Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/0/3230302e3232392e39322e302f32322d3232203d3e203238313838.roa
File:                     3230302e3232392e39322e302f32322d3232203d3e203238313838.roa (raw, json)
Hash identifier:          S0tRj8NNrKkDItOs4LgIpzVb4FBmSz4ArsGJwMTVlE8=
Subject key identifier:   C4:66:AE:A5:66:46:A3:37:E2:DD:FE:BE:51:90:C7:EF:E1:B8:79:A4
Certificate issuer:       /CN=0277D84F95D20DA84E9E9F348752BD6D3593E434
Certificate serial:       64C4DE2859498EDB7D375C139CC8717F7EBA49CB
Authority key identifier: 02:77:D8:4F:95:D2:0D:A8:4E:9E:9F:34:87:52:BD:6D:35:93:E4:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0277D84F95D20DA84E9E9F348752BD6D3593E434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/0/3230302e3232392e39322e302f32322d3232203d3e203238313838.roa
Signing time:             Tue 19 Dec 2023 22:11:23 +0000
ROA not before:           Tue 19 Dec 2023 22:06:23 +0000
ROA not after:            Tue 17 Dec 2024 22:11:23 +0000
asID:                     28188
IP address blocks:        200.229.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c4:de:28:59:49:8e:db:7d:37:5c:13:9c:c8:71:7f:7e:ba:49:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277D84F95D20DA84E9E9F348752BD6D3593E434
        Validity
            Not Before: Dec 19 22:06:23 2023 GMT
            Not After : Dec 17 22:11:23 2024 GMT
        Subject: CN=C466AEA56646A337E2DDFEBE5190C7EFE1B879A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:b8:cf:55:8c:d0:ca:e9:2a:fd:cf:4c:53:
                    df:3b:7d:de:a8:40:db:8e:25:17:a0:54:cd:c9:20:
                    f3:b6:98:ee:42:fe:85:8b:83:69:94:0c:43:5d:7e:
                    05:91:1b:60:a8:01:62:71:63:e4:78:ba:73:61:38:
                    7d:f0:16:fb:e8:4f:5e:7a:8b:63:40:d9:0e:d6:fd:
                    23:15:81:02:de:7a:5f:c5:b1:af:a0:bd:ca:7d:45:
                    e7:15:d9:9f:d5:35:ba:ac:c5:a8:51:fd:17:27:66:
                    db:16:cd:4c:ac:8f:96:95:ca:1c:41:38:76:cc:cc:
                    44:d0:12:7d:2e:d6:48:1a:81:56:0c:ca:45:7b:18:
                    ac:82:9c:63:6a:75:31:94:18:ed:43:fc:e6:b9:2f:
                    f6:f0:27:0a:4e:78:4b:05:07:b1:e8:39:8d:08:35:
                    fc:b5:16:ba:d7:63:09:b0:4e:af:a3:f4:17:f9:48:
                    d0:0e:69:68:c5:55:bd:4d:f8:c6:6c:ff:86:5d:2c:
                    12:6e:53:17:1e:ac:94:74:90:99:c0:60:ab:bc:f7:
                    36:f5:a4:a8:af:2d:a2:69:2d:e8:7c:57:32:21:4f:
                    6a:eb:11:2b:ce:77:5e:91:00:73:35:c0:97:10:c1:
                    a9:cd:86:bb:ee:63:d4:55:a1:c5:58:cf:2e:83:a2:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:66:AE:A5:66:46:A3:37:E2:DD:FE:BE:51:90:C7:EF:E1:B8:79:A4
            X509v3 Authority Key Identifier:
                keyid:02:77:D8:4F:95:D2:0D:A8:4E:9E:9F:34:87:52:BD:6D:35:93:E4:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/0/0277D84F95D20DA84E9E9F348752BD6D3593E434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0277D84F95D20DA84E9E9F348752BD6D3593E434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/0/3230302e3232392e39322e302f32322d3232203d3e203238313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:61:14:6c:76:84:5e:c3:37:4c:5d:08:52:b3:3d:b1:28:3d:
         fd:01:25:dc:db:28:51:ab:6e:82:ed:0f:9b:56:b3:1b:34:fa:
         57:b3:8b:13:b8:cc:be:53:f4:2b:5a:9b:5d:bc:6c:e5:4b:14:
         33:84:76:19:6a:6a:fd:fb:6d:c6:9e:19:41:ee:43:3e:ae:73:
         6d:49:42:47:61:02:28:c1:87:3c:02:30:79:77:fc:82:0f:5f:
         2e:6c:36:b9:31:97:86:a8:aa:75:73:b7:94:b4:4f:8c:f1:25:
         88:08:ac:27:97:1e:70:bf:2c:8c:e5:c9:42:a1:67:65:5f:10:
         02:2d:39:07:0f:ee:96:98:1f:ee:73:d3:a2:d0:49:ee:72:49:
         5e:20:93:9c:e8:77:f9:0c:61:de:17:5e:65:21:85:85:c4:b2:
         23:c6:8c:91:b6:e5:bb:5a:69:b3:8a:96:20:2b:f7:3d:f9:fc:
         3b:3c:a7:55:06:7c:d3:94:2c:89:b6:b6:73:83:bd:24:65:97:
         84:1d:f4:8f:40:f3:91:a6:95:9c:f2:64:a6:9c:28:54:75:85:
         22:99:5d:62:3c:bb:f9:fd:b1:00:6b:e3:4a:b8:e5:71:cd:55:
         9e:7a:76:66:5a:da:56:45:9d:ce:3a:35:44:20:8f:fd:b2:13:
         84:1e:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org