Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmVGpgffccz1aaXTPrPXYyFPNUkZiU4TcWQ9PYhbiD4/0/3230302e3136322e3134342e302f32302d3234203d3e203130363330.roa
File:                     3230302e3136322e3134342e302f32302d3234203d3e203130363330.roa (raw, json)
Hash identifier:          DI0vxw4PGT4gzzfXaR8opDrm4YrlkmKTkDiPXKzBSQI=
Subject key identifier:   F4:A4:6C:EE:48:50:A3:A1:12:D3:79:6C:5F:39:05:44:E8:3A:E3:75
Certificate issuer:       /CN=A7353F2729CDCF0EC74998C323F7FB42AE1A786C
Certificate serial:       1E97818D16527B6AE3A6844A9B43061A80CFE2C2
Authority key identifier: A7:35:3F:27:29:CD:CF:0E:C7:49:98:C3:23:F7:FB:42:AE:1A:78:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7353F2729CDCF0EC74998C323F7FB42AE1A786C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmVGpgffccz1aaXTPrPXYyFPNUkZiU4TcWQ9PYhbiD4/0/3230302e3136322e3134342e302f32302d3234203d3e203130363330.roa
Signing time:             Wed 09 Nov 2022 10:07:57 +0000
ROA not before:           Wed 09 Nov 2022 10:02:57 +0000
ROA not after:            Wed 08 Nov 2023 10:07:57 +0000
asID:                     10630
IP address blocks:        200.162.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:97:81:8d:16:52:7b:6a:e3:a6:84:4a:9b:43:06:1a:80:cf:e2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7353F2729CDCF0EC74998C323F7FB42AE1A786C
        Validity
            Not Before: Nov  9 10:02:57 2022 GMT
            Not After : Nov  8 10:07:57 2023 GMT
        Subject: CN=F4A46CEE4850A3A112D3796C5F390544E83AE375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:a4:25:57:33:94:8f:38:e8:23:e1:38:c1:
                    98:ff:cc:74:d0:48:00:df:a1:3f:51:7d:14:5d:c1:
                    94:24:88:08:f6:20:6d:18:20:dc:22:9b:75:22:cd:
                    25:ee:15:72:fa:89:c6:24:91:c8:96:29:dc:aa:ee:
                    6c:d6:ed:21:41:0b:6d:a8:a9:8c:29:78:99:4c:40:
                    29:a2:7c:f3:94:1c:bd:1d:a1:ac:4e:42:52:43:3b:
                    c1:88:e5:ab:7e:24:e6:fd:60:c7:99:af:8c:4a:4f:
                    2f:0c:d2:66:85:e0:52:11:26:0c:16:10:d2:99:1d:
                    77:9e:4e:c8:f8:6c:4a:bc:7b:f0:27:1f:a5:81:b0:
                    da:9c:f2:20:69:1f:64:6b:a4:d6:e9:19:b7:ea:87:
                    30:9e:09:e4:73:0a:79:45:a4:cf:0a:8b:29:68:56:
                    29:7e:ca:b2:0d:d9:15:55:7a:8c:6d:3b:8a:98:f8:
                    d3:08:03:35:05:ff:9e:d0:d3:40:0b:98:20:a5:18:
                    c9:30:f2:f3:ea:a8:86:52:40:7f:32:8a:6c:5f:57:
                    80:84:c0:76:29:55:6f:b6:9b:5b:b1:77:d3:cc:6e:
                    5c:f6:62:01:37:59:44:00:17:2c:36:c9:90:03:bf:
                    1c:63:dc:e5:79:00:70:22:80:a6:9c:3e:c7:7f:56:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:6C:EE:48:50:A3:A1:12:D3:79:6C:5F:39:05:44:E8:3A:E3:75
            X509v3 Authority Key Identifier:
                keyid:A7:35:3F:27:29:CD:CF:0E:C7:49:98:C3:23:F7:FB:42:AE:1A:78:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmVGpgffccz1aaXTPrPXYyFPNUkZiU4TcWQ9PYhbiD4/0/A7353F2729CDCF0EC74998C323F7FB42AE1A786C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7353F2729CDCF0EC74998C323F7FB42AE1A786C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmVGpgffccz1aaXTPrPXYyFPNUkZiU4TcWQ9PYhbiD4/0/3230302e3136322e3134342e302f32302d3234203d3e203130363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:53:00:54:8a:65:f6:35:74:fd:ae:48:cd:50:77:28:78:bf:
         5e:af:e2:eb:79:f8:a6:92:aa:9b:a7:d5:d9:ce:65:54:f8:15:
         04:cf:6f:b1:da:99:f9:51:71:ee:d2:d9:15:19:a7:26:33:d3:
         a0:18:c3:94:a7:d3:54:8a:56:d9:f2:58:83:9c:ed:f6:4f:3c:
         bc:89:35:93:fc:c9:51:a2:3d:13:3a:6f:fe:1c:91:f3:81:c4:
         8b:0e:23:44:1c:1c:d8:71:3f:c0:97:10:32:ef:e2:2e:0a:85:
         3d:16:dc:38:8c:41:da:64:83:2d:25:58:05:a2:4a:b6:ee:95:
         dd:f8:26:95:4a:20:9f:6f:cc:9f:28:06:32:0d:75:70:37:8b:
         72:38:1b:14:d6:2a:28:7c:2f:c1:ab:43:21:15:ee:1f:31:fc:
         87:25:24:75:82:e7:b0:f5:3e:02:51:c3:83:79:84:3c:f9:62:
         2a:42:a3:ee:2b:78:d1:70:3c:0a:cc:20:7a:a6:f3:c0:4c:a1:
         02:35:51:92:99:f2:98:16:66:4b:6c:6d:db:9a:96:43:5c:99:
         17:2c:5a:40:67:16:37:91:5c:cc:25:c1:0b:fa:16:12:c2:41:
         5e:e7:15:4a:bf:64:5c:a9:e7:48:c1:11:56:23:cd:70:75:30:
         ae:24:7e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org