0:93:5c:22:
         1d:36:36:03:1e:d5:67:13:d8:b6:4a:ea:79:17:6f:19:af:f7:
         ae:e6:72:13:18:ce:3e:4e:96:c5:63:54:b9:fd:4c:8e:08:fd:
         5f:c5:cb:13:ad:6a:f2:36:ea:e0:ce:f8:cc:46:01:39:bb:5e:
         8b:21:66:55:f7:5f:73:f0:34:63:8a:c1:8c:90:75:3f:ab:28:
         72:07:d5:be:7f:b2:23:94:12:d7:6b:eb:71:93:8b:38:20:80:
         e7:e7:85:7e:53:d8:35:5d:56:e7:10:34:e5:7b:5a:ad:24:ff:
         99:58:3b:9e:f4:da:7d:dc:20:2d:c7:d4:16:c6:69:1a:8b:d2:
         08:2c:cd:6a:5b:27:b3:17:42:19:f9:f1:42:92:d5:90:db:fe:
         e6:b7:1e:a9:c7:71:e6:1d:a6:36:74:8f:e8:b3:19:a2:e6:b3:
         14:e8:ec:a7:95:45:72:7e:e6:b9:71:5b:86:46:b9:58:7a:e5:
         a5:11:62:fa:13:30:24:52:1c:b4:51:18:28:ed:b9:bd:83:94:
         ab:6f:b9:43:53:eb:25:da:1c:00:e7:7b:80:7d:bb:cc:85:db:
         65:a6:48:e6:77:3d:ad:0b:81:38:61:c7:64:37:e9:55:af:d6:
         46:77:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org