Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230302e3230312e3137362e302f32302d3234203d3e203137323232.roa
File:                     3230302e3230312e3137362e302f32302d3234203d3e203137323232.roa (raw, json)
Hash identifier:          2YhzBe8R6LVlkCOIX8V2sa8TJFdSUMTyyeqSAqMmn1Q=
Subject key identifier:   FA:0E:21:60:D6:A4:EB:E3:13:C1:99:B1:64:1A:E3:46:7D:20:45:08
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       418CAF282EB285427A92B8C982D61FA4A970D2E2
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230302e3230312e3137362e302f32302d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        200.201.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8c:af:28:2e:b2:85:42:7a:92:b8:c9:82:d6:1f:a4:a9:70:d2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=FA0E2160D6A4EBE313C199B1641AE3467D204508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:f1:b1:31:e6:c0:15:01:ac:ae:7d:ec:85:
                    bc:90:04:9f:22:31:de:6c:99:47:cd:83:c9:c8:c1:
                    13:a1:0a:ea:5d:ce:e6:e6:24:9e:57:69:36:4f:29:
                    be:14:92:a7:2f:ce:2c:a9:f3:65:52:14:78:36:f4:
                    80:f7:94:4f:f7:01:32:1d:2f:e4:4e:85:4b:6e:db:
                    ef:f2:5b:61:36:94:d7:38:6b:d4:db:d7:bd:c7:39:
                    b5:d4:c1:0e:7b:de:ba:b2:ec:8d:2e:f6:c8:ef:ed:
                    fb:97:3f:00:e6:39:76:33:55:2c:51:81:98:20:51:
                    0e:7b:ee:57:f5:e8:a4:f0:53:f0:2a:0f:f2:17:ad:
                    cf:5c:e0:4e:95:f7:d6:24:00:d5:e6:27:62:aa:65:
                    b1:ed:73:e7:3b:9a:f3:d0:94:32:4d:64:d6:4b:70:
                    a8:6a:2a:da:db:bc:e5:fc:89:99:4e:b6:e2:eb:a4:
                    94:97:9a:f6:e8:7b:47:e2:ea:9b:00:33:b8:15:3d:
                    46:3f:03:e1:78:32:f8:33:db:68:67:9c:da:16:6c:
                    79:7b:bf:bd:93:39:d4:c1:5d:15:2c:b5:32:4d:3f:
                    45:c7:6a:44:8b:69:02:2a:fa:40:94:b6:eb:6c:3a:
                    ad:c3:ae:c5:c7:ff:9d:80:e1:e9:29:5a:25:06:b4:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0E:21:60:D6:A4:EB:E3:13:C1:99:B1:64:1A:E3:46:7D:20:45:08
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230302e3230312e3137362e302f32302d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.201.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:81:44:e5:47:66:ef:69:ab:4f:f3:fb:ce:8a:5d:4d:e4:2b:
         7b:36:d3:17:c9:2c:f4:ce:03:ad:3e:a0:6c:f1:86:11:e0:29:
         e5:d9:91:80:1d:25:ab:46:95:06:b6:98:bc:0f:64:de:85:9e:
         ba:18:cf:35:75:1e:f0:1a:2a:38:96:b4:f7:4b:f0:3d:31:76:
         64:31:e9:05:83:a6:62:4b:1a:57:5e:a3:21:e6:87:ff:e7:f3:
         8e:2a:e0:a1:09:36:53:93:c2:23:89:c0:9d:9a:4e:5a:15:8d:
         a5:9e:81:da:70:1d:e8:1c:0f:1a:b5:6f:d1:05:95:fd:b2:d9:
         39:16:ab:3f:9f:d0:85:4c:36:b8:91:4f:96:c8:96:6d:1b:42:
         57:f2:af:62:d0:9c:17:e1:2d:2a:f1:ae:e4:05:50:08:6b:a7:
         06:f2:82:59:16:c0:74:7f:77:9a:f9:38:33:a7:fb:36:c1:08:
         77:e1:d5:0b:9d:d2:03:94:ef:ff:8a:1c:68:bd:b2:1c:1e:df:
         f1:be:42:c3:51:b7:7e:a6:36:dc:96:56:d2:02:ba:d0:2d:76:
         ff:7d:f1:8d:d1:07:fe:4c:cd:be:cd:83:d7:01:66:96:bb:ff:
         08:4d:2a:20:ce:f1:55:58:90:fd:cf:0b:6d:13:d7:d2:65:df:
         61:cf:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org