Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38372e302f32342d3234203d3e20323731303736.roa
File:                     3230302e37312e38372e302f32342d3234203d3e20323731303736.roa (raw, json)
Hash identifier:          +YswhRSr/8/qsbvH+PLMmvAarjPMRmu94OGAAyBcEyo=
Subject key identifier:   4B:40:59:E3:E9:86:E9:37:95:68:28:8F:CD:A6:01:A2:46:55:8A:FC
Certificate issuer:       /CN=D52232967406E705729EA909CBA1A57972539515
Certificate serial:       3E7378329F92DA666FFEFFCFAAF2CB6FE7D988CC
Authority key identifier: D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38372e302f32342d3234203d3e20323731303736.roa
Signing time:             Thu 21 Sep 2023 19:00:00 +0000
ROA not before:           Thu 21 Sep 2023 18:55:00 +0000
ROA not after:            Thu 19 Sep 2024 19:00:00 +0000
asID:                     271076
IP address blocks:        200.71.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:73:78:32:9f:92:da:66:6f:fe:ff:cf:aa:f2:cb:6f:e7:d9:88:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52232967406E705729EA909CBA1A57972539515
        Validity
            Not Before: Sep 21 18:55:00 2023 GMT
            Not After : Sep 19 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:94:7a:99:a4:bd:4b:b8:50:78:1d:2a:63:
                    52:03:0c:e9:18:48:76:91:b9:58:42:9a:47:05:4c:
                    c4:e6:04:be:85:fb:63:69:58:fd:84:09:8e:ce:91:
                    fe:42:97:04:f6:48:1d:66:53:d8:e3:9d:2d:a8:64:
                    0f:80:9c:06:93:04:e5:29:b0:d2:f9:b8:65:c9:d7:
                    36:a5:5a:80:25:15:70:fd:5b:fe:0d:82:2e:56:d1:
                    6f:75:10:20:84:f2:f7:7c:ea:8c:bc:94:c0:5e:93:
                    33:54:a6:f1:e0:4d:66:54:73:bc:73:6d:66:0e:11:
                    22:e6:42:5f:ba:31:6d:fc:e9:cf:1f:e1:be:25:b9:
                    bf:cc:cb:36:d0:56:25:02:81:b8:9a:f2:32:e9:10:
                    24:5e:2b:ec:61:ec:16:88:9c:04:85:9d:93:fd:54:
                    06:a3:20:6a:a4:1d:de:9e:63:75:4a:3f:3a:5a:85:
                    59:6a:84:9b:24:69:61:73:51:f1:17:8a:96:bf:a7:
                    37:8c:11:90:13:55:75:ad:8f:cb:89:8e:c9:20:38:
                    60:cb:d7:37:17:06:27:b6:a5:83:54:4f:fa:57:5b:
                    9f:46:c7:29:eb:49:5b:c3:86:c3:af:22:a0:96:97:
                    19:01:6b:99:5a:73:75:af:2a:25:57:78:8a:dc:a0:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:40:59:E3:E9:86:E9:37:95:68:28:8F:CD:A6:01:A2:46:55:8A:FC
            X509v3 Authority Key Identifier:
                keyid:D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/D52232967406E705729EA909CBA1A57972539515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38372e302f32342d3234203d3e20323731303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:55:d4:f0:ab:fd:5f:c4:91:5c:be:c9:ed:47:66:25:59:e3:
         aa:5e:5f:74:60:05:94:a6:77:9c:25:3e:22:3a:55:b1:42:4a:
         4f:0e:f5:7d:1d:23:3d:fe:60:3d:f0:08:19:f9:35:f3:0e:41:
         7a:09:93:53:4e:d6:ac:9f:b4:78:bf:7f:55:64:0f:c8:b5:fd:
         cd:0c:52:a1:50:a2:a2:55:41:50:a4:c7:90:21:6f:e7:52:43:
         b1:e3:9a:e2:c5:1f:43:fe:b8:14:e3:24:b1:eb:28:c4:1e:3f:
         e0:5b:b9:02:6a:48:87:14:13:c4:54:a7:99:1f:26:67:95:ce:
         44:df:3c:da:1f:2e:f3:82:7d:a0:d2:19:f2:9d:1f:ca:80:73:
         e8:36:f8:ed:a1:63:6a:04:6a:79:89:07:44:a8:2c:0f:06:35:
         fd:cc:2b:41:12:40:64:36:4d:59:78:ad:0f:46:6b:22:08:31:
         99:9d:ad:d0:54:7e:2f:65:d2:3e:65:c6:50:50:0d:40:29:55:
         36:76:1d:64:41:6f:ae:1d:0a:18:08:3a:73:b6:4e:95:56:c5:
         62:b1:31:3f:87:7a:4c:21:55:7f:3b:17:e2:d4:15:62:0e:42:
         25:0e:10:7a:88:c8:f1:4b:6a:65:be:53:7c:21:ab:0a:4d:c2:
         a9:8d:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org