Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa
File:                     3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa (raw, json)
Hash identifier:          fT5qvXKC5q5LEbrHS8kiLszTeWNyrOuigLFxMAHWeHc=
Subject key identifier:   56:F3:F2:5C:D6:ED:9C:A8:AC:DF:B8:54:60:26:F3:BA:0C:20:66:4E
Certificate issuer:       /CN=4E0CAE2309FE9147886703A0CD45F3878E73AA7F
Certificate serial:       3CEE808009EF363F42765E9D185FC71D767C717C
Authority key identifier: 4E:0C:AE:23:09:FE:91:47:88:67:03:A0:CD:45:F3:87:8E:73:AA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E0CAE2309FE9147886703A0CD45F3878E73AA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa
Signing time:             Mon 11 Mar 2024 20:13:59 +0000
ROA not before:           Mon 11 Mar 2024 20:08:59 +0000
ROA not after:            Mon 10 Mar 2025 20:13:59 +0000
asID:                     270460
IP address blocks:        200.50.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ee:80:80:09:ef:36:3f:42:76:5e:9d:18:5f:c7:1d:76:7c:71:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E0CAE2309FE9147886703A0CD45F3878E73AA7F
        Validity
            Not Before: Mar 11 20:08:59 2024 GMT
            Not After : Mar 10 20:13:59 2025 GMT
        Subject: CN=56F3F25CD6ED9CA8ACDFB8546026F3BA0C20664E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:be:01:37:29:29:f5:3a:23:61:f0:0e:33:92:
                    ad:d3:d3:14:42:1d:84:9e:f5:9c:4d:b5:60:30:f6:
                    94:82:94:61:d7:78:9e:07:24:0e:c3:e9:86:a3:44:
                    71:aa:76:95:50:a0:a6:f0:1f:50:0c:89:3c:c2:a7:
                    17:23:ec:ae:0e:47:1a:c8:3e:da:36:a3:2b:a5:18:
                    55:4d:c9:58:2a:87:c8:00:44:1b:17:aa:98:b5:9e:
                    94:ea:74:79:17:57:7b:96:cd:d5:be:37:41:35:91:
                    53:47:b1:22:f4:6e:99:73:3a:1f:3a:26:3e:06:3c:
                    15:b4:53:65:da:3d:82:a7:7f:03:11:de:80:66:a9:
                    6d:d8:c3:c5:2d:5c:af:54:a0:b1:db:f2:ea:0c:ef:
                    c7:bc:07:8f:bb:c4:97:17:48:aa:9e:14:bc:61:07:
                    42:4b:db:13:5a:16:3b:a0:9a:8b:5b:97:b7:1b:ca:
                    25:17:84:76:d7:ff:eb:6b:4b:52:29:81:33:cf:66:
                    17:b4:06:d0:ed:80:dd:fc:fa:39:94:2d:dd:62:1b:
                    53:3b:ca:5e:72:17:e9:46:f4:88:c8:0d:22:34:b3:
                    10:3d:f2:9a:c2:29:5f:b7:7d:f0:40:66:84:a5:85:
                    a9:eb:21:11:68:78:3b:6d:28:d0:46:c6:ab:52:ea:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F3:F2:5C:D6:ED:9C:A8:AC:DF:B8:54:60:26:F3:BA:0C:20:66:4E
            X509v3 Authority Key Identifier:
                keyid:4E:0C:AE:23:09:FE:91:47:88:67:03:A0:CD:45:F3:87:8E:73:AA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/4E0CAE2309FE9147886703A0CD45F3878E73AA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E0CAE2309FE9147886703A0CD45F3878E73AA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:3c:43:59:f7:16:d1:9c:47:76:89:c1:56:c7:7b:50:e1:1a:
         df:42:4d:f2:c8:ab:27:bc:f7:e3:b4:a6:dd:4c:73:29:37:81:
         c2:3a:e1:b8:8f:f2:a6:5c:e9:77:27:2e:41:37:fb:d9:ca:e5:
         ad:35:89:03:05:07:7b:2c:a4:a6:87:88:91:18:29:4e:e3:69:
         2e:a8:6c:33:2d:80:5b:44:c7:c3:87:70:62:09:39:d6:87:ab:
         74:39:c2:3e:64:7b:ba:51:0a:da:5d:9a:e8:4f:85:26:08:33:
         57:3a:79:cb:8c:7e:3c:77:00:f8:5a:a6:29:cd:31:3f:a1:45:
         8c:f6:1e:af:4b:21:7f:56:7f:31:4e:ea:37:57:af:24:2c:1c:
         45:5e:9d:e7:27:37:ec:29:36:67:6d:cc:bb:b3:79:6e:ec:a3:
         c0:4f:0f:a2:af:8e:f6:54:38:4f:47:8f:52:89:99:a8:ee:98:
         a5:fc:b2:3e:96:ac:5d:eb:c7:46:95:de:0d:e8:f6:8d:41:38:
         50:92:cb:b2:90:ae:6a:a0:4b:f6:4e:72:ae:7b:80:95:24:63:
         7b:ee:6f:7b:09:33:c0:70:91:c9:2e:02:b4:df:e2:8e:bf:02:
         ca:7e:99:f5:ed:51:fe:6f:58:0b:b1:7b:6c:44:1c:db:26:76:
         b3:3f:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org