Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/1/3230302e372e302e302f32322d3234203d3e20323632363537.roa
File:                     3230302e372e302e302f32322d3234203d3e20323632363537.roa (raw, json)
Hash identifier:          ffGqo6RiY4pUOWG6OnnUYDsGP06nH5c2Z4g6ndHPqkU=
Subject key identifier:   6A:61:67:FF:08:40:DC:E9:B5:E2:2C:5C:CB:11:58:F0:D4:90:8C:1E
Certificate issuer:       /CN=7DA7D57833C33D3F4CFF514376773A5FE27E4E5A
Certificate serial:       1FF92B2D887C6F674488E458899075CDF3EC1214
Authority key identifier: 7D:A7:D5:78:33:C3:3D:3F:4C:FF:51:43:76:77:3A:5F:E2:7E:4E:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DA7D57833C33D3F4CFF514376773A5FE27E4E5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/1/3230302e372e302e302f32322d3234203d3e20323632363537.roa
Signing time:             Thu 04 Apr 2024 16:03:25 +0000
ROA not before:           Thu 04 Apr 2024 15:58:25 +0000
ROA not after:            Thu 03 Apr 2025 16:03:25 +0000
asID:                     262657
IP address blocks:        200.7.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f9:2b:2d:88:7c:6f:67:44:88:e4:58:89:90:75:cd:f3:ec:12:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA7D57833C33D3F4CFF514376773A5FE27E4E5A
        Validity
            Not Before: Apr  4 15:58:25 2024 GMT
            Not After : Apr  3 16:03:25 2025 GMT
        Subject: CN=6A6167FF0840DCE9B5E22C5CCB1158F0D4908C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:8b:7f:56:b5:ed:96:8b:fb:e5:9c:40:e0:
                    e6:a3:72:a9:54:66:3e:60:c2:e3:df:25:98:3e:89:
                    f0:92:5e:32:e0:7f:55:2b:d2:fd:65:d2:4a:11:b3:
                    67:11:b6:29:5f:bd:f5:4e:a5:c4:b1:02:f5:39:db:
                    70:96:dc:4a:fe:e7:cb:2e:44:47:d2:96:f3:10:f8:
                    12:df:79:6f:84:c6:ad:c2:40:fe:80:e2:1c:bd:27:
                    94:c9:0b:78:b1:2e:85:52:8a:02:2e:c3:00:df:0e:
                    e3:6f:f7:2b:41:ea:3f:12:5f:be:a9:e7:bf:b4:05:
                    be:16:36:0e:31:e7:12:4a:3c:fd:b0:b9:e6:91:a7:
                    e9:43:30:4e:2f:b4:2a:19:91:e7:62:df:e2:28:9a:
                    94:5f:e4:73:63:0d:ca:57:33:94:b7:e0:e5:e0:65:
                    72:4e:62:42:72:34:b2:46:af:ec:80:27:f4:12:12:
                    91:a6:9b:90:2b:92:96:f1:d8:b4:39:6f:3d:72:b5:
                    04:bc:1f:ee:2f:73:8e:ca:85:75:9d:bc:a5:b9:60:
                    92:95:73:31:a4:be:40:d1:48:00:19:6f:be:2d:0a:
                    a2:ff:90:00:b1:52:00:15:6f:67:93:4d:eb:16:60:
                    9c:b4:c6:9a:04:99:71:01:94:0b:e5:46:46:b0:10:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:61:67:FF:08:40:DC:E9:B5:E2:2C:5C:CB:11:58:F0:D4:90:8C:1E
            X509v3 Authority Key Identifier:
                keyid:7D:A7:D5:78:33:C3:3D:3F:4C:FF:51:43:76:77:3A:5F:E2:7E:4E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/1/7DA7D57833C33D3F4CFF514376773A5FE27E4E5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DA7D57833C33D3F4CFF514376773A5FE27E4E5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/1/3230302e372e302e302f32322d3234203d3e20323632363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:01:0e:df:48:a2:92:88:ce:80:29:a3:34:9d:b9:38:6f:
         40:20:43:58:68:e6:50:2b:c9:2f:4b:e6:f4:b5:62:31:f7:9f:
         9b:2e:dd:c4:3c:95:70:1e:f0:4c:83:8a:33:7d:8f:9b:5e:7a:
         df:90:ad:a2:1a:8a:9c:c0:f1:22:a5:58:ef:87:c1:73:f7:51:
         f3:a0:2a:64:10:17:ec:95:78:5b:64:88:1c:66:2f:70:74:20:
         30:f4:3f:8e:7f:86:c5:b6:27:f2:5b:e0:68:81:c8:c2:71:13:
         d9:cf:5b:22:30:f8:25:b6:5b:3b:4e:f4:0b:39:26:25:b0:17:
         0d:45:3b:05:31:89:9a:8b:82:a2:2e:c6:9a:3d:7b:b8:3f:8d:
         b1:45:c1:81:f4:69:46:3e:a5:88:5c:38:17:8e:c1:2c:2e:4d:
         d3:b9:43:b0:89:7d:11:6b:a7:68:72:c8:7e:40:72:f2:f9:fa:
         17:6b:99:73:1d:25:88:92:b0:81:b3:c5:98:5c:b7:99:6c:48:
         ab:f8:1f:24:56:d1:d6:ae:72:db:6d:8d:f2:c5:5f:bb:64:bf:
         36:ce:7b:ad:ce:e7:f1:ed:ea:da:cf:7a:b9:08:e9:45:76:2d:
         46:aa:9b:f5:2b:0c:a8:6f:4d:96:86:9a:ed:67:52:8e:37:4c:
         ec:ca:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org