Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
File:                     3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa (raw, json)
Hash identifier:          kr6UQ1F7nUiOHcjJAjMz6hRuNV78ImpmEVS9IoEbMO8=
Subject key identifier:   EC:F1:60:6D:41:E3:21:18:96:A1:4D:16:24:05:E6:EC:38:87:72:F6
Certificate issuer:       /CN=E9A6A6503F4282A7AF294B34F602D222F92F0C7C
Certificate serial:       33FA8171CA7E90A28A7D96EC3526D5F6F0FD24D8
Authority key identifier: E9:A6:A6:50:3F:42:82:A7:AF:29:4B:34:F6:02:D2:22:F9:2F:0C:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
Signing time:             Thu 29 Jun 2023 15:00:00 +0000
ROA not before:           Thu 29 Jun 2023 14:55:00 +0000
ROA not after:            Thu 27 Jun 2024 15:00:00 +0000
asID:                     270279
IP address blocks:        200.124.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fa:81:71:ca:7e:90:a2:8a:7d:96:ec:35:26:d5:f6:f0:fd:24:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A6A6503F4282A7AF294B34F602D222F92F0C7C
        Validity
            Not Before: Jun 29 14:55:00 2023 GMT
            Not After : Jun 27 15:00:00 2024 GMT
        Subject: CN=ECF1606D41E3211896A14D162405E6EC388772F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:6c:63:42:61:7d:c1:e7:cc:b9:e2:8a:81:
                    44:d9:00:ce:01:63:58:43:86:81:72:f5:39:88:b1:
                    48:98:21:f1:e6:5a:79:d9:bc:db:31:97:49:75:62:
                    9a:ba:46:b7:18:9f:ee:d1:4e:14:88:6b:b1:5a:21:
                    cf:62:96:5f:28:07:46:94:98:e3:6e:07:79:b2:c0:
                    0a:a4:e2:83:0a:7d:1d:41:b5:5b:75:60:1e:0b:2a:
                    0b:d3:81:13:2e:0d:44:93:76:6d:91:a4:92:c5:9d:
                    cd:11:3c:dc:3b:25:bd:6d:8f:82:d2:ed:11:38:e3:
                    73:05:f9:c3:04:af:7f:1f:bb:37:7b:75:de:0f:c2:
                    f9:49:ba:2c:78:9c:02:3f:b8:1e:a7:52:68:f8:bc:
                    27:1e:6f:71:77:76:8b:82:70:d4:5f:3b:31:97:cb:
                    de:f1:9c:3e:eb:35:0b:25:6b:1d:ff:4b:d6:27:a7:
                    1d:1c:9e:96:35:1a:c6:00:64:6d:b2:3d:29:5a:e3:
                    1a:4f:01:f4:40:02:d1:4f:20:1b:cc:54:53:b6:bf:
                    f5:64:22:c9:9e:8b:e4:91:16:1d:a9:63:cb:8e:42:
                    97:f5:fe:56:39:6d:41:de:f2:47:15:f5:23:25:6d:
                    5d:e6:c0:04:ae:33:c7:57:dd:27:a4:8b:29:d9:8b:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F1:60:6D:41:E3:21:18:96:A1:4D:16:24:05:E6:EC:38:87:72:F6
            X509v3 Authority Key Identifier:
                keyid:E9:A6:A6:50:3F:42:82:A7:AF:29:4B:34:F6:02:D2:22:F9:2F:0C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:59:75:bd:8a:f0:cf:59:f5:83:86:cd:2c:45:ea:a9:66:b7:
         ae:d4:bc:ed:d4:c5:d4:fa:66:cb:61:23:ac:a2:77:d2:71:8d:
         bd:9a:31:ba:bb:f3:aa:e1:d1:b3:16:0d:21:16:62:8b:26:e0:
         f8:ae:03:01:6d:54:03:00:4b:24:85:5e:7b:53:aa:9b:fa:da:
         ba:36:4a:64:47:64:05:3d:53:c5:d4:dc:49:54:03:75:85:94:
         65:e1:93:e9:27:3a:07:f2:b8:e9:3d:0b:9e:bf:b4:60:fa:4b:
         d5:7c:15:e8:c2:38:5d:33:27:ef:df:47:cc:ca:f0:c1:68:e6:
         54:82:9c:f0:0d:82:79:ba:1c:71:20:b1:10:51:5c:7a:8e:f6:
         b0:53:f6:6b:a8:05:c3:17:4a:51:b1:74:51:13:5f:ff:e7:a9:
         e3:7f:f7:c2:e6:77:4f:ea:f6:bc:2e:0e:61:0b:05:d6:ad:2c:
         c7:09:b5:bd:e3:ab:d1:cd:5a:a0:5f:67:9e:66:ea:2b:53:d4:
         37:a1:ef:da:8e:6e:86:eb:c1:dd:5f:0d:d6:ce:90:e4:c3:cf:
         fa:bd:08:2a:bf:fe:df:53:cd:60:7a:eb:bc:d4:46:42:ee:10:
         eb:05:3a:cb:9f:46:a3:21:5f:3d:86:7a:ba:e2:ff:b3:90:df:
         26:29:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org