Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3230302e3233332e38382e302f32312d3231203d3e203533303539.roa
File:                     3230302e3233332e38382e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          zQLXerB9ypSTju4fk+PR7j7R8KS268DhcKd4Di5BCiY=
Subject key identifier:   66:EB:CF:3C:09:6D:B8:7D:7D:C4:7A:9D:DE:74:7A:83:BB:72:01:0D
Certificate issuer:       /CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Certificate serial:       0A0063A5F4DF0819011560BDFFC73435613B521A
Authority key identifier: 8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3230302e3233332e38382e302f32312d3231203d3e203533303539.roa
Signing time:             Mon 23 Jan 2023 22:14:35 +0000
ROA not before:           Mon 23 Jan 2023 22:09:35 +0000
ROA not after:            Mon 22 Jan 2024 22:14:35 +0000
asID:                     53059
IP address blocks:        200.233.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:00:63:a5:f4:df:08:19:01:15:60:bd:ff:c7:34:35:61:3b:52:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
        Validity
            Not Before: Jan 23 22:09:35 2023 GMT
            Not After : Jan 22 22:14:35 2024 GMT
        Subject: CN=66EBCF3C096DB87D7DC47A9DDE747A83BB72010D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:d5:3a:28:05:99:22:4e:b3:bc:be:71:79:
                    c2:66:4e:1e:ab:e6:54:3d:bc:15:fe:33:34:b5:10:
                    c6:c5:76:f2:30:48:54:d1:b5:4a:2d:bf:22:75:06:
                    e2:3d:c0:ff:71:e4:58:a7:62:4a:8d:52:2e:2a:b7:
                    bf:6b:94:8f:e2:5d:52:2a:1a:e0:a0:9e:da:aa:07:
                    cd:a0:17:ad:ff:b7:9e:9e:a4:28:48:3c:6f:20:4b:
                    ee:4b:60:ce:4e:15:8c:e8:32:c7:f2:1a:8c:07:fe:
                    25:0e:98:73:23:bf:82:25:15:66:b9:d3:5a:4f:75:
                    c8:ba:76:83:87:5a:35:39:b1:af:d7:14:ff:28:fe:
                    62:59:9c:b8:68:fd:f6:b8:70:ca:bc:56:f8:1b:4d:
                    a8:5b:20:b8:b1:5e:4c:ac:69:74:4a:d0:a9:e6:68:
                    95:2d:8c:9c:47:dd:ba:a6:b8:32:37:24:5e:71:c3:
                    ac:9d:51:b7:85:49:19:99:4d:ee:90:8b:b7:a1:4c:
                    7b:62:15:ee:0d:6c:14:1d:e7:68:55:89:ca:e1:72:
                    a8:2e:07:ee:45:2c:bd:e1:9b:f7:36:bf:47:56:14:
                    6b:11:8f:2a:fb:e3:cc:0a:2d:73:e0:43:72:f1:72:
                    62:74:bd:52:74:51:e9:1f:13:3d:12:17:9e:11:ab:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:CF:3C:09:6D:B8:7D:7D:C4:7A:9D:DE:74:7A:83:BB:72:01:0D
            X509v3 Authority Key Identifier:
                keyid:8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3230302e3233332e38382e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:7b:cc:65:6d:15:2e:ed:fa:a2:33:6f:c7:bf:ee:7c:40:
         dd:25:ed:d7:0f:b8:70:ae:23:93:4a:a1:e0:b1:4e:ec:da:25:
         6f:00:02:4e:db:8e:c3:a9:83:d5:f0:8b:11:d2:fd:8c:14:37:
         c5:dc:21:43:fa:17:ab:69:51:66:50:43:00:c0:2a:d7:8d:69:
         40:b5:e0:b5:cb:d4:6e:30:6b:45:36:91:c9:e0:10:09:94:93:
         99:2d:eb:bc:a2:9a:96:3c:1e:48:69:3a:cb:45:d6:52:33:96:
         21:ea:26:50:b8:ff:17:40:49:01:28:85:f5:a3:99:91:f0:84:
         e6:39:dc:0c:29:f4:e9:15:c1:ee:56:6b:48:e4:3d:c8:59:00:
         c7:f3:d2:c5:95:e2:28:89:cc:70:55:70:18:9e:f2:74:26:c9:
         01:a4:af:83:56:c5:9d:ed:3e:24:1d:03:de:f8:b9:d6:02:bd:
         a1:43:42:33:9f:3b:37:6c:d2:48:00:37:bb:0b:84:42:59:ec:
         eb:13:0a:2e:b8:44:8f:ab:63:4e:6b:64:39:65:6f:02:1b:5f:
         46:99:75:d8:2c:1b:5c:14:7a:2b:f5:d2:bf:b4:ee:1d:fd:21:
         56:d5:6b:dc:a2:3c:b7:25:14:5c:7e:ef:30:5f:f3:57:5d:68:
         cc:cd:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org