Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38362e302f32332d3233203d3e20323731303736.roa
File:                     3230302e37312e38362e302f32332d3233203d3e20323731303736.roa (raw, json)
Hash identifier:          h6f/gPsByJ8qvVH56jWq42YCWQK3Vl+HgyuCzNcQHtQ=
Subject key identifier:   04:E4:E4:30:F1:72:E2:7B:6D:DE:84:80:64:2B:73:E7:C3:AF:1A:A1
Certificate issuer:       /CN=D52232967406E705729EA909CBA1A57972539515
Certificate serial:       49B2F55B25517F3BE5D52AE26FB4E148BF41EF16
Authority key identifier: D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38362e302f32332d3233203d3e20323731303736.roa
Signing time:             Thu 21 Sep 2023 19:00:00 +0000
ROA not before:           Thu 21 Sep 2023 18:55:00 +0000
ROA not after:            Thu 19 Sep 2024 19:00:00 +0000
asID:                     271076
IP address blocks:        200.71.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b2:f5:5b:25:51:7f:3b:e5:d5:2a:e2:6f:b4:e1:48:bf:41:ef:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52232967406E705729EA909CBA1A57972539515
        Validity
            Not Before: Sep 21 18:55:00 2023 GMT
            Not After : Sep 19 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:1c:f4:c8:9c:64:d9:84:d9:67:b8:50:1b:
                    85:41:a4:95:59:1e:bc:c8:4d:63:e4:f0:e9:90:40:
                    ce:df:91:e4:3b:bf:ee:c6:34:62:63:47:48:78:fa:
                    f5:fd:22:0a:30:27:f5:05:92:4a:bd:62:6c:21:ce:
                    7f:29:ed:57:c9:1b:63:7e:21:f4:97:75:52:0d:76:
                    30:d1:81:3a:da:56:5c:18:50:e3:04:f6:f0:94:21:
                    60:0f:07:e6:5b:07:f1:24:cb:25:65:b7:25:e6:98:
                    71:bf:7b:49:d1:c5:71:cd:45:71:44:47:c0:0c:a0:
                    54:f3:c9:40:d6:cf:1d:49:50:da:4e:c8:43:e9:c6:
                    c5:a6:bd:2a:29:97:4b:88:20:66:13:22:a2:e3:b0:
                    c5:30:d9:8b:05:6a:c4:ab:a2:bf:49:aa:44:73:cf:
                    52:5a:28:c4:0c:93:3c:a1:c4:42:4d:5c:ba:1c:de:
                    18:da:fa:f4:eb:21:d2:75:9c:b0:13:17:76:e7:6a:
                    55:92:b0:f7:a5:93:ad:2b:87:88:21:55:ac:77:cd:
                    12:9f:6c:d8:e1:27:fa:62:2a:21:46:da:c3:d1:78:
                    89:89:57:ef:85:1f:7a:a3:32:85:72:e1:df:ad:e0:
                    1d:b8:05:7f:3d:71:7d:fa:17:b3:04:a0:39:27:18:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E4:E4:30:F1:72:E2:7B:6D:DE:84:80:64:2B:73:E7:C3:AF:1A:A1
            X509v3 Authority Key Identifier:
                keyid:D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/D52232967406E705729EA909CBA1A57972539515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38362e302f32332d3233203d3e20323731303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:82:0d:63:51:19:f2:78:a5:af:33:40:9d:e4:2e:85:4e:9a:
         cc:60:3b:fc:8e:81:f2:94:57:68:a2:11:c4:39:f8:f6:9e:e0:
         de:6b:7e:d0:40:f3:22:8c:b0:8a:8e:96:ec:c9:6e:0d:a6:60:
         85:92:c9:c6:a8:74:bd:98:3b:09:44:24:2e:8f:f1:95:b9:bf:
         aa:fb:a0:ec:2d:4e:97:dc:1f:db:97:69:e8:ed:f1:57:cd:95:
         02:4c:4b:63:64:8d:bf:c5:5d:b3:3e:2d:f6:12:57:5c:c4:26:
         f9:9d:ea:03:3f:1e:e1:a8:4c:ed:3b:43:58:6e:0e:c3:e6:f5:
         ac:30:1a:36:a9:1c:a0:87:ed:d7:49:30:23:6a:bf:15:2e:19:
         3d:88:cf:21:2d:21:96:f6:a6:1a:3f:81:3b:51:15:09:bc:bc:
         ed:9c:f9:2d:09:31:bc:39:c2:0b:23:c4:b3:33:d7:3f:63:b4:
         ff:97:f4:9e:f1:c7:7b:25:55:fe:3b:d1:d7:ef:42:a7:c4:d5:
         79:aa:ff:50:20:cb:d3:6a:72:c9:51:3a:7e:09:2a:dc:1e:39:
         5b:ca:b3:7c:28:46:a3:6a:a9:7d:c1:6f:de:4c:7c:fa:0a:ad:
         82:61:ce:70:79:f2:46:53:f0:de:13:0e:7f:66:ac:90:9e:2a:
         ea:2d:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org