Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36312e302f32342d3234203d3e20323730383034.roa
File:                     3230302e3231392e36312e302f32342d3234203d3e20323730383034.roa (raw, json)
Hash identifier:          ocOztmtv/h+Jbs8xyYKM+KIDMLrEJx6ec5NSKbZZjf0=
Subject key identifier:   ED:DC:CD:D0:6D:89:0D:CF:54:27:8F:E4:27:89:25:5E:DF:70:92:5F
Certificate issuer:       /CN=11940404721F06E74ACB28F99297DF2466241940
Certificate serial:       2C96BAA90B3C7DE9F18B727E56395F0AB6B8B111
Authority key identifier: 11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36312e302f32342d3234203d3e20323730383034.roa
Signing time:             Wed 27 Jul 2022 19:23:58 +0000
ROA not before:           Wed 27 Jul 2022 19:18:58 +0000
ROA not after:            Thu 27 Jul 2023 19:23:58 +0000
asID:                     270804
IP address blocks:        200.219.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:96:ba:a9:0b:3c:7d:e9:f1:8b:72:7e:56:39:5f:0a:b6:b8:b1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11940404721F06E74ACB28F99297DF2466241940
        Validity
            Not Before: Jul 27 19:18:58 2022 GMT
            Not After : Jul 27 19:23:58 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:e4:b5:f1:40:f6:4d:79:40:91:62:bb:cf:
                    49:89:e4:8f:35:35:4c:2a:4d:09:08:e2:31:fb:97:
                    06:33:36:05:bd:df:9c:d3:e0:0c:7d:1d:26:e4:6f:
                    03:f6:2e:b1:a4:7a:04:50:24:53:1b:83:ba:70:b2:
                    e9:ad:29:63:a4:83:23:1f:f9:6a:5d:39:36:c6:89:
                    36:89:33:2e:30:f6:fa:9c:8c:6a:a2:97:42:97:57:
                    5f:86:e1:13:c7:c0:09:b1:3e:a8:59:1f:59:b6:55:
                    c5:fc:76:34:72:4c:54:25:1b:d0:51:0f:4b:b1:d8:
                    73:a2:05:73:7e:36:b0:38:1e:5e:d1:3b:16:72:3d:
                    3c:b0:18:44:ad:d7:c2:0b:95:dc:b4:24:af:6c:b4:
                    02:d5:e2:04:2d:25:af:f6:6e:f6:7b:9e:9e:c2:cf:
                    1a:19:b3:8e:0f:e9:d5:0d:2d:3c:4c:98:c6:8f:8d:
                    d7:f8:9f:d0:54:21:c5:0b:6f:56:a3:26:31:df:52:
                    db:02:ce:3e:c6:1e:7c:30:f0:1e:2f:6e:d1:46:b8:
                    c2:9a:cc:cf:fb:a8:d6:10:9d:3a:e2:22:60:c7:5f:
                    7a:16:8d:3b:23:a7:21:b6:c0:0a:0a:c7:f2:e4:e5:
                    e7:45:47:77:c8:7f:2f:1f:53:05:fb:6c:61:f6:6d:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:CD:D0:6D:89:0D:CF:54:27:8F:E4:27:89:25:5E:DF:70:92:5F
            X509v3 Authority Key Identifier:
                keyid:11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11940404721F06E74ACB28F99297DF2466241940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36312e302f32342d3234203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:04:3b:6d:61:a6:f6:5e:3b:af:62:1c:d5:8d:eb:60:0f:fe:
         da:e4:24:be:f8:2a:11:d8:12:85:74:02:17:69:b7:85:1e:d7:
         02:13:30:8a:4e:18:9d:69:19:cd:ef:69:eb:a2:27:78:5d:91:
         f7:a7:d7:55:e0:61:6a:ae:83:eb:71:cd:4f:c3:67:dc:57:73:
         2f:50:25:27:ba:df:ee:00:15:33:1b:ce:72:b1:ce:04:ee:d1:
         c8:ef:4c:a5:c6:92:4f:02:bb:43:d5:6f:7f:6c:16:c3:10:aa:
         09:0e:f7:9e:75:0f:e8:b0:be:c1:64:7f:e2:be:d6:d5:d5:ea:
         9f:d7:91:f3:40:56:7a:e0:2d:bf:4f:a4:9d:43:52:1e:d0:ef:
         35:9a:0e:46:ae:27:3d:8a:e5:94:2b:db:db:10:ef:5f:39:7b:
         46:73:11:66:74:2d:84:3c:d2:17:cb:4e:25:5c:54:97:a8:da:
         1d:c2:34:be:0f:e0:18:dc:e7:d9:bd:17:27:41:8f:a8:72:be:
         78:83:37:48:c0:b4:92:0e:43:02:c1:ad:84:ac:3c:64:17:e2:
         7e:57:70:02:04:62:4f:52:d1:61:3f:d7:7d:36:8e:2d:90:3f:
         c5:1c:b1:23:5b:ed:62:2a:11:fe:78:48:d8:72:1e:14:5c:0e:
         0f:d8:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org