Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131342e302f32332d3233203d3e20323730323439.roa
File:                     3230302e3130372e3131342e302f32332d3233203d3e20323730323439.roa (raw, json)
Hash identifier:          pF7RQ9XWL4TP+QrinUeyOX2rmr6C8bEftdSFBmBzRFo=
Subject key identifier:   54:60:56:83:5C:7B:58:26:42:DB:D0:3B:94:D8:36:13:87:30:DF:27
Certificate issuer:       /CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
Certificate serial:       4019D9E10C17ED6D115DBE1490E0A80923DAA25C
Authority key identifier: F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131342e302f32332d3233203d3e20323730323439.roa
Signing time:             Wed 29 Nov 2023 23:52:57 +0000
ROA not before:           Wed 29 Nov 2023 23:47:57 +0000
ROA not after:            Wed 27 Nov 2024 23:52:57 +0000
asID:                     270249
IP address blocks:        200.107.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:19:d9:e1:0c:17:ed:6d:11:5d:be:14:90:e0:a8:09:23:da:a2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
        Validity
            Not Before: Nov 29 23:47:57 2023 GMT
            Not After : Nov 27 23:52:57 2024 GMT
        Subject: CN=546056835C7B582642DBD03B94D836138730DF27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:f3:eb:20:83:8d:b5:6b:2a:92:e5:7d:a6:
                    4f:88:f1:71:a4:55:88:2d:af:7b:f7:86:5b:50:c8:
                    1e:ca:46:fd:e7:21:57:86:84:9e:06:1e:b4:a7:31:
                    d3:b7:74:97:ab:96:0a:22:31:89:c5:68:f9:96:ce:
                    4d:dc:0a:30:23:45:5f:33:e7:c3:a1:1b:f8:c8:20:
                    db:fc:ed:d0:da:2c:d4:21:d8:87:bf:25:00:97:0c:
                    68:5c:82:62:34:c7:ea:05:df:20:f5:01:96:c0:ec:
                    89:7b:db:eb:67:01:d0:ae:91:4c:06:16:ac:4b:aa:
                    1a:99:9e:fc:57:2e:a7:7a:a9:4a:98:de:c1:71:f1:
                    ac:d9:da:9a:15:e3:cf:ff:9d:cd:98:35:c4:5b:53:
                    72:b9:66:b8:bc:47:04:d2:91:24:bf:35:de:95:9f:
                    b7:c8:59:4b:57:67:5a:e2:32:90:81:58:40:8c:97:
                    e2:f2:df:14:af:3d:af:15:60:e6:4b:7d:0f:84:ae:
                    78:2a:4d:e6:9a:b1:cf:94:88:d2:bd:6f:de:19:5b:
                    4e:99:dc:4f:0b:af:ed:12:c8:d6:74:ec:e6:36:74:
                    4f:87:1c:ab:d4:4a:e5:a1:b4:d1:db:66:af:b8:36:
                    13:28:8a:f0:44:5e:76:a1:24:9c:ad:ad:d5:f5:52:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:60:56:83:5C:7B:58:26:42:DB:D0:3B:94:D8:36:13:87:30:DF:27
            X509v3 Authority Key Identifier:
                keyid:F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/3230302e3130372e3131342e302f32332d3233203d3e20323730323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:05:58:a2:53:97:c2:9c:83:bd:4b:b5:02:00:87:99:f1:43:
         9d:0b:9a:b8:3e:4b:83:22:d8:c8:bb:05:74:e1:74:91:95:ac:
         6b:9e:56:65:80:a0:be:54:42:e8:b8:ac:82:cc:b5:f4:b1:cb:
         a1:55:b0:1f:ed:8b:e9:a8:9c:e1:f2:b5:ee:00:fc:c9:6d:01:
         9b:b2:f0:32:24:ac:db:2e:4f:e8:3d:37:18:89:2e:10:7f:ed:
         26:7a:1d:8a:3e:db:c4:42:03:fe:bf:3f:1c:1d:a2:64:35:9f:
         42:c7:ef:c5:ce:b2:8e:ac:6c:82:43:32:c2:6f:bc:93:cf:7f:
         7c:f3:b4:cd:02:f3:ec:5a:d5:e1:d3:77:c4:ca:ce:e2:de:17:
         46:c5:a0:a5:90:28:9d:0e:a1:3e:fa:34:63:39:89:d8:80:82:
         cd:1e:5c:38:5b:23:2b:f0:f4:aa:c6:10:6c:48:a7:6d:ff:ba:
         dc:ce:c7:ad:80:25:5e:8f:4d:72:47:1c:76:61:1a:01:5a:9b:
         7d:2b:62:49:c4:94:db:a3:81:d7:63:02:38:74:73:d5:44:48:
         35:47:6c:a8:28:94:5e:03:10:f3:01:89:da:84:84:50:77:02:
         b7:0c:18:64:2c:29:b2:05:75:79:88:ec:e1:f0:5c:2d:fe:80:
         68:6e:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org