Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36372e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          EfrqPcOWUI0RzzC3l7Y4g5CGgYDb4t1kZEdQKZDL3/g=
Subject key identifier:   39:BA:A3:E3:5E:80:3A:85:ED:03:2D:5F:22:9B:00:1C:54:B4:D5:19
Certificate issuer:       /CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
Certificate serial:       7F38B6679970665F9EC3C12E90907935331672FA
Authority key identifier: 10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
Signing time:             Tue 12 Mar 2024 08:08:52 +0000
ROA not before:           Tue 12 Mar 2024 08:03:52 +0000
ROA not after:            Tue 11 Mar 2025 08:08:52 +0000
asID:                     271504
IP address blocks:        200.53.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:38:b6:67:99:70:66:5f:9e:c3:c1:2e:90:90:79:35:33:16:72:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
        Validity
            Not Before: Mar 12 08:03:52 2024 GMT
            Not After : Mar 11 08:08:52 2025 GMT
        Subject: CN=39BAA3E35E803A85ED032D5F229B001C54B4D519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:00:40:33:3d:80:1c:0e:82:bc:90:a7:18:
                    b4:d6:93:48:ba:a1:70:cd:3c:22:98:c5:7c:81:27:
                    64:26:f1:ba:fa:20:e6:cf:dc:94:e3:c4:8e:d4:0d:
                    02:2f:d3:d4:17:60:86:9a:4d:b3:0c:58:18:0f:71:
                    d2:10:f4:34:e6:14:be:f9:53:87:af:9a:bf:9e:fc:
                    9a:2a:4e:ab:bf:a5:4e:41:9a:93:bc:62:87:92:95:
                    29:ea:6f:ae:65:26:55:d7:28:0f:66:1f:04:95:27:
                    78:87:2d:10:c6:46:70:d7:54:f2:34:d2:27:9e:3b:
                    05:30:52:51:5a:9f:8d:97:f7:27:47:0b:85:5d:6e:
                    fb:eb:5d:cc:09:58:94:78:14:eb:00:d3:0d:d3:e9:
                    93:c6:ef:ce:19:b2:04:c2:fd:07:62:a5:15:21:74:
                    78:52:2c:e0:9d:d4:db:6c:6f:d3:c6:7d:d5:db:6c:
                    d7:b7:b8:f8:f1:fa:05:10:a2:5c:80:a2:9a:ce:b1:
                    56:45:11:d5:82:08:1d:d5:29:28:8e:e9:e6:aa:92:
                    cb:02:8a:cd:8e:b9:07:bd:91:b6:04:74:83:9e:6b:
                    3a:ab:ee:2b:88:a6:8b:92:49:90:a3:32:ba:04:94:
                    28:e7:69:95:9d:89:ed:7c:c0:08:88:a4:22:b4:aa:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:A3:E3:5E:80:3A:85:ED:03:2D:5F:22:9B:00:1C:54:B4:D5:19
            X509v3 Authority Key Identifier:
                keyid:10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:5d:da:90:1d:71:6a:b4:4a:f4:08:61:f1:50:b6:96:27:b9:
         1e:8a:c9:37:6d:e8:43:e4:2d:e4:7b:46:a5:90:ab:5e:42:46:
         a4:07:ee:38:c5:a9:e2:a9:ab:1b:1e:3a:12:44:60:50:45:2a:
         d9:c4:5b:5b:c2:10:0d:ed:c4:df:89:bb:8c:94:a7:97:7b:b3:
         70:22:50:8e:86:c9:9f:9d:af:b8:b4:aa:47:e8:bb:58:68:49:
         66:c1:df:4b:c0:50:45:17:de:3b:82:ef:39:0f:cf:66:d4:be:
         0d:08:33:11:14:f5:b4:56:96:aa:99:16:e2:d0:58:77:c6:db:
         44:81:aa:3d:c3:62:88:56:86:a4:ee:c0:89:b0:d1:13:47:9c:
         49:77:a2:c3:bf:1b:de:08:76:c6:96:bd:95:d7:59:97:b9:1e:
         f5:cf:37:5d:95:59:8c:63:fc:d5:8b:ed:06:4b:2a:33:18:a6:
         d8:4f:3c:24:d8:7d:30:5c:6a:04:e8:a4:f2:a3:e5:f0:9b:d0:
         24:bc:b8:0c:04:6b:70:52:4f:a4:75:b1:26:2d:9d:f7:57:3f:
         bb:86:1b:90:28:09:9f:87:71:38:0a:bd:92:e3:3d:4c:cd:9b:
         20:4c:ca:5c:6c:b5:62:85:c3:c7:81:23:89:07:bf:40:32:32:
         11:62:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org