Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          nYVfTJw0ZvPbuMrjyavRUsIzPjk8MbTzOAGJyyTqUAc=
Subject key identifier:   69:A9:4F:B9:49:09:64:5A:96:BF:04:44:F5:2A:20:9E:06:98:3F:72
Certificate issuer:       /CN=59BFA2FF28275A2F301C7FB1117398C02B8E40A3
Certificate serial:       61715908DE6C415D2A53C69611BDAE454B6C8957
Authority key identifier: 59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa
Signing time:             Thu 23 Nov 2023 14:23:14 +0000
ROA not before:           Thu 23 Nov 2023 14:18:14 +0000
ROA not after:            Thu 21 Nov 2024 14:23:14 +0000
asID:                     270815
IP address blocks:        200.229.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:71:59:08:de:6c:41:5d:2a:53:c6:96:11:bd:ae:45:4b:6c:89:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59BFA2FF28275A2F301C7FB1117398C02B8E40A3
        Validity
            Not Before: Nov 23 14:18:14 2023 GMT
            Not After : Nov 21 14:23:14 2024 GMT
        Subject: CN=69A94FB94909645A96BF0444F52A209E06983F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:f0:b6:59:83:55:f9:45:f0:33:da:f6:e2:
                    f7:f2:f1:64:ae:d2:51:64:7b:f4:40:ea:f2:69:b1:
                    02:2f:3b:34:13:7d:42:48:5b:08:e9:1b:af:96:93:
                    74:b8:c5:82:81:96:ba:ce:a1:10:cf:1f:32:6e:1c:
                    0b:47:72:0d:83:be:f8:87:63:32:0f:73:4b:fb:73:
                    ee:2c:f1:04:ef:9c:9b:43:65:46:a0:90:52:e1:91:
                    4f:0d:17:9b:ce:be:bf:28:96:88:e5:13:15:82:79:
                    b1:e1:d4:76:3c:20:ef:6d:f0:36:ed:bf:ed:16:40:
                    29:0f:65:d8:a8:8e:38:ae:2f:ae:97:87:65:83:9d:
                    05:f6:26:bf:62:ba:8e:4b:5c:1c:d5:63:21:90:3e:
                    da:ad:7b:a3:eb:1c:74:3b:67:5d:a0:64:df:fd:93:
                    ff:70:a5:8e:de:a8:00:2e:ba:c4:6e:b5:57:7d:7d:
                    f7:12:cc:04:36:80:9a:53:79:89:a0:6f:74:3d:a4:
                    72:00:1c:e4:a5:b4:b4:7d:c0:42:1d:a0:6d:fd:87:
                    55:0f:43:11:79:af:27:b4:43:28:ec:02:86:d5:68:
                    30:45:f9:f8:4c:df:2f:6d:ec:ee:c9:c6:e2:ed:cd:
                    dc:9a:0b:8f:32:5b:0a:76:0e:62:92:a8:c8:62:13:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:4F:B9:49:09:64:5A:96:BF:04:44:F5:2A:20:9E:06:98:3F:72
            X509v3 Authority Key Identifier:
                keyid:59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:c9:72:81:f6:3b:2f:18:4f:f0:19:ad:d1:23:ff:3d:d4:
         19:9e:94:43:e3:14:7b:fc:ed:03:5a:ce:a9:ad:5a:7b:d6:ec:
         36:8d:40:b9:61:49:dc:99:53:e9:f9:8b:bb:cd:18:02:89:87:
         65:08:db:8d:32:b6:17:f8:c4:a4:cb:30:af:20:3d:00:fe:fc:
         65:b3:d3:68:d2:60:55:db:b7:34:4a:fe:ff:4d:1e:b1:2e:6e:
         a8:bc:a8:0d:02:9f:19:76:b9:cf:02:d0:27:54:c7:ac:50:ee:
         93:63:fd:33:bc:0d:dc:a5:b2:3e:3e:45:04:18:32:52:b5:63:
         bf:5c:cd:c3:a4:23:51:52:45:8c:b5:ff:08:4f:fb:c0:db:b6:
         67:7c:05:1f:01:1c:c4:70:44:1f:38:74:84:a4:0d:5b:96:84:
         55:73:b6:5a:bb:99:52:49:b8:79:f4:3d:58:0d:81:39:47:2a:
         2c:96:71:e3:b4:e6:31:40:e7:a6:d6:bf:9e:55:d3:44:aa:4f:
         95:7c:f6:4d:6a:f1:53:11:50:aa:2e:a6:a6:2b:43:a7:ad:26:
         b0:85:89:84:51:03:3b:d8:90:ab:ea:f5:4e:f3:e9:18:40:af:
         4b:9e:36:e6:01:33:f7:88:2d:99:23:11:44:7f:81:af:40:04:
         c6:0d:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org