Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130342e302f32322d3234203d3e20323731323930.roa
File:                     3230302e342e3130342e302f32322d3234203d3e20323731323930.roa (raw, json)
Hash identifier:          5Tfuoi7ZifwSptnKAOVK7b1OeZSFBpHJPED4olTLmFk=
Subject key identifier:   BB:DF:61:FC:14:C0:54:7A:19:CD:80:54:B4:9A:F8:55:46:49:E9:18
Certificate issuer:       /CN=37B8A9720C647536D52213E76F8A399EB36DE1DE
Certificate serial:       23F98A3202CB0B06ACC281AE59CC2403C6F2A8DE
Authority key identifier: 37:B8:A9:72:0C:64:75:36:D5:22:13:E7:6F:8A:39:9E:B3:6D:E1:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37B8A9720C647536D52213E76F8A399EB36DE1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130342e302f32322d3234203d3e20323731323930.roa
Signing time:             Wed 04 Jan 2023 14:04:20 +0000
ROA not before:           Wed 04 Jan 2023 13:59:20 +0000
ROA not after:            Wed 03 Jan 2024 14:04:20 +0000
asID:                     271290
IP address blocks:        200.4.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f9:8a:32:02:cb:0b:06:ac:c2:81:ae:59:cc:24:03:c6:f2:a8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37B8A9720C647536D52213E76F8A399EB36DE1DE
        Validity
            Not Before: Jan  4 13:59:20 2023 GMT
            Not After : Jan  3 14:04:20 2024 GMT
        Subject: CN=BBDF61FC14C0547A19CD8054B49AF8554649E918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:43:6e:fc:66:a6:19:a4:3b:a6:45:a6:83:be:
                    bc:b5:4a:7d:78:7b:ec:8d:39:86:d5:bb:80:b9:22:
                    56:0d:a2:58:c4:54:c7:65:7e:83:b8:d6:09:ee:51:
                    c2:a5:a4:38:ea:86:fc:7e:93:54:50:ce:14:52:15:
                    e0:1c:be:c5:6e:17:40:57:50:f2:63:02:d2:f1:f1:
                    72:11:43:9b:00:a3:e4:11:e8:b5:ee:67:8f:65:f1:
                    f2:a0:50:84:e3:34:65:70:bc:29:c3:84:af:49:20:
                    3a:09:1a:7a:14:63:d9:d3:03:68:26:38:79:13:46:
                    0b:f1:af:61:4a:6f:a4:4c:18:44:26:7c:a9:7d:1e:
                    0e:1a:00:8a:b6:c4:84:7c:1f:59:1b:8f:70:86:6d:
                    b3:db:6a:62:25:59:0e:49:21:8f:31:35:bb:ad:fb:
                    7a:5c:f5:44:e6:4a:a0:84:74:9e:06:fd:63:63:d4:
                    20:b0:17:f4:93:4a:87:67:a3:51:46:a6:08:25:90:
                    0d:7d:57:3c:72:48:1d:c5:76:01:b3:d8:cb:20:5c:
                    9a:6c:4f:f0:1e:f7:c6:bd:4b:36:13:85:d6:9f:66:
                    f5:a2:e9:2e:9e:c5:aa:15:49:db:13:d1:c3:80:f7:
                    1b:95:f6:42:e0:29:e6:2a:9a:22:e6:1e:68:ed:6f:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DF:61:FC:14:C0:54:7A:19:CD:80:54:B4:9A:F8:55:46:49:E9:18
            X509v3 Authority Key Identifier:
                keyid:37:B8:A9:72:0C:64:75:36:D5:22:13:E7:6F:8A:39:9E:B3:6D:E1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/37B8A9720C647536D52213E76F8A399EB36DE1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37B8A9720C647536D52213E76F8A399EB36DE1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130342e302f32322d3234203d3e20323731323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:a3:57:ce:5f:f6:85:7a:22:c2:30:18:73:a6:9e:4c:1c:80:
         26:68:8b:25:c5:46:3e:51:9f:02:fd:6d:51:56:8d:7f:3c:06:
         9e:3e:54:8e:07:38:fb:5c:cc:04:b5:03:55:3d:90:f7:73:3b:
         46:fa:ed:8f:1e:dd:e5:26:c2:72:e6:9e:f0:d8:08:6d:d6:ed:
         9c:29:5a:00:63:92:ce:2f:77:04:54:f7:ba:98:11:eb:a8:95:
         b1:7e:ea:51:20:3d:72:03:99:7a:bb:73:93:51:22:43:b0:f4:
         75:17:d0:a3:82:ca:9c:ba:d9:04:16:57:a7:b8:da:1b:03:1c:
         47:29:8f:58:ef:5a:c8:7e:ff:67:69:2e:10:e0:c9:0f:c5:42:
         ca:8b:12:5a:9c:0f:6b:c8:42:77:87:03:db:6a:08:2d:07:66:
         9b:a0:6e:4c:10:b0:81:06:86:32:b6:54:d7:8e:23:49:19:83:
         31:52:56:8e:80:0d:66:45:3e:77:1f:4f:96:66:c6:c0:d4:8f:
         f7:72:95:92:10:08:e6:31:f5:cd:37:76:fe:6d:c8:71:5f:cb:
         78:87:a7:36:03:5c:91:0b:8c:1e:e2:75:fa:a7:ba:a2:ed:4b:
         1d:e4:b9:f2:f3:6d:7c:5f:9b:48:15:3f:f7:a0:f5:31:31:98:
         b6:1c:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org