Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3130382e302f32322d3234203d3e20323730343338.roa
File:                     3230302e31312e3130382e302f32322d3234203d3e20323730343338.roa (raw, json)
Hash identifier:          ApgF3WeD7xpEAUfx9S6F7aV7mW7X4T4Nj3GpW+BhRQg=
Subject key identifier:   CC:E5:75:D3:E4:FF:FE:79:D5:D2:5F:A9:2A:23:C1:E3:D4:E7:42:F0
Certificate issuer:       /CN=5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C
Certificate serial:       285868CFC0B24BF2F824B34CD9A59DB03E8ADDC4
Authority key identifier: 5D:E2:7C:AC:76:D0:2D:07:B1:A1:EC:1E:10:81:0E:D5:D7:5B:A7:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3130382e302f32322d3234203d3e20323730343338.roa
Signing time:             Thu 01 Dec 2022 17:05:47 +0000
ROA not before:           Thu 01 Dec 2022 17:00:47 +0000
ROA not after:            Thu 30 Nov 2023 17:05:47 +0000
asID:                     270438
IP address blocks:        200.11.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:58:68:cf:c0:b2:4b:f2:f8:24:b3:4c:d9:a5:9d:b0:3e:8a:dd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C
        Validity
            Not Before: Dec  1 17:00:47 2022 GMT
            Not After : Nov 30 17:05:47 2023 GMT
        Subject: CN=CCE575D3E4FFFE79D5D25FA92A23C1E3D4E742F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:7c:dd:78:aa:b6:64:ac:05:90:23:30:66:
                    97:94:fb:c2:12:02:9d:a8:20:17:8f:77:7c:f8:a7:
                    13:cf:c0:25:d7:6f:f6:58:58:14:04:e1:c1:13:2f:
                    36:af:89:e9:a1:8d:50:f2:36:a3:8e:ca:3d:e7:d4:
                    f4:2d:d6:34:fd:37:01:8e:6f:a1:f1:ff:67:1c:10:
                    fd:94:68:72:8e:5a:b5:9e:55:d9:79:f5:b8:36:c4:
                    66:4d:57:c9:68:58:77:bb:c0:3b:74:5c:95:92:61:
                    f0:af:7e:09:25:12:90:48:62:9e:c2:78:28:5d:3b:
                    9b:ae:34:f9:53:43:da:a7:e9:fe:e5:57:07:a1:44:
                    3d:82:34:2e:b4:4c:ef:c5:32:aa:e8:3a:7a:32:0d:
                    2e:dc:d1:18:c4:02:cb:cc:3a:e8:41:13:a1:13:4f:
                    c3:1b:e5:db:3a:80:51:52:c3:f2:01:8c:73:35:af:
                    47:2b:d0:4d:99:51:bf:8c:44:cc:dd:dc:52:73:a8:
                    d1:e5:b3:21:c5:2d:54:65:5a:f6:fb:75:1c:b0:17:
                    bc:7a:56:e8:83:c9:7b:55:a2:6c:4a:48:4d:2a:90:
                    28:d1:10:5c:5f:32:10:78:84:f6:41:26:ce:02:68:
                    ec:0a:11:63:7b:8c:27:48:12:cb:bf:d9:e5:c4:0f:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E5:75:D3:E4:FF:FE:79:D5:D2:5F:A9:2A:23:C1:E3:D4:E7:42:F0
            X509v3 Authority Key Identifier:
                keyid:5D:E2:7C:AC:76:D0:2D:07:B1:A1:EC:1E:10:81:0E:D5:D7:5B:A7:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3130382e302f32322d3234203d3e20323730343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:a2:20:86:f6:08:55:64:9b:c1:ac:44:b2:27:24:cd:f0:72:
         bf:89:49:6e:5c:42:8a:46:e7:86:6c:e4:e3:45:8f:58:81:32:
         27:22:08:26:22:4b:90:ab:be:d7:33:a8:d7:85:2d:05:6b:5e:
         f1:0c:a4:98:18:52:c3:74:e4:ca:eb:e3:c3:c1:9e:1a:f2:1e:
         2a:a3:76:08:ca:22:4d:06:f2:ad:c0:54:0b:4d:6a:a1:19:f2:
         5d:f2:28:ce:b9:df:1e:60:b7:7b:f5:6f:f0:67:7d:08:07:e3:
         58:d1:a7:3e:8e:3a:12:ec:c5:b5:57:07:7a:46:ff:07:23:9e:
         ef:74:5e:09:95:76:45:51:ea:5f:e9:14:e9:18:59:54:a7:e9:
         07:2f:02:ea:9d:01:c8:5d:83:18:9e:60:56:ba:c5:8d:74:05:
         64:19:b7:a4:81:7d:53:90:62:ee:cf:6c:15:a4:7e:c3:6e:a0:
         00:85:11:15:99:10:c8:66:94:de:9e:0d:7f:3a:2f:35:6a:bc:
         5d:59:c0:63:0d:fa:b0:35:1b:0e:fe:71:ec:f0:8b:2f:6f:5f:
         eb:a8:83:47:0c:8f:41:42:a2:62:78:b2:34:03:fc:9f:02:de:
         49:ba:78:cf:9c:cc:06:91:f0:04:2d:75:f1:79:17:5f:c3:aa:
         82:66:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org