Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/3230302e3231392e31372e302f32342d3234203d3e20323730383130.roa
File:                     3230302e3231392e31372e302f32342d3234203d3e20323730383130.roa (raw, json)
Hash identifier:          bkVU5exU90yVctRuWsajbot0PUd2FJtidHRG33cWwoE=
Subject key identifier:   FE:A1:34:60:40:0B:61:13:5E:99:0C:97:9B:C6:3F:17:99:0A:BE:AD
Certificate issuer:       /CN=E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC
Certificate serial:       45B0E3DA3C89DD3A2339E5811091F3C37EFFCF35
Authority key identifier: E5:07:00:E4:BD:71:D1:CD:31:A3:AC:9C:49:37:7B:D7:88:7F:A5:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/3230302e3231392e31372e302f32342d3234203d3e20323730383130.roa
Signing time:             Thu 04 Apr 2024 22:11:40 +0000
ROA not before:           Thu 04 Apr 2024 22:06:40 +0000
ROA not after:            Thu 03 Apr 2025 22:11:40 +0000
asID:                     270810
IP address blocks:        200.219.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b0:e3:da:3c:89:dd:3a:23:39:e5:81:10:91:f3:c3:7e:ff:cf:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC
        Validity
            Not Before: Apr  4 22:06:40 2024 GMT
            Not After : Apr  3 22:11:40 2025 GMT
        Subject: CN=FEA13460400B61135E990C979BC63F17990ABEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:5b:c3:6f:90:c8:1c:ae:78:b8:7f:52:39:
                    f5:4c:be:ba:37:4b:6d:7f:1b:5a:9d:bd:54:5a:5d:
                    74:7d:df:17:9f:d7:31:95:30:7a:64:6a:03:b1:9e:
                    cd:fd:7e:1c:b4:87:01:87:c0:2b:9c:95:07:82:7c:
                    6e:cf:25:af:d4:26:88:0d:3e:44:0c:24:db:7b:70:
                    25:1c:69:10:2f:52:dc:2f:53:88:4d:61:12:dc:4e:
                    09:9e:ce:68:43:e7:6d:83:0e:06:e1:94:49:1d:d9:
                    44:d0:d3:1c:09:62:76:00:59:8b:cd:85:3a:01:75:
                    10:da:92:75:1f:de:7a:94:f7:8b:e5:31:2c:c1:98:
                    40:6d:8a:3a:d8:9e:4a:78:28:7a:e0:08:b6:3a:eb:
                    94:66:e7:e8:9c:26:8b:d0:0c:06:f2:ef:79:9b:45:
                    15:2b:27:9b:10:24:38:57:ed:0a:f1:0d:27:ae:e4:
                    b5:70:a9:ce:91:4c:a0:14:7d:9d:62:a4:4f:38:a6:
                    65:4a:ec:6b:8d:b1:1b:37:e6:93:2b:88:54:ac:54:
                    4b:28:f7:c3:db:6b:b5:8f:78:9d:85:b9:1c:ae:25:
                    18:db:44:a0:90:a2:91:e2:50:a2:d3:01:e8:16:37:
                    ce:69:cc:7a:de:1a:eb:61:d1:0b:30:c5:fb:d7:4b:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A1:34:60:40:0B:61:13:5E:99:0C:97:9B:C6:3F:17:99:0A:BE:AD
            X509v3 Authority Key Identifier:
                keyid:E5:07:00:E4:BD:71:D1:CD:31:A3:AC:9C:49:37:7B:D7:88:7F:A5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/3230302e3231392e31372e302f32342d3234203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:91:56:60:3e:c9:c2:25:22:bd:57:56:b8:58:1c:f9:5e:4c:
         64:4e:22:fc:56:9a:76:12:96:a9:0b:c1:49:d6:96:0e:97:91:
         2a:7a:5c:ed:78:e6:1e:f6:dc:ef:1c:98:57:03:dd:94:d6:34:
         18:da:99:14:df:96:0b:11:e6:47:8d:31:70:15:46:10:63:3c:
         c9:ce:1c:20:d9:5f:88:ce:38:f0:20:5c:9b:6b:76:d5:ed:ac:
         5d:ca:6d:f7:83:ab:d1:9e:2a:10:73:b4:aa:49:ea:a7:05:3d:
         df:50:2b:87:fc:6d:df:be:b4:cb:87:46:a6:fb:eb:6c:06:ec:
         a6:59:c1:19:77:d9:77:62:de:5c:67:7e:a4:59:10:28:b0:35:
         8f:d0:1f:88:92:42:71:9f:47:cc:ac:56:0c:11:4e:4b:92:4f:
         34:8e:fc:76:bf:fe:e3:51:b3:0f:79:d1:b4:bf:d9:97:f8:5f:
         cd:07:01:bc:0b:0c:93:bc:6e:37:21:ff:ed:e4:a0:a8:f7:ba:
         2a:b8:98:79:8a:0f:38:4e:c1:3d:a4:68:19:c6:b6:b7:fc:87:
         5e:7b:fd:62:72:bb:53:e6:ff:3f:87:37:fd:be:56:7c:73:a9:
         2e:71:06:87:4d:1c:12:37:81:d8:4c:6a:bc:e9:c7:32:bc:75:
         4c:0d:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org