Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36332e302f32342d3234203d3e20323730383034.roa
File:                     3230302e3231392e36332e302f32342d3234203d3e20323730383034.roa (raw, json)
Hash identifier:          McFszIxzOVDWewt+ppXaNOs7R3eg7g+3uQFTkmnPu8Q=
Subject key identifier:   8F:C6:9C:8E:34:06:59:45:57:B6:30:4D:4B:04:5E:15:C7:61:44:10
Certificate issuer:       /CN=11940404721F06E74ACB28F99297DF2466241940
Certificate serial:       0A7143DD17315B680E8C8FCA1537118B6BE8C093
Authority key identifier: 11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36332e302f32342d3234203d3e20323730383034.roa
Signing time:             Wed 27 Jul 2022 19:24:55 +0000
ROA not before:           Wed 27 Jul 2022 19:19:55 +0000
ROA not after:            Thu 27 Jul 2023 19:24:55 +0000
asID:                     270804
IP address blocks:        200.219.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:71:43:dd:17:31:5b:68:0e:8c:8f:ca:15:37:11:8b:6b:e8:c0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11940404721F06E74ACB28F99297DF2466241940
        Validity
            Not Before: Jul 27 19:19:55 2022 GMT
            Not After : Jul 27 19:24:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:57:e4:b9:07:8a:c1:5a:0f:8d:a0:db:be:95:
                    b4:11:40:80:61:d8:c4:85:3e:0a:bc:e9:9d:fd:1c:
                    5a:ca:02:e2:e2:78:29:19:79:7d:34:9b:97:17:d9:
                    f1:e5:6c:33:88:ac:13:30:c8:2e:d6:eb:aa:fd:b1:
                    67:19:cf:e3:9a:e5:2a:3e:6f:9f:b2:cd:2e:36:12:
                    08:cc:b3:d5:12:5e:05:75:64:57:84:92:e3:f7:f7:
                    20:d4:67:4e:10:9b:e1:48:e9:ee:4c:69:59:37:98:
                    c6:2a:35:b5:66:f6:7f:94:04:1e:cb:26:0e:33:e7:
                    7e:d3:c6:d6:02:be:41:6d:39:f9:f7:58:17:66:81:
                    35:3f:ee:fd:0f:49:98:0e:5b:4c:39:9c:b8:41:32:
                    2d:94:c3:e9:47:27:14:80:49:eb:2b:8d:d4:4e:bf:
                    18:c2:28:aa:ca:0e:ae:9a:b3:94:af:aa:98:4a:94:
                    bd:47:a2:92:c4:62:ba:0a:0f:5e:37:81:2e:5e:af:
                    3c:a5:31:4f:c6:22:dc:d7:71:32:b3:68:8d:de:c3:
                    6f:3f:a7:28:a2:5f:2e:9a:b0:2b:af:c3:26:9f:af:
                    1b:fd:73:8e:f6:82:b7:f1:0d:a1:31:4b:c5:6b:d3:
                    f0:07:af:e6:60:4f:37:03:32:27:b0:b8:96:df:51:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C6:9C:8E:34:06:59:45:57:B6:30:4D:4B:04:5E:15:C7:61:44:10
            X509v3 Authority Key Identifier:
                keyid:11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11940404721F06E74ACB28F99297DF2466241940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36332e302f32342d3234203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:21:6e:32:61:7a:1e:84:92:d6:25:3c:d4:23:72:23:77:94:
         88:0b:ce:d1:c6:77:ce:47:d4:75:e8:70:df:b8:29:87:72:d0:
         6b:44:85:a1:86:7f:07:2e:f8:cd:99:e3:e4:05:12:5a:4f:0f:
         2e:85:bc:06:bf:27:42:68:3d:c9:bc:06:13:84:f0:11:6b:8d:
         7b:f8:a0:1e:6c:c5:cb:fe:4c:7c:7a:86:a9:a8:c8:d7:be:ae:
         89:08:08:b9:1b:35:68:b2:4f:23:1a:bf:82:86:9b:9b:cc:de:
         78:00:ed:8f:2d:29:61:e8:d6:88:9c:89:bf:ac:de:5f:b7:b5:
         f2:90:90:c7:6d:c9:46:6d:cd:91:b4:10:e9:fa:25:dd:d8:4f:
         2c:cd:f6:15:7d:60:44:53:07:92:82:b3:af:c3:f8:c7:d2:b9:
         7d:79:f3:68:a8:97:bc:22:dd:63:12:f0:cd:a4:ab:5d:ca:19:
         ff:f5:ca:9d:ad:59:e8:1e:f4:53:72:7b:55:d4:8e:4b:85:c4:
         e9:68:df:79:6c:b4:96:9d:15:fc:c1:f8:13:36:63:e4:4f:f3:
         ab:5f:d0:94:2f:37:3c:89:35:d9:1b:93:a2:c5:d3:1b:01:6c:
         62:2c:1e:5d:d6:6f:e2:ac:0f:13:3d:62:77:fd:b1:8c:57:74:
         fa:c3:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org