Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
File:                     3230302e35332e36362e302f32332d3233203d3e20323731353034.roa (raw, json)
Hash identifier:          5qAxCh7MPvmKgTYGr7Sd/f/oQhthtFBHuMmccxl2zVk=
Subject key identifier:   65:A2:C0:71:50:49:78:39:1E:02:2A:AB:20:8B:47:6E:6E:35:DF:02
Certificate issuer:       /CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
Certificate serial:       14AE5026365D5DCC856670EE0B6ACD8D8BF545D9
Authority key identifier: 10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
Signing time:             Tue 18 Jul 2023 11:15:55 +0000
ROA not before:           Tue 18 Jul 2023 11:10:55 +0000
ROA not after:            Tue 16 Jul 2024 11:15:55 +0000
asID:                     271504
IP address blocks:        200.53.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ae:50:26:36:5d:5d:cc:85:66:70:ee:0b:6a:cd:8d:8b:f5:45:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
        Validity
            Not Before: Jul 18 11:10:55 2023 GMT
            Not After : Jul 16 11:15:55 2024 GMT
        Subject: CN=65A2C071504978391E022AAB208B476E6E35DF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:8b:08:d2:fc:1c:6b:42:57:e0:e5:62:3e:
                    cb:cc:af:3a:9c:e8:4d:06:41:c2:45:cf:6b:37:2d:
                    eb:15:bc:34:02:32:2d:b0:fa:4c:fe:45:38:08:78:
                    c5:80:a7:72:bb:88:20:95:0a:10:d5:85:85:1a:62:
                    6b:a9:76:88:08:ba:ca:78:79:77:7a:0b:57:c0:e1:
                    de:91:3a:9c:0e:14:a0:1b:20:70:60:3c:c7:c2:cb:
                    18:8b:8c:8c:db:f4:a7:90:f8:36:d9:b8:c0:b3:be:
                    04:0a:32:7d:92:09:cc:73:45:97:a6:38:bb:e0:d7:
                    0c:db:d1:6b:c0:4f:81:73:ad:93:01:31:28:38:cd:
                    b2:2d:64:ab:e8:90:83:1c:2e:8c:c6:01:a9:71:ec:
                    b9:b7:06:ea:71:1a:c6:f8:ec:7c:4c:34:4b:d1:45:
                    1b:e8:ba:e4:25:8e:7f:63:99:89:f2:25:cf:31:17:
                    0e:e1:cc:fd:56:b0:81:41:39:a9:7a:c2:ad:38:59:
                    ba:03:70:2e:ec:2e:5e:16:d2:ba:a7:ca:98:8a:b1:
                    27:09:6a:24:cf:5b:ce:72:15:e7:4f:1e:2b:4f:12:
                    cc:a0:d1:7d:aa:e1:97:86:7b:c2:6d:d3:a2:eb:de:
                    f7:5b:88:8b:36:6f:32:81:6e:60:32:36:e0:48:57:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A2:C0:71:50:49:78:39:1E:02:2A:AB:20:8B:47:6E:6E:35:DF:02
            X509v3 Authority Key Identifier:
                keyid:10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:52:95:3a:e9:b2:c7:b8:3f:59:39:1e:c3:1a:1a:2f:9f:56:
         12:65:c0:5e:88:63:3a:59:68:9c:72:82:22:1d:bb:e3:7f:70:
         13:7d:67:63:e8:67:6c:07:e7:db:a7:db:e7:29:dd:ea:88:0c:
         89:da:58:50:bd:80:9e:a2:ba:33:7d:4e:26:23:a5:5b:09:9b:
         e4:75:81:41:f6:a4:10:35:5a:8f:a7:d2:30:85:d4:c9:5d:40:
         c5:ba:5f:6e:16:71:70:65:7b:2c:9e:ac:02:21:a4:76:2e:08:
         81:39:d8:32:66:ad:5b:c9:b3:b6:68:66:73:e6:db:42:f2:68:
         53:9c:cd:e4:e8:ef:56:e5:5e:aa:80:bf:8f:f2:a5:84:1d:b6:
         93:9f:7b:32:08:fd:7e:5e:99:dc:63:75:ce:76:0a:9b:75:e7:
         20:51:56:8b:ca:23:e6:f5:60:90:04:2a:41:02:4b:8f:db:d4:
         77:13:ed:ff:ba:40:19:8d:0e:90:63:fb:1a:99:d3:65:56:74:
         5f:73:49:cf:13:26:d5:6c:7d:27:09:7c:04:0d:ba:9a:43:99:
         28:f9:57:f8:d9:45:f9:ec:13:98:a8:c0:16:57:52:a2:ec:99:
         19:46:8e:ea:59:d9:84:0d:ed:52:ab:4d:d6:82:b4:3a:ab:21:
         7d:6b:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org