Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3230302e37312e36382e302f32322d3234203d3e20323636323036.roa
File:                     3230302e37312e36382e302f32322d3234203d3e20323636323036.roa (raw, json)
Hash identifier:          7C3caOjC52yzT5t0PIw7paEty+3zwLTfF4e+bNj2WVg=
Subject key identifier:   13:6E:2E:E0:67:99:51:72:27:6B:35:CF:CE:82:D1:18:28:CA:62:FC
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       3A97688DB30E59C71636DCFE4AAC3C7D55F0A7DA
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3230302e37312e36382e302f32322d3234203d3e20323636323036.roa
Signing time:             Sat 20 Jan 2024 18:41:27 +0000
ROA not before:           Sat 20 Jan 2024 18:36:27 +0000
ROA not after:            Sat 18 Jan 2025 18:41:27 +0000
asID:                     266206
IP address blocks:        200.71.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:97:68:8d:b3:0e:59:c7:16:36:dc:fe:4a:ac:3c:7d:55:f0:a7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:36:27 2024 GMT
            Not After : Jan 18 18:41:27 2025 GMT
        Subject: CN=136E2EE067995172276B35CFCE82D11828CA62FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:7b:5e:f9:2a:48:d4:75:25:d3:36:05:5d:
                    5e:fc:91:0d:56:be:21:f1:de:97:c8:3c:58:a5:39:
                    91:be:77:fe:22:21:22:e6:a1:90:fb:2b:50:db:65:
                    c4:6c:19:9e:9e:49:78:b3:c5:45:43:ff:71:1f:43:
                    75:04:7c:d0:fc:07:d5:44:70:c9:5d:80:fd:76:6e:
                    68:72:35:92:85:6d:be:bd:94:a4:62:60:81:fd:e9:
                    01:97:09:b1:3f:de:16:ec:59:d9:fd:0e:e2:a3:4c:
                    eb:90:4b:dd:7f:37:91:bc:f1:41:f5:84:ca:f7:9e:
                    b3:74:7d:d0:94:c0:a3:d8:3a:a6:13:d6:22:66:04:
                    ac:3b:a7:8e:44:a0:95:01:e7:5b:8f:c9:31:80:1a:
                    32:14:39:f9:b1:58:07:fc:c3:62:60:6b:21:d5:9b:
                    c1:12:10:69:da:65:3e:86:1c:9a:d6:6b:98:f1:9c:
                    3d:b1:db:57:e0:4f:60:9d:44:55:52:88:78:d1:43:
                    ec:9d:50:7b:4f:84:e5:9f:77:10:6f:16:39:aa:9c:
                    87:bd:7d:f8:65:93:bb:48:ee:d8:e6:cc:c2:61:33:
                    f0:b0:ac:ad:47:ae:8f:ef:b5:8f:67:be:c2:b8:42:
                    2d:e7:9d:c7:6e:73:b2:b7:13:35:f3:ce:3d:04:6d:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6E:2E:E0:67:99:51:72:27:6B:35:CF:CE:82:D1:18:28:CA:62:FC
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3230302e37312e36382e302f32322d3234203d3e20323636323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:60:14:55:98:60:c5:98:fe:ad:39:e1:1d:3e:e8:5e:1f:2b:
         96:67:77:7e:80:08:51:bd:b4:d6:d1:b3:0a:2a:de:31:f1:0a:
         88:f4:4c:d2:5e:d8:62:88:e5:36:24:d9:c7:88:17:85:1b:8e:
         81:86:64:6d:e0:d6:18:6f:ba:59:e8:82:e9:3c:6c:33:8c:da:
         1a:90:34:56:cc:38:a4:bf:20:b1:56:9e:0c:7c:2c:81:10:2f:
         05:a6:ec:93:d1:9e:bd:ac:5e:5c:3b:4f:57:d9:88:22:bb:de:
         d1:8c:2c:14:99:3b:8c:76:e4:f4:06:40:d8:7e:89:92:51:c7:
         c0:2e:ab:48:33:67:04:2a:33:47:6b:c0:52:4d:2e:46:12:9f:
         c9:3a:19:7a:22:ae:eb:1f:84:5e:19:54:3b:58:16:a8:7d:bc:
         6a:0f:16:9b:b8:55:ba:6b:40:9a:b6:6b:13:f9:48:46:e2:cb:
         12:4f:63:33:73:9a:e6:51:82:d0:06:ac:ee:ab:3c:e3:b3:f6:
         45:7d:db:ef:35:2a:c7:e7:cc:a4:93:fc:3b:f0:48:39:49:35:
         e1:ba:d0:75:89:ce:97:93:76:21:8b:6e:9a:3d:ec:45:33:d0:
         e8:7e:0f:80:83:84:6d:3f:3c:45:5e:86:22:46:a5:54:16:e4:
         6e:97:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org