Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36342e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          +4ppyvZRHT7OHanzkFqEo2KSMbK/A8h2319NroRY5PY=
Subject key identifier:   1F:69:C9:8C:F7:2D:19:BB:E0:DD:03:92:3B:73:AF:9B:4C:E6:4D:E2
Certificate issuer:       /CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
Certificate serial:       14350D47EBACF006CB79DED0F26E5139730830A8
Authority key identifier: 10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa
Signing time:             Tue 12 Mar 2024 08:08:52 +0000
ROA not before:           Tue 12 Mar 2024 08:03:52 +0000
ROA not after:            Tue 11 Mar 2025 08:08:52 +0000
asID:                     271504
IP address blocks:        200.53.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:35:0d:47:eb:ac:f0:06:cb:79:de:d0:f2:6e:51:39:73:08:30:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
        Validity
            Not Before: Mar 12 08:03:52 2024 GMT
            Not After : Mar 11 08:08:52 2025 GMT
        Subject: CN=1F69C98CF72D19BBE0DD03923B73AF9B4CE64DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:91:d4:8b:0e:fe:fb:51:0e:29:97:87:8a:
                    9b:c6:25:8e:8f:7b:c9:d6:2e:8d:fc:b1:bb:ff:be:
                    d3:fc:83:69:de:ae:24:7f:df:9c:2d:06:bc:4c:98:
                    9a:fb:8e:84:7c:4c:c3:35:ac:f8:42:ba:0a:85:b7:
                    62:6f:2b:f1:29:bf:9c:d4:25:a3:49:dc:5c:06:59:
                    cb:fc:b0:59:87:63:e5:ed:81:dc:d9:3e:bd:92:60:
                    4e:29:a4:74:94:de:56:78:08:39:8f:a6:12:a6:e0:
                    3a:4d:80:46:98:57:d5:c1:71:d1:d7:a8:e9:55:a0:
                    3b:ca:03:ac:98:98:4d:6d:08:85:ea:03:78:a0:1a:
                    27:90:b2:6d:5f:45:2a:e1:3c:66:58:84:cc:58:b9:
                    9a:99:d2:14:b0:6a:95:44:d4:d4:8c:2f:3e:c5:d0:
                    f0:64:9f:94:e3:e4:d6:8c:0c:26:ef:f7:2d:27:05:
                    5d:5e:f0:ac:32:8b:2a:f9:f0:36:e5:4d:cb:28:c3:
                    30:be:e2:51:5b:63:11:33:92:0e:6a:af:89:ef:30:
                    e0:0e:ba:de:e8:c6:fc:91:9f:0c:94:ed:32:b4:62:
                    46:f5:10:11:ed:a7:4c:f5:00:ce:45:08:b5:fb:94:
                    f6:62:8b:98:e4:9c:50:ef:87:27:4e:8d:70:b3:13:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:69:C9:8C:F7:2D:19:BB:E0:DD:03:92:3B:73:AF:9B:4C:E6:4D:E2
            X509v3 Authority Key Identifier:
                keyid:10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:9a:da:12:7d:b7:23:1e:91:97:5f:7b:d8:b8:3f:5f:b2:29:
         5b:26:0c:43:38:4b:a4:b7:5f:c6:25:f8:06:0c:94:5e:6c:2a:
         04:40:a6:25:cd:2e:5a:27:93:05:a3:50:12:d1:7b:af:50:c0:
         d0:f8:c2:b4:75:e3:c6:85:db:dc:09:69:10:33:e0:5b:40:af:
         68:8d:e6:30:88:bc:1d:63:d2:9c:a0:6b:f1:13:4c:7f:cb:3b:
         a3:64:71:97:3a:d6:72:f9:5b:f3:34:66:4d:06:17:aa:42:20:
         98:82:30:56:ea:86:88:fb:b9:2f:45:d1:a0:cf:f8:58:3e:62:
         fc:d1:00:55:83:a0:25:93:cf:41:08:fc:ff:e3:4f:df:e0:5e:
         44:56:41:15:98:be:0d:ac:fb:c6:6e:d7:e8:c3:6e:d1:bf:1a:
         1a:33:fb:56:49:56:ac:74:1d:66:25:b4:eb:05:59:26:68:09:
         78:22:02:7d:75:f2:82:56:b1:a5:2d:e0:43:d5:a1:c0:09:d0:
         ee:83:0b:d9:fc:4e:b8:9c:59:f1:56:a1:1e:1a:33:50:6b:7e:
         7f:54:93:08:20:27:7e:ec:1a:37:77:70:bc:e4:ba:38:b6:ca:
         2f:5a:a3:62:54:2b:18:3c:b0:0f:11:08:16:00:b5:90:2d:7d:
         30:fb:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org