Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/3230302e3130382e3136382e302f32322d3234203d3e20323730323535.roa
File:                     3230302e3130382e3136382e302f32322d3234203d3e20323730323535.roa (raw, json)
Hash identifier:          apJiqEAW7sH76zz2TMDxmdXLwbuaoCMOLp8SBNvD+aE=
Subject key identifier:   7E:AB:EE:8C:E7:9F:56:4D:42:F6:55:1C:57:80:71:00:E1:6E:EB:C0
Certificate issuer:       /CN=BCFE9D7FD2A3C25DC3911402465828615DB346CD
Certificate serial:       1CDC4080CA0171D6D01D7923E6907B58669F7143
Authority key identifier: BC:FE:9D:7F:D2:A3:C2:5D:C3:91:14:02:46:58:28:61:5D:B3:46:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/3230302e3130382e3136382e302f32322d3234203d3e20323730323535.roa
Signing time:             Tue 31 Oct 2023 21:00:00 +0000
ROA not before:           Tue 31 Oct 2023 20:55:00 +0000
ROA not after:            Tue 29 Oct 2024 21:00:00 +0000
asID:                     270255
IP address blocks:        200.108.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:dc:40:80:ca:01:71:d6:d0:1d:79:23:e6:90:7b:58:66:9f:71:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCFE9D7FD2A3C25DC3911402465828615DB346CD
        Validity
            Not Before: Oct 31 20:55:00 2023 GMT
            Not After : Oct 29 21:00:00 2024 GMT
        Subject: CN=7EABEE8CE79F564D42F6551C57807100E16EEBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:01:5a:db:59:d7:2f:55:6b:01:31:c2:42:
                    6e:32:49:51:cd:c4:4c:07:ce:ec:e3:c2:63:11:12:
                    b3:4f:c4:d6:a4:85:59:d4:2f:dd:2b:e0:65:d0:1b:
                    44:c8:61:46:7f:07:a6:29:fb:55:10:ba:d7:6c:f7:
                    25:d5:e7:a6:89:b5:a7:99:e3:77:d4:f0:88:65:f5:
                    fc:1a:bf:18:07:6c:8a:91:d8:36:ce:88:04:1b:04:
                    fd:f8:16:5f:ae:04:46:6b:e7:87:d2:ca:4f:7a:5e:
                    a2:5a:76:71:df:3d:d8:55:8b:37:be:99:43:2d:cf:
                    96:ae:f6:dc:8b:a2:40:ce:75:ca:67:09:32:0e:6b:
                    27:74:87:8f:5b:2d:12:cb:e8:9d:f1:fc:51:23:07:
                    b6:b0:97:0f:42:07:24:a6:e4:62:b9:f3:0c:dc:21:
                    9b:cd:0a:80:f8:2a:d1:26:c4:a3:8b:be:5d:7a:36:
                    1d:ca:99:6a:b8:6e:e0:a7:d5:78:9d:73:38:b3:da:
                    2d:1d:06:6d:d7:0c:55:4e:51:f3:23:f5:c4:34:25:
                    38:f3:d4:17:3e:97:d8:3e:a5:6b:f1:93:cf:4a:16:
                    3f:1d:ee:b5:63:50:69:78:9d:e3:64:59:b4:a2:d6:
                    ad:45:81:06:f0:e9:2f:98:2f:e0:86:08:f8:0b:44:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AB:EE:8C:E7:9F:56:4D:42:F6:55:1C:57:80:71:00:E1:6E:EB:C0
            X509v3 Authority Key Identifier:
                keyid:BC:FE:9D:7F:D2:A3:C2:5D:C3:91:14:02:46:58:28:61:5D:B3:46:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/3230302e3130382e3136382e302f32322d3234203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:0b:22:56:51:4f:29:41:f7:52:1b:77:b1:2f:bf:0a:fc:19:
         9d:ec:a1:74:b0:3a:4e:94:bd:cd:c9:92:5c:8b:94:6d:40:d3:
         65:96:5c:f2:33:a6:3e:cb:79:0a:e6:6a:cf:f8:16:4f:ad:0c:
         e8:06:da:03:0e:c0:1f:bf:bf:82:3c:ce:56:e5:31:8a:c9:ed:
         2d:aa:ed:a0:cb:07:0c:c0:73:f8:20:82:9c:e1:db:ab:c4:91:
         e2:e1:88:03:83:83:ba:13:97:73:80:a9:7d:9a:f1:04:f5:5a:
         76:62:25:79:d7:6e:47:d6:dc:90:5c:24:71:69:dc:12:d1:3b:
         eb:29:69:6c:b0:10:05:19:0b:8b:1a:6a:a8:10:30:9c:40:ec:
         46:c2:a7:40:0f:dd:ef:86:d5:12:ec:e4:fa:33:9a:cf:d9:73:
         c7:01:1f:84:a7:ae:87:7e:64:f9:89:87:22:3d:7e:bf:fd:09:
         40:74:03:92:4a:4e:96:d1:dd:f3:ba:8a:b9:6e:39:40:dd:2b:
         75:24:fa:6f:95:4e:03:d9:c0:32:28:ff:77:c1:71:af:cd:f3:
         9d:8f:32:43:c5:86:48:f6:cf:a6:4d:2e:3a:b7:e9:c6:b0:c1:
         42:46:20:ae:d0:61:af:0b:4c:48:04:a2:1b:28:46:88:35:c5:
         d6:c5:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org