Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/3230302e3231392e31382e302f32332d3233203d3e20323730383130.roa
File:                     3230302e3231392e31382e302f32332d3233203d3e20323730383130.roa (raw, json)
Hash identifier:          ZzPZvIDjBiNC/GDfWcZ7KMlPIfrYmUQ0ZvfQ6RphKcI=
Subject key identifier:   29:A7:CC:BA:60:CC:CF:2F:45:82:71:6D:E9:1D:35:C0:99:0F:FF:95
Certificate issuer:       /CN=E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC
Certificate serial:       7A2A3B6672DB8C98C5051546CB019C4F3542D5AB
Authority key identifier: E5:07:00:E4:BD:71:D1:CD:31:A3:AC:9C:49:37:7B:D7:88:7F:A5:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/3230302e3231392e31382e302f32332d3233203d3e20323730383130.roa
Signing time:             Thu 04 Apr 2024 22:11:39 +0000
ROA not before:           Thu 04 Apr 2024 22:06:39 +0000
ROA not after:            Thu 03 Apr 2025 22:11:39 +0000
asID:                     270810
IP address blocks:        200.219.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2a:3b:66:72:db:8c:98:c5:05:15:46:cb:01:9c:4f:35:42:d5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC
        Validity
            Not Before: Apr  4 22:06:39 2024 GMT
            Not After : Apr  3 22:11:39 2025 GMT
        Subject: CN=29A7CCBA60CCCF2F4582716DE91D35C0990FFF95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:6f:c6:aa:a6:75:1e:0d:36:23:53:fb:30:
                    e0:50:8b:31:6c:9e:b4:d5:67:58:b6:a1:df:72:8b:
                    24:14:b1:32:c0:89:05:9d:15:1a:3e:98:ad:15:8c:
                    b3:0a:8d:19:c0:fe:a8:10:96:0d:1b:b6:71:ea:fa:
                    99:31:26:50:21:7a:d1:77:11:c9:c8:4a:0e:03:a5:
                    a8:fa:82:a5:54:c0:34:ac:33:bd:a9:ae:9b:a2:37:
                    f4:6c:25:03:4b:23:9e:54:22:06:9d:30:9c:8b:3b:
                    ed:1c:1f:80:47:2e:49:14:ef:80:05:4a:cb:d2:dd:
                    c4:d7:10:8d:fb:ce:b5:10:2a:c2:61:af:15:8f:dc:
                    78:14:da:1c:ae:c1:77:59:43:05:5d:5b:ae:f2:77:
                    f7:5a:f7:5a:20:9a:86:20:5e:03:91:dc:ff:b3:9d:
                    d4:4d:f9:d0:1b:c6:8c:3c:45:69:44:5b:8b:2b:96:
                    2a:b1:15:b1:6c:d6:52:3f:54:75:a0:ef:5e:93:7d:
                    05:ba:31:76:63:59:c9:5f:b6:85:e3:7d:23:f1:03:
                    9f:0f:28:34:13:ac:a8:0c:3d:63:0d:72:53:53:e6:
                    bc:1e:0e:57:8d:7d:8e:41:2e:ef:fc:d4:02:70:23:
                    eb:57:4f:fa:e3:0d:17:14:46:3b:1f:58:63:0d:10:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A7:CC:BA:60:CC:CF:2F:45:82:71:6D:E9:1D:35:C0:99:0F:FF:95
            X509v3 Authority Key Identifier:
                keyid:E5:07:00:E4:BD:71:D1:CD:31:A3:AC:9C:49:37:7B:D7:88:7F:A5:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E50700E4BD71D1CD31A3AC9C49377BD7887FA5DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/2/3230302e3231392e31382e302f32332d3233203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:15:8b:07:9b:6f:bd:93:27:5a:68:3f:77:3c:ce:f7:85:25:
         68:c2:ad:c3:02:95:60:b8:c4:d1:38:31:b0:b6:49:0a:fb:60:
         b0:d1:82:3e:6e:13:3a:aa:65:2a:12:a7:ad:d3:b5:81:be:52:
         ca:ed:73:b8:0c:3d:92:2f:7b:92:b6:e4:e4:f3:56:0c:c3:ab:
         a1:26:01:e6:dc:d1:b6:9f:4e:55:a5:e3:49:e3:09:c1:17:f9:
         d0:08:e9:74:2f:97:a2:8c:48:63:83:e7:ec:8d:5d:fa:3f:06:
         e4:2b:c4:6d:f9:3e:f1:68:4e:17:23:c4:99:b3:b1:73:33:56:
         5e:95:4e:fb:77:fe:64:09:74:ba:61:80:81:f0:09:de:85:8a:
         ce:e9:f8:32:8a:04:82:80:e4:a6:c9:86:fa:86:14:bb:64:0a:
         10:79:3d:69:e8:f0:bc:65:5d:01:3f:93:71:8c:1e:02:e7:4a:
         3c:ad:51:37:88:02:59:de:8e:dd:48:a3:1d:da:10:9d:95:49:
         a6:32:44:3a:d0:93:4d:35:95:8f:67:df:78:dd:11:6c:a5:08:
         31:28:55:95:6e:7e:7f:a7:a1:ec:a6:2e:ac:e8:54:86:39:48:
         f9:3f:b7:9d:43:3b:c4:eb:e7:0a:e5:0e:98:f1:be:1b:d8:0d:
         4b:53:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org