Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/0/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa
File:                     3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa (raw, json)
Hash identifier:          +fcBv6RuMUgSTXJktxx5CAk5GU60Sr+NHBCtQ1ufCas=
Subject key identifier:   D0:96:54:45:6D:76:01:E7:2D:65:74:99:D4:44:FF:3D:47:32:EB:82
Certificate issuer:       /CN=0277D84F95D20DA84E9E9F348752BD6D3593E434
Certificate serial:       0389048541765939415C8F1D3AF5BF56373E3F05
Authority key identifier: 02:77:D8:4F:95:D2:0D:A8:4E:9E:9F:34:87:52:BD:6D:35:93:E4:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0277D84F95D20DA84E9E9F348752BD6D3593E434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/0/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa
Signing time:             Tue 19 Dec 2023 19:33:28 +0000
ROA not before:           Tue 19 Dec 2023 19:28:28 +0000
ROA not after:            Tue 17 Dec 2024 19:33:28 +0000
asID:                     266986
IP address blocks:        200.229.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:89:04:85:41:76:59:39:41:5c:8f:1d:3a:f5:bf:56:37:3e:3f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277D84F95D20DA84E9E9F348752BD6D3593E434
        Validity
            Not Before: Dec 19 19:28:28 2023 GMT
            Not After : Dec 17 19:33:28 2024 GMT
        Subject: CN=D09654456D7601E72D657499D444FF3D4732EB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:eb:18:46:c4:a7:d1:fa:8d:04:58:fe:74:
                    20:f5:f3:75:ff:74:05:b8:75:13:cd:e0:a3:3b:bb:
                    4a:fe:a6:07:46:a7:7e:ac:c3:4e:ab:d5:a6:a9:34:
                    5c:d0:a8:04:f3:dc:01:e6:9a:27:b5:9b:68:42:d2:
                    81:77:1d:28:36:ef:ab:d3:ae:11:ce:63:6a:be:a5:
                    80:27:37:40:e9:8c:28:f7:8a:ce:e2:8e:8d:6f:8a:
                    66:2b:9a:fe:5a:3d:08:2c:ca:6b:48:84:b5:05:b9:
                    ef:55:ac:f2:98:d6:cb:0a:ad:02:d3:ba:6a:3f:9c:
                    21:da:d4:be:71:19:24:79:26:cd:62:57:63:fc:d8:
                    82:95:19:ca:27:60:ed:e4:4e:4b:36:7c:6d:4a:49:
                    1a:77:c8:81:71:4c:bc:4a:bc:66:54:36:1f:96:de:
                    63:d9:22:af:d6:8d:97:17:f9:30:2d:73:53:6a:49:
                    1c:b3:9a:68:ed:be:6f:93:3d:5a:9b:02:54:6f:f8:
                    c5:31:74:a8:c4:ef:b1:cd:fc:e9:c3:74:20:d3:d5:
                    44:5e:9f:64:61:f9:17:9e:7a:e7:29:fa:77:70:5e:
                    c0:02:92:2e:c8:7c:11:f3:0b:f9:99:26:c5:93:48:
                    22:9e:d7:9e:57:07:3d:97:84:e9:a4:7c:18:f6:de:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:54:45:6D:76:01:E7:2D:65:74:99:D4:44:FF:3D:47:32:EB:82
            X509v3 Authority Key Identifier:
                keyid:02:77:D8:4F:95:D2:0D:A8:4E:9E:9F:34:87:52:BD:6D:35:93:E4:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/0/0277D84F95D20DA84E9E9F348752BD6D3593E434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0277D84F95D20DA84E9E9F348752BD6D3593E434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/0/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:e4:c4:50:3b:1a:77:02:00:dc:7a:31:5d:08:0d:29:40:
         7b:a4:20:ac:33:85:85:82:9e:d1:22:8b:34:72:fc:3d:b9:36:
         da:1e:e5:8b:94:8f:e6:29:f1:eb:7b:82:5f:a5:dc:1f:a3:4b:
         72:10:f6:9b:0f:7f:d1:ae:d8:41:51:63:eb:b3:fd:cf:ac:4a:
         03:f8:bc:d7:16:3e:5c:f3:ea:67:49:91:1e:79:6d:f5:d2:c3:
         07:6c:a2:b3:27:84:8a:fe:7b:55:dc:96:2d:c7:04:b8:ee:ff:
         5c:28:15:90:6d:f1:a1:0a:a6:41:96:fe:d7:36:00:65:4e:ed:
         db:46:96:54:78:f9:35:3e:04:49:e4:e8:60:5a:8c:fe:ea:81:
         b3:0c:65:9a:5b:ce:11:ec:64:03:6a:ff:de:d0:ea:3f:d8:0d:
         a6:f2:bb:74:48:d7:e0:d7:9b:d6:11:03:19:51:9c:43:29:7e:
         0d:ea:01:01:fb:2f:34:31:8e:f2:70:fc:80:1b:49:a6:00:0d:
         eb:9f:16:72:a5:be:d3:69:33:a6:06:7f:1e:f7:cb:3b:52:9b:
         75:84:ed:1f:05:d4:59:04:ec:c6:d2:f3:92:26:97:28:4c:b8:
         d7:90:e0:c9:f6:4e:8c:ca:d0:68:18:1d:97:89:4b:41:fb:ba:
         bb:8d:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org