Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa
File:                     3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa (raw, json)
Hash identifier:          MyTQn1lVg1PZ5+zu89J/GRqYHUl8tNTdJ7Khk7zTZ9s=
Subject key identifier:   E1:C9:4E:9D:24:41:7C:0F:96:22:5C:E9:13:F4:FF:A2:96:69:7C:E3
Certificate issuer:       /CN=E9A6A6503F4282A7AF294B34F602D222F92F0C7C
Certificate serial:       7B6013CBBC1B3A3FE8AA385072E3DF16CD4006BB
Authority key identifier: E9:A6:A6:50:3F:42:82:A7:AF:29:4B:34:F6:02:D2:22:F9:2F:0C:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa
Signing time:             Thu 29 Jun 2023 15:00:00 +0000
ROA not before:           Thu 29 Jun 2023 14:55:00 +0000
ROA not after:            Thu 27 Jun 2024 15:00:00 +0000
asID:                     270279
IP address blocks:        200.124.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:60:13:cb:bc:1b:3a:3f:e8:aa:38:50:72:e3:df:16:cd:40:06:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A6A6503F4282A7AF294B34F602D222F92F0C7C
        Validity
            Not Before: Jun 29 14:55:00 2023 GMT
            Not After : Jun 27 15:00:00 2024 GMT
        Subject: CN=E1C94E9D24417C0F96225CE913F4FFA296697CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:f7:c0:53:02:c0:a1:71:c2:cd:89:11:ba:
                    d4:6a:5c:66:6e:ed:2c:9e:91:24:c5:bf:01:39:b3:
                    57:3d:4d:85:f9:1a:08:85:55:41:0f:2e:26:a6:2d:
                    90:aa:7d:ea:a6:69:0b:5f:f0:38:1f:24:d5:92:da:
                    32:e8:5a:05:4d:18:3e:1a:b4:06:e9:c7:94:36:7f:
                    17:ae:8c:ea:b6:b6:92:af:0a:25:8a:a0:0f:b2:2d:
                    c1:9c:20:5f:85:06:3f:ca:dd:78:9c:b8:9c:83:42:
                    61:37:2f:69:9c:80:18:fe:79:1d:c8:cc:17:75:3c:
                    17:22:fc:16:5c:70:57:f8:21:a4:4e:c1:9b:bc:7d:
                    d7:3c:c1:b6:a7:58:e8:e7:eb:08:a8:63:be:8a:37:
                    29:63:c8:5b:d3:f7:a9:3a:00:d3:27:fe:0f:63:a4:
                    fe:06:23:22:50:be:1d:64:c2:e7:10:b9:18:a9:5e:
                    e2:f3:78:33:bd:90:d0:52:57:07:28:47:bf:9b:ac:
                    17:e3:a1:a2:70:94:5b:b1:f0:b9:95:a7:29:34:13:
                    90:03:3b:86:a2:8d:48:c8:3c:d4:fd:a4:d0:e7:c4:
                    fa:d5:29:aa:be:cd:74:3d:96:fd:9e:6b:a0:e6:d3:
                    08:ce:5b:3d:fc:af:9b:26:36:02:c0:12:f9:f2:75:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C9:4E:9D:24:41:7C:0F:96:22:5C:E9:13:F4:FF:A2:96:69:7C:E3
            X509v3 Authority Key Identifier:
                keyid:E9:A6:A6:50:3F:42:82:A7:AF:29:4B:34:F6:02:D2:22:F9:2F:0C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:fb:bc:f6:e9:08:05:29:d1:ee:3e:b5:47:19:e5:12:c4:
         6e:c6:cd:a0:f8:4e:73:ed:33:f2:99:b4:26:12:d9:42:5b:cf:
         59:6d:d6:1f:bf:92:19:89:86:df:c8:e9:e4:11:d6:f8:a5:4a:
         b8:f9:48:42:fc:10:e3:52:ae:69:43:c1:e5:8c:03:e0:03:5b:
         d3:9d:67:ca:78:d5:a1:3f:ed:ca:35:81:18:0e:c0:11:00:48:
         68:58:df:21:05:b2:15:c9:a3:e1:27:1f:22:04:8d:ea:d7:16:
         46:11:a6:11:5a:f5:04:e0:d6:70:e1:7d:c7:ac:34:32:76:d6:
         d1:8d:b3:cc:f2:5b:a0:47:4b:07:13:ff:cd:43:5a:a8:03:a2:
         5b:4a:b7:57:0b:42:51:83:cb:eb:04:57:1e:9d:19:e4:33:17:
         3c:df:b3:bc:f2:7d:bd:85:07:af:5a:e8:04:35:74:a7:23:16:
         ec:dd:58:f4:be:b3:23:c7:41:f5:b4:fa:83:80:2f:87:c1:ad:
         de:ed:df:01:52:b8:6f:1e:bf:6d:80:7b:e4:c4:cd:f2:eb:0f:
         ab:7d:18:6d:d7:34:82:84:66:d5:28:5a:53:4e:0d:4d:17:ea:
         11:60:15:66:6c:84:24:a3:c0:61:dc:9a:7d:3d:2d:0e:7d:fd:
         22:40:61:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org