Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32332d3234203d3e20323730383236.roa
File:                     3230302e3231392e32382e302f32332d3234203d3e20323730383236.roa (raw, json)
Hash identifier:          E04d9cqprc9kUjaI/Jl8nnbTsJC+PEoX4zoHtXTlMgY=
Subject key identifier:   FE:E5:9A:19:3E:64:89:EC:78:A3:39:D1:E8:88:13:B2:F4:B8:5B:DB
Certificate issuer:       /CN=7D1E177DABCB1F039743F730A41204DB06B8D471
Certificate serial:       528868B13714ABD9CC99D544DBF3DC2C18D084ED
Authority key identifier: 7D:1E:17:7D:AB:CB:1F:03:97:43:F7:30:A4:12:04:DB:06:B8:D4:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1E177DABCB1F039743F730A41204DB06B8D471.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32332d3234203d3e20323730383236.roa
Signing time:             Sat 28 Aug 2021 00:30:04 +0000
ROA not before:           Sat 28 Aug 2021 00:25:04 +0000
ROA not after:            Sat 27 Aug 2022 00:30:04 +0000
asID:                     270826
IP address blocks:        200.219.28.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:88:68:b1:37:14:ab:d9:cc:99:d5:44:db:f3:dc:2c:18:d0:84:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1E177DABCB1F039743F730A41204DB06B8D471
        Validity
            Not Before: Aug 28 00:25:04 2021 GMT
            Not After : Aug 27 00:30:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:2f:f9:3e:01:c7:cf:67:5c:94:8b:ac:f4:
                    1c:f2:7b:bd:c5:d8:9b:aa:d2:53:e1:a9:81:e7:b3:
                    a4:0f:b3:15:22:d6:0d:6e:31:b6:9e:3e:58:5c:2d:
                    c7:a8:04:07:6c:21:4f:e7:e0:6c:02:32:a8:67:af:
                    5d:96:f9:4d:b3:11:21:21:49:07:0d:fd:5f:6c:a5:
                    03:94:33:3a:bd:c4:0f:bf:5b:21:54:c2:f6:c6:53:
                    f4:01:25:36:42:13:08:a0:d5:80:de:9a:72:b6:72:
                    34:db:e3:d2:c4:ae:84:39:51:5f:51:00:60:38:c0:
                    9d:54:9c:4d:31:0d:10:f6:cd:ba:9d:8a:63:e3:73:
                    e4:18:4c:bf:b1:ec:45:ba:20:16:ef:7b:67:d9:fe:
                    2b:aa:3e:e6:e8:50:35:ad:20:b0:1c:a0:37:16:3f:
                    64:ec:6e:22:a5:90:c7:be:06:53:4a:cd:99:e4:5b:
                    bc:b9:a8:08:23:21:24:7c:98:f2:2a:30:6d:70:9c:
                    39:27:02:45:3e:34:ba:88:1a:14:bd:e4:1e:c2:73:
                    28:38:2a:70:43:15:59:60:4f:6a:5d:68:5b:66:dc:
                    93:83:81:3b:98:d8:9d:3a:65:52:ac:e8:82:a5:da:
                    de:de:8b:cf:0b:20:fb:57:f3:10:53:ee:de:59:27:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E5:9A:19:3E:64:89:EC:78:A3:39:D1:E8:88:13:B2:F4:B8:5B:DB
            X509v3 Authority Key Identifier:
                keyid:7D:1E:17:7D:AB:CB:1F:03:97:43:F7:30:A4:12:04:DB:06:B8:D4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/7D1E177DABCB1F039743F730A41204DB06B8D471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1E177DABCB1F039743F730A41204DB06B8D471.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32332d3234203d3e20323730383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:ac:dc:3b:8e:48:60:4d:92:de:1f:c9:51:f4:b7:a8:4e:52:
         1b:08:a7:a4:5b:62:1e:6c:6f:09:3d:00:30:e9:17:29:17:27:
         0c:b2:b3:6a:d4:76:61:9f:a8:cf:19:f3:d6:fa:cc:1a:40:10:
         fc:0d:f5:38:e1:18:94:f8:43:ea:9a:b4:59:d4:56:f7:cf:d7:
         33:2a:16:40:a7:ec:4e:94:06:26:9f:09:b8:8b:6a:e2:b8:99:
         20:1e:63:5d:5f:01:7b:0f:a7:21:3d:79:88:7c:5e:31:95:3f:
         7d:0a:b5:bf:98:46:9e:7d:67:0d:63:2a:fe:4e:a3:d6:39:1d:
         f8:6c:3f:24:42:c6:53:5f:c2:f2:74:39:8b:a2:b9:30:8a:2b:
         1d:a3:5a:13:93:09:35:40:29:b0:b0:4f:5c:ec:3c:b9:5d:a9:
         28:64:bd:79:f0:46:a3:9b:52:e7:c0:96:84:9d:f7:b9:e9:3d:
         d8:90:a8:8b:49:d6:ff:f9:a1:a0:77:c7:0b:c0:36:6c:8e:ad:
         7c:13:0a:23:c9:3f:32:f4:5e:88:e7:b6:e6:52:d7:a2:ac:d2:
         1b:4c:6e:f0:10:a9:10:bb:dd:e9:01:64:fc:81:8a:28:a0:bf:
         9d:9f:9e:ce:ed:26:1e:03:bd:06:ab:ba:5a:88:55:bd:c5:4a:
         45:1d:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org