Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231362e302f32332d3234203d3e20323731333637.roa
File:                     3230302e33362e3231362e302f32332d3234203d3e20323731333637.roa (raw, json)
Hash identifier:          y7KPYpxwRiqI+hALVtME0GuG1r5mYhGqxcuUs7niLJc=
Subject key identifier:   7F:90:8E:62:DD:D4:47:5F:41:CD:1B:38:BE:FF:83:96:C2:58:42:49
Certificate issuer:       /CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
Certificate serial:       4126AC2A8D33C1E4B90540F929F35741FF37CC5A
Authority key identifier: 9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231362e302f32332d3234203d3e20323731333637.roa
Signing time:             Sat 06 Aug 2022 01:14:56 +0000
ROA not before:           Sat 06 Aug 2022 01:09:56 +0000
ROA not after:            Sat 05 Aug 2023 01:14:56 +0000
asID:                     271367
IP address blocks:        200.36.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:26:ac:2a:8d:33:c1:e4:b9:05:40:f9:29:f3:57:41:ff:37:cc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
        Validity
            Not Before: Aug  6 01:09:56 2022 GMT
            Not After : Aug  5 01:14:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:75:de:65:de:a3:77:b9:3b:fa:2b:f0:00:
                    e5:cd:bb:16:19:61:a5:3d:ad:90:b4:c8:f4:73:83:
                    28:25:a4:2d:38:de:46:91:dd:b4:af:11:f6:8a:1c:
                    5c:59:cc:9d:b8:bd:3b:4a:ca:9a:4b:d7:7f:89:29:
                    f6:a9:a5:e4:d6:a3:95:de:da:de:3e:4f:33:f1:04:
                    47:19:7c:9a:67:53:d2:97:30:a0:e8:f2:5e:aa:80:
                    3c:7c:6a:08:f7:7d:35:48:20:8a:9c:cb:aa:c7:0a:
                    59:50:71:37:36:3f:d3:e7:17:8e:08:d4:d5:3c:0f:
                    8e:a2:ff:7b:4e:46:d4:bb:74:30:aa:8a:90:f1:40:
                    6e:fc:dd:af:39:42:cd:d2:57:a8:ed:0d:88:cd:64:
                    82:20:69:12:85:08:db:91:d9:b8:34:e3:3a:58:d5:
                    45:05:a4:35:c2:90:1a:fb:ee:7b:37:98:ce:05:a8:
                    8d:39:cc:61:38:1d:68:88:6a:47:03:fb:d1:76:e7:
                    8a:41:9d:a4:b1:5a:dc:4a:7c:5c:21:36:74:a8:8c:
                    be:63:a6:3a:d0:e4:4d:9c:52:fc:a4:0d:20:3f:f0:
                    48:01:81:4a:18:57:e4:ff:2d:26:e1:5f:8c:7a:b4:
                    37:7e:cd:a0:57:85:89:65:da:c9:5b:37:96:17:8f:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:90:8E:62:DD:D4:47:5F:41:CD:1B:38:BE:FF:83:96:C2:58:42:49
            X509v3 Authority Key Identifier:
                keyid:9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231362e302f32332d3234203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:3d:eb:57:0c:64:e1:9c:a6:d5:2f:f6:30:36:a4:51:20:87:
         47:d5:4c:ae:a1:9c:b3:fa:8b:08:32:a0:bc:f9:29:77:5c:0e:
         de:f5:13:f6:0d:95:85:75:56:87:ae:db:b1:91:85:a0:dc:1e:
         af:b6:a3:ab:1c:f9:57:c7:3f:2b:0d:67:8d:94:14:3a:76:19:
         2f:8e:83:93:a0:ba:c5:27:52:b7:6f:13:4f:7f:43:e9:2e:db:
         51:9c:02:ee:d7:49:60:d5:7c:7f:2e:db:aa:2d:62:f1:b8:83:
         64:cd:2b:44:e4:f2:b0:bf:fa:a8:28:35:f3:4e:5e:ea:00:8c:
         4b:70:8b:d8:72:47:ea:0f:e9:54:3b:69:01:e8:59:eb:cf:89:
         5d:98:0f:0f:04:61:fc:53:dd:72:c1:5f:24:4a:68:2f:a6:d8:
         23:a7:01:64:7f:c7:ea:96:78:14:cd:f7:bb:40:4d:ae:f3:26:
         07:fa:df:75:92:e7:1b:87:4c:15:07:64:4b:89:bf:9e:09:14:
         24:19:b9:9d:3f:68:3c:1b:08:28:0e:51:cb:09:80:7f:f7:26:
         db:cf:74:6a:dc:7e:bd:4e:d3:b6:98:17:13:a0:99:65:38:b6:
         f1:5d:fa:43:ea:1a:f5:45:b3:ce:7d:7b:e9:62:b7:e0:aa:4a:
         28:09:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org