Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
File:                     3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa (raw, json)
Hash identifier:          QBf56nh4iOXvfBHP2R4tHt4aP7Uk8Nf+e44HxBcre1g=
Subject key identifier:   13:34:AD:89:73:56:72:B2:01:91:AE:69:21:B9:4B:A5:B5:89:AF:5F
Certificate issuer:       /CN=80A84A91D7829D181BA98D210D118AEA94C1B232
Certificate serial:       3E5247B999F8F0CFA3A79FE8A3D983222A0728F9
Authority key identifier: 80:A8:4A:91:D7:82:9D:18:1B:A9:8D:21:0D:11:8A:EA:94:C1:B2:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80A84A91D7829D181BA98D210D118AEA94C1B232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa
Signing time:             Tue 21 Nov 2023 17:51:43 +0000
ROA not before:           Tue 21 Nov 2023 17:46:43 +0000
ROA not after:            Tue 19 Nov 2024 17:51:43 +0000
asID:                     271335
IP address blocks:        207.248.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:52:47:b9:99:f8:f0:cf:a3:a7:9f:e8:a3:d9:83:22:2a:07:28:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A84A91D7829D181BA98D210D118AEA94C1B232
        Validity
            Not Before: Nov 21 17:46:43 2023 GMT
            Not After : Nov 19 17:51:43 2024 GMT
        Subject: CN=1334AD89735672B20191AE6921B94BA5B589AF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:07:38:8b:13:56:85:85:07:8c:5c:d5:94:
                    4c:c0:30:49:9c:17:91:4c:fa:2c:d2:22:30:b4:0f:
                    16:a7:bf:49:f8:d2:37:56:bb:3a:c5:16:f5:08:38:
                    0e:5a:bf:3a:c8:5e:80:bd:f1:71:48:82:37:e9:78:
                    be:5c:ae:18:90:6a:ad:85:29:4a:65:89:01:e7:ab:
                    5f:e5:df:fe:2b:e6:2c:af:72:64:c0:ab:9f:c5:f4:
                    27:0d:6b:42:ec:bc:69:2f:1c:26:09:11:94:6e:aa:
                    02:37:b7:ab:6b:94:24:51:4c:fe:d1:1b:1a:8b:25:
                    e3:ac:36:8d:3a:46:bf:d7:3e:81:b9:b8:d7:fa:05:
                    23:ec:f5:0a:2f:4e:1a:be:22:21:2c:15:ae:ae:55:
                    30:96:a0:9c:22:41:e6:49:16:8c:29:d0:5e:c5:43:
                    a2:84:67:7a:09:71:bb:26:0a:1d:44:61:f9:10:b2:
                    69:f1:f6:85:24:69:38:50:93:ad:4f:6d:9d:48:a3:
                    9d:d7:63:e3:91:42:06:dc:25:42:e4:c3:43:10:99:
                    83:ad:d9:f1:1f:42:d7:e5:e1:47:86:b7:58:26:1f:
                    e5:57:1d:e5:25:29:4d:88:b8:67:af:bb:11:e8:7a:
                    8d:88:af:d2:91:bd:a8:23:a8:44:fd:d5:68:82:a6:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:AD:89:73:56:72:B2:01:91:AE:69:21:B9:4B:A5:B5:89:AF:5F
            X509v3 Authority Key Identifier:
                keyid:80:A8:4A:91:D7:82:9D:18:1B:A9:8D:21:0D:11:8A:EA:94:C1:B2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/80A84A91D7829D181BA98D210D118AEA94C1B232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80A84A91D7829D181BA98D210D118AEA94C1B232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:af:9a:8e:6f:96:29:d8:58:5f:82:62:08:2b:29:db:5b:09:
         ff:b9:7f:8c:13:b9:11:c4:15:aa:4b:ea:a3:6c:53:c5:9c:87:
         06:d4:aa:85:34:2c:ef:d6:4f:1b:38:3d:13:b7:31:e1:b0:8a:
         51:a0:13:02:a4:91:71:68:8a:99:fb:ee:92:ff:0e:a1:6d:77:
         bd:32:20:16:69:9c:e5:b4:ca:27:01:f7:97:dd:ca:ce:57:e5:
         ec:f6:74:60:46:b5:fe:e7:e4:6e:ba:c6:af:2e:30:47:0a:72:
         2d:ba:23:09:f6:e6:97:a5:7b:97:04:4a:17:1a:65:fa:59:3d:
         c5:22:3f:63:c9:49:5c:3b:e9:4d:4e:2a:4f:bf:df:18:03:47:
         c8:41:93:e2:be:e5:7f:d3:f2:25:2e:0b:22:57:4a:85:0e:f4:
         db:71:d8:30:e9:82:40:55:0c:c0:7b:aa:fd:17:86:83:d1:ad:
         c8:d4:60:3c:af:3d:4a:67:b0:97:78:8a:dd:2c:ef:ee:c2:ba:
         69:94:37:41:60:8c:23:e3:47:78:8b:c7:df:2c:9c:bd:17:42:
         1a:a4:db:70:1d:fe:5d:1d:d4:c7:02:b3:c7:d9:ad:30:28:d5:
         1f:91:2b:64:53:7c:75:3a:c6:9a:7b:03:a2:53:54:2c:c4:76:
         7d:42:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org