Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3130382e302f32342d3234203d3e20323730343338.roa
File:                     3230302e31312e3130382e302f32342d3234203d3e20323730343338.roa (raw, json)
Hash identifier:          gvSFGpWppPZlGiStme/nK74KIGmn498HACNu6WLGatU=
Subject key identifier:   AB:F2:88:84:2F:58:60:21:83:2D:9E:03:88:66:CA:B6:3D:A3:27:E2
Certificate issuer:       /CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
Certificate serial:       4F296082B578C803DA53DABCAB98A13C353CBDD7
Authority key identifier: 55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3130382e302f32342d3234203d3e20323730343338.roa
Signing time:             Wed 01 Nov 2023 18:24:07 +0000
ROA not before:           Wed 01 Nov 2023 18:19:07 +0000
ROA not after:            Wed 30 Oct 2024 18:24:07 +0000
asID:                     270438
IP address blocks:        200.11.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:29:60:82:b5:78:c8:03:da:53:da:bc:ab:98:a1:3c:35:3c:bd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
        Validity
            Not Before: Nov  1 18:19:07 2023 GMT
            Not After : Oct 30 18:24:07 2024 GMT
        Subject: CN=ABF288842F586021832D9E038866CAB63DA327E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:4a:5d:f6:b2:a4:de:53:82:75:9f:48:f3:
                    4b:77:c3:22:73:4f:7a:e6:79:cb:ff:27:5e:41:36:
                    62:38:5f:bc:fe:35:c4:57:06:f7:4b:c6:29:84:67:
                    5e:dd:be:70:57:3b:30:77:d1:ac:19:91:3a:58:e6:
                    d0:25:f2:1c:cf:6c:61:7f:23:dd:e7:8b:d7:62:e1:
                    98:49:97:0d:ca:ec:6e:e3:c6:2e:33:a7:a8:6e:80:
                    60:70:bf:aa:82:16:75:27:6b:d0:16:cf:d3:94:8d:
                    22:66:78:6e:46:48:85:26:bf:7a:0d:72:8e:35:39:
                    39:d5:58:c2:f4:b3:12:bd:5f:d4:83:7d:68:0a:97:
                    8d:51:13:54:70:51:33:89:e0:fe:29:d0:ad:7a:b0:
                    71:7c:56:db:49:c3:19:b5:c9:2d:72:5f:b6:f5:db:
                    6f:d1:1c:e6:18:78:dd:28:d6:09:7d:c0:44:fb:0d:
                    8c:1f:c7:06:3b:58:03:cb:6a:b5:c9:f1:2f:3a:dd:
                    9a:71:f9:c3:f3:73:4f:8d:72:9d:20:fa:a6:33:5a:
                    86:d3:32:d7:bf:9d:32:0c:78:c6:56:be:ee:d9:76:
                    3d:f2:d9:11:40:c8:8f:c0:b5:2a:bb:c8:74:be:9e:
                    d1:38:71:f3:85:24:c3:95:b4:24:e5:a4:e6:13:24:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F2:88:84:2F:58:60:21:83:2D:9E:03:88:66:CA:B6:3D:A3:27:E2
            X509v3 Authority Key Identifier:
                keyid:55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3130382e302f32342d3234203d3e20323730343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:3e:5f:0f:66:b3:c9:73:c8:3e:38:71:c1:5d:02:44:d3:2d:
         2a:d5:35:a1:06:07:60:d8:cd:92:0e:17:a5:90:bd:1b:d1:cd:
         5f:1a:08:9f:f8:58:4a:c3:23:fa:2b:40:04:7f:68:e2:56:d5:
         be:96:6c:7b:58:85:43:19:72:67:dd:e5:41:41:be:b8:15:d7:
         1b:68:c7:e9:50:f2:6e:c7:e5:8d:24:d8:5d:49:4b:83:4d:d9:
         80:2f:5d:d8:46:29:2a:9a:d9:18:04:30:ca:f0:9f:2a:61:e5:
         8f:a6:1d:9b:51:b2:d7:2d:9d:83:83:fd:36:79:69:7e:3b:11:
         03:06:fe:10:d8:39:68:0e:96:2d:ff:ea:0e:37:a5:f6:45:a1:
         c8:b2:98:ad:d3:36:51:52:60:09:7e:0b:f8:1f:80:11:df:c4:
         1d:b5:6e:c7:ee:3f:71:f4:00:be:b8:c6:c4:dd:63:05:ba:81:
         07:86:8f:75:58:38:6e:e3:33:db:23:10:5f:72:24:09:9d:d8:
         a2:5a:15:23:fc:ec:ee:73:3a:6b:18:f5:4d:ac:01:ce:b0:03:
         6a:4d:dc:55:2a:e2:41:aa:85:2f:e4:e2:68:5b:d3:f8:23:70:
         9f:b1:88:bb:da:b8:38:86:e4:78:20:ce:c3:e9:8c:3d:e2:0c:
         79:6a:50:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org