Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230302e3134322e39362e302f32302d3234203d3e203137323232.roa
File:                     3230302e3134322e39362e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          q2F1iEqjZpm9C96L3e27BMMA4ikupVlt05LNbOF7XHw=
Subject key identifier:   6F:2A:BA:FF:B7:01:B7:17:AD:C6:DD:CE:4C:A9:78:6D:D3:4F:1A:90
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       728058C9A89A28173FE54941F70C560AD5BDD1AD
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230302e3134322e39362e302f32302d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        200.142.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:80:58:c9:a8:9a:28:17:3f:e5:49:41:f7:0c:56:0a:d5:bd:d1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=6F2ABAFFB701B717ADC6DDCE4CA9786DD34F1A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:c7:a9:1e:a1:4b:49:df:73:14:43:a8:60:
                    ed:93:46:4a:7e:97:16:d6:72:7f:8a:d0:ee:54:e8:
                    78:01:05:73:59:59:81:2f:24:ae:93:34:1f:4b:a2:
                    05:49:55:f9:00:c0:2e:f7:ae:79:b2:77:64:46:f4:
                    51:cd:55:6f:76:be:f2:0c:28:51:91:db:b7:c7:18:
                    51:3c:aa:76:8b:86:4e:a9:ef:97:59:e9:3e:9e:fb:
                    5f:f9:47:44:76:f0:65:69:dd:ef:7a:da:04:b7:3d:
                    ed:8f:6e:99:46:0f:23:ca:b8:ea:4f:8f:e4:6a:14:
                    1f:78:21:7f:4f:8e:32:e4:ba:50:7b:91:49:92:fd:
                    fb:58:74:be:b5:41:68:8a:8f:cc:04:00:e3:7e:2d:
                    60:c7:06:ff:ee:a4:cd:46:89:c5:91:c4:92:32:79:
                    dc:00:87:d4:93:38:ec:55:c0:f6:ec:c9:fa:d0:c5:
                    b7:8c:66:68:30:78:29:52:4a:45:cd:09:b2:67:7b:
                    40:30:20:c5:65:7a:66:cf:d1:dd:39:7c:c3:7c:eb:
                    ff:e8:63:73:6e:99:bd:3d:85:85:e6:3f:c5:a6:95:
                    72:50:75:44:79:57:ec:05:91:49:55:30:d3:da:50:
                    ae:f0:51:68:db:91:db:61:d1:07:be:e8:9f:65:0e:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2A:BA:FF:B7:01:B7:17:AD:C6:DD:CE:4C:A9:78:6D:D3:4F:1A:90
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230302e3134322e39362e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:4d:e8:86:53:58:90:fc:ca:7e:4d:4f:52:b5:33:fb:92:9d:
         9c:32:b1:35:e9:b2:35:60:d6:a8:51:f4:df:16:ed:e0:8b:24:
         5f:a8:3d:69:c2:b3:93:33:ea:6c:7e:e6:62:70:06:fd:cb:a2:
         b0:35:61:01:ed:e1:88:86:21:0b:10:f1:ad:34:92:1c:5d:cd:
         06:53:e9:6d:7f:a0:5b:79:f4:be:5c:d1:c3:f7:99:1c:53:6c:
         09:d5:f3:de:08:75:93:4e:b5:13:28:24:a3:72:4c:3c:28:6f:
         e1:91:d2:0e:be:cc:bd:6e:5e:1b:56:56:52:28:bd:ac:13:d1:
         db:6f:e1:4b:64:a1:d3:5f:a0:bb:12:bf:7e:82:48:9b:37:4c:
         60:d1:ac:f4:c8:1b:81:31:6b:bc:3f:88:28:08:c9:36:d7:a1:
         60:8c:62:4a:5b:25:ff:2d:aa:e4:b4:7e:49:89:59:46:30:4f:
         78:71:79:7f:2d:ad:86:9c:2d:7b:33:16:0e:7d:49:6f:7e:ca:
         bb:f7:60:05:e4:f1:71:b6:35:c3:08:2a:f0:15:09:66:31:37:
         c6:27:ab:98:50:b9:24:9b:d5:51:fb:15:cf:ed:e6:05:9b:49:
         56:99:26:09:b9:4a:c3:51:d3:9b:a7:27:82:ab:2c:79:af:0d:
         7b:70:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org