Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/3230302e31312e382e302f32312d3234203d3e203532353437.roa
File:                     3230302e31312e382e302f32312d3234203d3e203532353437.roa (raw, json)
Hash identifier:          PfsdTeb6NSMiObDNL7amGrcbvlepbgsaJQWuEx7bPKI=
Subject key identifier:   F1:63:4F:55:21:66:59:BC:9D:DA:1C:EB:DE:5B:F8:4B:0F:3D:27:B2
Certificate issuer:       /CN=20EB5865E20D53A7E08BD066F5A704ECA29EEAC8
Certificate serial:       0CC774826365A7198E7556D9D1CB4E00BD3555B5
Authority key identifier: 20:EB:58:65:E2:0D:53:A7:E0:8B:D0:66:F5:A7:04:EC:A2:9E:EA:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/3230302e31312e382e302f32312d3234203d3e203532353437.roa
Signing time:             Tue 10 Oct 2023 19:25:01 +0000
ROA not before:           Tue 10 Oct 2023 19:20:01 +0000
ROA not after:            Tue 08 Oct 2024 19:25:01 +0000
asID:                     52547
IP address blocks:        200.11.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c7:74:82:63:65:a7:19:8e:75:56:d9:d1:cb:4e:00:bd:35:55:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EB5865E20D53A7E08BD066F5A704ECA29EEAC8
        Validity
            Not Before: Oct 10 19:20:01 2023 GMT
            Not After : Oct  8 19:25:01 2024 GMT
        Subject: CN=F1634F55216659BC9DDA1CEBDE5BF84B0F3D27B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:d8:db:80:9c:dd:52:cf:34:27:67:32:7a:
                    02:66:79:d9:91:5d:8e:58:b3:1a:23:aa:d3:7b:87:
                    4f:8e:f7:92:9d:7c:59:ec:96:9a:a0:92:a6:51:2c:
                    8b:19:29:e9:68:61:80:fa:ad:f8:19:84:7d:40:df:
                    b4:ed:16:01:1c:b3:1c:08:96:64:a7:d1:a5:7c:10:
                    7d:5a:7c:d5:b6:18:af:09:a1:8d:8f:5d:91:0d:ca:
                    50:9b:f3:f3:d9:38:1f:6f:49:a2:e8:53:9e:3d:c4:
                    26:4d:44:cb:0e:5e:03:3d:d0:aa:94:31:71:8c:47:
                    10:40:3e:b7:d4:4f:ba:de:22:e6:69:e3:36:d7:9a:
                    1c:6c:63:02:c9:b4:30:f7:d8:7d:6d:a3:59:c0:a4:
                    9e:18:01:60:f7:e9:fd:52:dd:ac:69:67:ba:bb:68:
                    d2:96:21:29:ae:f8:d2:f3:36:00:b5:f8:3d:c7:76:
                    d7:11:6e:04:92:56:e6:42:c0:6d:14:bc:6a:ac:f5:
                    a5:4e:2e:76:34:26:58:ca:93:49:92:0b:66:a3:26:
                    de:23:a1:fa:00:5d:02:64:ca:4c:55:82:0e:94:7d:
                    3b:03:d0:18:b9:d1:48:40:68:8c:c6:33:65:61:40:
                    fb:6b:7e:bc:8c:67:c2:58:0c:89:a2:b2:36:9f:63:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:63:4F:55:21:66:59:BC:9D:DA:1C:EB:DE:5B:F8:4B:0F:3D:27:B2
            X509v3 Authority Key Identifier:
                keyid:20:EB:58:65:E2:0D:53:A7:E0:8B:D0:66:F5:A7:04:EC:A2:9E:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/3230302e31312e382e302f32312d3234203d3e203532353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:03:cc:8f:e4:7b:df:65:80:9f:be:cf:35:c5:c2:2a:3b:00:
         c1:be:5a:da:9d:5d:dd:a6:a9:0a:c3:b5:1f:d5:37:22:05:82:
         a0:0e:f6:fc:aa:00:2e:92:a3:5b:64:82:7f:26:90:b8:72:f0:
         1e:6c:62:cc:b1:8b:f3:42:c2:bc:36:62:e6:04:70:25:aa:d6:
         7a:02:00:d8:77:b7:c3:59:5d:67:95:ef:13:77:e6:b1:6b:e0:
         cd:d0:1c:fb:d5:6c:16:a6:cc:1e:06:e0:ef:45:2b:2d:39:d3:
         b9:8b:f6:a9:d7:c7:f2:fe:18:8c:e2:2d:e0:4a:62:22:34:2b:
         fa:02:05:53:c1:ec:55:1d:d5:88:07:3e:a6:1a:dd:c3:10:6a:
         fc:cf:be:6f:e0:93:b4:7c:92:41:ff:6c:fe:52:fd:1f:76:7d:
         e8:a1:63:81:b9:79:c6:2f:8f:db:2f:85:bd:ed:e6:7f:e5:ef:
         be:99:6d:cc:d9:e9:27:64:35:a5:01:c3:30:a2:30:26:e4:12:
         a8:5b:70:e6:fb:ff:13:e3:7a:a9:d8:cb:26:a2:6e:1b:a5:7f:
         c4:94:89:47:74:a1:de:c0:47:21:1f:98:37:35:81:88:58:70:
         40:5c:84:69:ea:b3:4a:21:18:eb:8c:98:13:34:41:55:41:ed:
         1c:7f:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org