Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/3230302e35332e38302e302f32322d3232203d3e20323731333635.roa
File:                     3230302e35332e38302e302f32322d3232203d3e20323731333635.roa (raw, json)
Hash identifier:          R1AUsQTQLX/e3y6G3bEZA6IUcRYuGJH9IxU6X+46428=
Subject key identifier:   43:37:0B:67:15:48:34:B2:B4:48:20:D7:20:FC:36:3E:87:A3:0B:B4
Certificate issuer:       /CN=EB893FC2324141C841B4E9613837252F8D6564D8
Certificate serial:       573CCFB174302A6AF621980561B7DE0BFA196649
Authority key identifier: EB:89:3F:C2:32:41:41:C8:41:B4:E9:61:38:37:25:2F:8D:65:64:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB893FC2324141C841B4E9613837252F8D6564D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/3230302e35332e38302e302f32322d3232203d3e20323731333635.roa
Signing time:             Tue 14 Dec 2021 22:42:48 +0000
ROA not before:           Tue 14 Dec 2021 22:37:48 +0000
ROA not after:            Tue 13 Dec 2022 22:42:48 +0000
asID:                     271365
IP address blocks:        200.53.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3c:cf:b1:74:30:2a:6a:f6:21:98:05:61:b7:de:0b:fa:19:66:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB893FC2324141C841B4E9613837252F8D6564D8
        Validity
            Not Before: Dec 14 22:37:48 2021 GMT
            Not After : Dec 13 22:42:48 2022 GMT
        Subject: CN=43370B67154834B2B44820D720FC363E87A30BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:21:52:a3:7a:19:30:16:5b:61:a6:d3:5a:
                    5c:79:c8:64:e9:b7:9a:bc:3a:48:d8:90:18:f4:38:
                    ad:9d:18:94:32:84:52:16:4b:ac:95:bf:9b:1a:5e:
                    10:89:43:9b:5f:3f:ba:18:8a:26:04:37:98:2c:03:
                    7d:e5:63:5c:f5:19:bd:4f:4c:2b:8a:aa:eb:5d:30:
                    0a:af:53:3c:df:0d:40:47:03:91:af:03:29:ca:72:
                    bb:5c:68:65:3b:00:c2:b5:cd:50:12:1b:23:5c:bb:
                    7b:cc:15:58:25:aa:75:f6:68:06:e9:e0:db:bd:90:
                    0a:3f:13:91:88:43:9f:92:9c:ae:65:9a:ef:69:db:
                    17:6e:24:4a:5e:eb:84:b2:e2:60:47:98:59:82:4f:
                    ce:62:e4:7a:3f:49:a4:1f:03:ab:ed:de:72:21:e6:
                    06:40:29:e5:a7:18:3a:25:93:32:22:43:f8:fb:ec:
                    24:5d:80:02:11:73:f1:35:1b:a7:c7:d1:cd:11:e1:
                    94:19:c9:d0:d3:4d:67:c3:fe:b9:9f:c5:a8:a5:d8:
                    1a:bf:23:26:cc:f6:09:23:51:6a:76:3b:75:f6:ad:
                    08:bc:85:6c:90:fa:17:92:a7:42:0e:fd:72:a6:7d:
                    fd:c8:6d:e0:a9:90:fb:20:ec:97:e9:41:32:3f:69:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:37:0B:67:15:48:34:B2:B4:48:20:D7:20:FC:36:3E:87:A3:0B:B4
            X509v3 Authority Key Identifier:
                keyid:EB:89:3F:C2:32:41:41:C8:41:B4:E9:61:38:37:25:2F:8D:65:64:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/EB893FC2324141C841B4E9613837252F8D6564D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB893FC2324141C841B4E9613837252F8D6564D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/3230302e35332e38302e302f32322d3232203d3e20323731333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:09:96:83:c3:5a:21:ea:2d:3b:af:45:25:7b:37:b3:8c:4d:
         ce:eb:80:bb:48:5b:df:49:66:5b:e1:8b:c0:dc:69:7e:d8:60:
         52:62:cb:10:9b:d8:33:c8:9d:e2:fc:36:04:3a:0c:27:10:3f:
         11:9c:f2:3a:e9:3c:b9:fe:09:84:7a:60:70:5c:a7:8b:74:f4:
         70:25:8f:89:06:fb:39:55:09:cc:f1:e7:86:b0:c7:d2:1f:aa:
         3b:33:26:92:5c:02:e5:06:5c:c0:83:18:7f:6e:d6:b5:f0:b8:
         eb:75:74:32:26:be:97:b2:9a:8b:d4:7d:d3:39:b9:4b:62:6d:
         40:3c:70:7f:d4:cc:c4:fc:0f:4d:de:e4:8e:64:6d:2b:68:fb:
         7a:02:c9:f8:4e:e4:1b:7f:bd:8d:04:8b:8b:8f:1e:0b:7f:db:
         31:dc:af:5f:73:89:9c:c9:c5:41:86:08:bf:33:72:7c:06:2b:
         8b:51:67:81:33:03:34:99:aa:92:33:2f:f8:2e:e2:46:cd:cc:
         04:34:4a:13:c2:73:bc:12:99:a6:ae:58:fd:f9:09:ef:a2:27:
         04:4c:f8:4c:fc:e7:a5:16:1a:dc:47:65:17:ba:7d:fd:ea:0e:
         1e:b2:d7:b3:95:7f:97:f2:e1:44:c3:4d:ff:5a:5a:f9:4f:0e:
         59:8b:be:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org