Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/1/3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa
File:                     3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa (raw, json)
Hash identifier:          4c+fcz3W7snJfHD4OstqL4tRlwliANiXRq8nDEAmqN4=
Subject key identifier:   CA:9F:CD:2C:98:62:87:8B:A7:3D:2F:84:E4:D2:B5:C9:C5:A9:B7:77
Certificate issuer:       /CN=2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB
Certificate serial:       11F004B7F2AF9BBD4C3C2C2BC54806C4E30DAA4A
Authority key identifier: 2E:6A:51:3E:D4:E2:4C:B1:1D:0D:62:1B:DB:94:CD:A5:F2:53:65:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/1/3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa
Signing time:             Wed 06 Sep 2023 19:34:34 +0000
ROA not before:           Wed 06 Sep 2023 19:29:34 +0000
ROA not after:            Wed 04 Sep 2024 19:34:34 +0000
asID:                     270280
IP address blocks:        200.125.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f0:04:b7:f2:af:9b:bd:4c:3c:2c:2b:c5:48:06:c4:e3:0d:aa:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB
        Validity
            Not Before: Sep  6 19:29:34 2023 GMT
            Not After : Sep  4 19:34:34 2024 GMT
        Subject: CN=CA9FCD2C9862878BA73D2F84E4D2B5C9C5A9B777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:89:38:86:77:7e:f2:33:4f:88:82:27:8b:
                    1c:2e:7a:58:97:04:fb:b2:ba:69:4d:0a:78:49:68:
                    47:5b:dd:66:eb:9f:3b:77:6e:02:83:37:7d:b5:94:
                    11:4a:38:4b:5d:7b:a5:49:a0:62:76:b7:48:1e:cd:
                    61:52:c2:51:41:c4:30:8a:fe:17:2e:f0:ea:35:55:
                    ff:b1:4c:93:cc:7c:de:e1:35:ff:41:76:8b:0b:3c:
                    0c:db:c6:f1:97:4a:33:80:0b:16:94:e3:e1:66:8c:
                    20:a7:68:02:18:0e:10:34:d6:bf:0f:00:de:bb:fd:
                    18:e8:ca:9a:78:ab:9b:50:91:30:83:dc:9d:ec:cb:
                    21:e1:37:ed:d4:82:1d:13:ee:a7:c5:10:58:d9:ea:
                    80:c7:f2:e2:39:e1:e7:94:77:18:45:66:d1:b3:99:
                    72:72:3d:fa:ae:9d:1a:2a:29:92:94:07:c7:2d:3f:
                    b4:ee:e1:f4:2f:7c:b4:08:b0:33:2e:e0:48:ee:a7:
                    2a:e6:06:57:70:3a:a5:1e:c8:ab:ad:62:01:1f:82:
                    61:93:c1:ef:5e:06:4b:d4:36:b0:8a:95:bb:90:6d:
                    42:58:f4:66:a6:71:e6:ed:77:d5:90:76:c6:91:52:
                    ae:9e:13:ef:14:53:64:2c:78:fe:1e:02:bb:9b:89:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9F:CD:2C:98:62:87:8B:A7:3D:2F:84:E4:D2:B5:C9:C5:A9:B7:77
            X509v3 Authority Key Identifier:
                keyid:2E:6A:51:3E:D4:E2:4C:B1:1D:0D:62:1B:DB:94:CD:A5:F2:53:65:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/1/2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E6A513ED4E24CB11D0D621BDB94CDA5F25365CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/1/3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:5b:5b:b9:5f:45:fd:64:7e:b4:9d:50:54:23:96:7c:45:
         25:e8:cb:2f:7d:54:8a:e0:47:27:3d:8a:ad:b5:d1:2a:b7:c7:
         0f:d5:db:35:51:30:b4:02:54:b5:bd:a8:ed:03:b5:b2:42:09:
         d7:48:53:d1:14:fa:76:98:00:02:0e:f2:38:b6:6e:7a:3d:a9:
         49:04:9a:04:bd:27:80:db:a2:cb:84:ad:c8:d9:fd:61:f6:3e:
         0f:32:88:1a:69:6a:10:1c:f3:71:db:3f:0f:66:16:e9:45:15:
         50:67:81:bd:6c:83:38:5a:22:74:74:8d:0c:e8:89:d7:11:35:
         33:4b:58:cc:67:e6:15:e1:16:2b:38:9f:76:32:d7:5a:72:02:
         8c:fd:f2:ae:0f:58:ca:50:21:26:4f:7d:f2:63:c4:73:fa:d9:
         92:05:bf:f1:d2:77:d3:a6:8c:9d:b0:cd:a7:aa:5a:be:8f:ee:
         cb:9d:c2:e8:f7:ec:10:26:8b:a6:54:46:d0:a9:e0:c1:60:a6:
         a1:b9:c1:85:7b:9f:0c:d1:33:48:03:0d:50:a7:d7:98:df:78:
         e5:9b:78:a5:d8:f8:9e:97:ca:f3:52:79:90:6e:53:a0:0b:bf:
         e9:8e:f6:83:e0:25:d1:70:06:63:25:50:71:a1:c7:01:01:51:
         c1:a2:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org