Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3131302e302f32342d3234203d3e20323730343338.roa
File:                     3230302e31312e3131302e302f32342d3234203d3e20323730343338.roa (raw, json)
Hash identifier:          wv5k4dcS7q3MZJfmS3Kkvx7rLdtg8RWJkW+wL+Fq4pY=
Subject key identifier:   D0:B3:DA:F0:D0:D0:A0:A2:A3:63:7C:B6:B7:A9:F2:4D:59:90:79:77
Certificate issuer:       /CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
Certificate serial:       645A7AC8E85210B11908E0CB4319FB2CF75740FA
Authority key identifier: 55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3131302e302f32342d3234203d3e20323730343338.roa
Signing time:             Wed 01 Nov 2023 18:24:15 +0000
ROA not before:           Wed 01 Nov 2023 18:19:15 +0000
ROA not after:            Wed 30 Oct 2024 18:24:15 +0000
asID:                     270438
IP address blocks:        200.11.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5a:7a:c8:e8:52:10:b1:19:08:e0:cb:43:19:fb:2c:f7:57:40:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
        Validity
            Not Before: Nov  1 18:19:15 2023 GMT
            Not After : Oct 30 18:24:15 2024 GMT
        Subject: CN=D0B3DAF0D0D0A0A2A3637CB6B7A9F24D59907977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:9b:21:f9:d2:64:0f:e1:14:de:6c:ea:cc:
                    05:09:34:b5:b4:ab:88:e8:16:d5:da:9f:42:f3:30:
                    09:16:4f:9c:dd:3e:9e:df:52:b6:76:89:38:35:50:
                    7a:75:6c:cc:48:51:dd:69:d1:ee:b9:5e:2b:dd:7c:
                    e8:18:bc:af:f7:1f:3e:fc:bd:15:80:41:df:23:61:
                    6c:d5:7e:aa:db:d4:f6:0a:fb:00:cc:6d:4a:c9:92:
                    60:78:9e:7c:06:b0:67:52:98:39:ed:79:2d:b4:21:
                    eb:e6:8a:ba:9a:5d:b5:ce:da:5a:f4:39:7c:5e:a2:
                    22:16:0d:9d:67:11:4c:f0:3e:ad:27:09:41:10:2d:
                    82:f8:60:7d:a2:d3:1f:b4:48:c3:1f:95:78:ef:4c:
                    0b:7e:8e:ca:8f:ed:2c:23:55:4d:0b:2a:40:e1:cd:
                    b4:21:1e:b9:f0:d9:37:33:b2:3f:0e:b6:89:85:d3:
                    12:2d:a8:6f:60:26:77:8f:f6:8b:c3:2a:a5:c2:02:
                    57:b0:d7:93:40:5f:7d:04:f2:2f:d9:8b:11:eb:a9:
                    cd:89:31:1c:b1:13:66:4b:aa:e2:9d:ba:3b:b5:38:
                    07:c5:9e:ca:49:b9:c8:9a:ae:e4:69:3b:e4:eb:81:
                    49:76:df:48:1c:e3:13:9c:d5:52:bc:3d:c1:79:66:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:DA:F0:D0:D0:A0:A2:A3:63:7C:B6:B7:A9:F2:4D:59:90:79:77
            X509v3 Authority Key Identifier:
                keyid:55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3131302e302f32342d3234203d3e20323730343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:8a:01:3f:8d:14:cb:80:e7:12:4b:8e:ae:9f:4b:41:fa:2a:
         ab:af:1f:ac:6d:7e:50:53:a3:f9:94:79:4b:ec:a3:04:d6:5b:
         14:ed:a0:d6:c1:ee:ef:39:9f:e5:e4:f5:40:8d:c2:d1:06:ea:
         a1:0d:53:4f:a9:b7:d1:c5:d3:45:32:ac:6e:57:45:c1:c8:cb:
         8e:8c:78:be:89:a0:15:fd:1d:37:f5:64:88:a8:8f:86:26:14:
         49:56:66:2e:5a:8d:3b:b7:c2:47:9a:ee:d4:8a:bd:76:2b:c6:
         2c:86:0c:96:a6:1b:d7:8a:c4:a9:77:88:d0:fd:f3:a1:5c:14:
         3f:22:77:4e:66:35:57:fb:26:db:26:0e:48:b1:83:c9:16:d7:
         5e:b9:cd:47:ad:71:0c:0a:9e:36:c2:44:3d:c5:5f:19:9c:87:
         72:26:99:50:6d:5c:99:e5:30:26:d7:17:53:ef:e1:a9:a6:25:
         46:87:64:ae:f5:88:eb:a9:9c:3d:eb:95:5d:cf:ac:49:08:e3:
         b2:68:2d:3f:b9:e3:18:fc:52:03:18:ad:ac:66:2b:fc:c4:80:
         2a:e2:54:91:9c:bd:e9:28:2b:97:9c:00:c8:4b:04:fd:df:4b:
         0c:14:21:cd:43:20:4b:a3:a6:fb:e1:3a:25:3c:2a:04:32:c2:
         cf:60:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org