Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
File:                     3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          X6+qTpDldMLORm4fFTkYVnPaYeps8kcBqt9s2L2zyqA=
Subject key identifier:   A2:2B:8D:F4:93:E2:C3:91:AE:67:A0:C3:74:DB:BB:70:3D:98:0C:E2
Certificate issuer:       /CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
Certificate serial:       09254B09DA97CDF11EFEDFF88859962148E71238
Authority key identifier: 32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
Signing time:             Tue 19 Dec 2023 12:53:22 +0000
ROA not before:           Tue 19 Dec 2023 12:48:22 +0000
ROA not after:            Tue 17 Dec 2024 12:53:22 +0000
asID:                     263441
IP address blocks:        200.225.108.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:25:4b:09:da:97:cd:f1:1e:fe:df:f8:88:59:96:21:48:e7:12:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
        Validity
            Not Before: Dec 19 12:48:22 2023 GMT
            Not After : Dec 17 12:53:22 2024 GMT
        Subject: CN=A22B8DF493E2C391AE67A0C374DBBB703D980CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:20:96:e3:35:11:57:58:68:e3:be:ad:be:
                    e5:df:de:0d:a0:71:6b:b4:40:82:8a:40:dd:20:e2:
                    8e:9d:ba:4f:c0:0e:e5:6b:dd:ae:5a:c3:ad:12:fe:
                    41:7e:58:d3:01:b9:58:25:d6:3b:0d:2d:9e:37:61:
                    d6:3d:d5:93:46:b9:90:ce:c3:18:ef:39:e8:2a:52:
                    ab:4f:89:f8:f0:45:55:cc:d3:90:b4:54:bf:46:17:
                    d6:cb:9e:34:c9:0b:b0:d9:ab:8c:92:06:a3:75:50:
                    42:06:a3:da:2f:a0:a7:c1:0a:b5:a9:cb:39:4b:af:
                    a5:1f:9c:13:9d:be:1a:48:9a:3e:8a:8c:bb:ea:9a:
                    a0:66:ec:d4:ee:af:c4:ee:6e:85:b8:13:76:87:00:
                    e5:9e:8e:80:90:c8:a8:c5:da:a4:9f:a3:69:df:af:
                    c8:89:e7:95:55:e7:30:98:98:f5:72:97:09:08:75:
                    45:a1:a3:ea:47:53:a9:8f:d2:ad:86:bd:92:ee:94:
                    1e:b8:ff:2f:57:e4:e4:43:c9:f0:ce:15:8b:44:f4:
                    6e:8d:2a:84:aa:80:26:13:8e:79:66:ac:44:b4:0a:
                    07:3b:07:98:28:70:46:3e:e2:d1:df:a0:05:77:cf:
                    0e:fc:06:65:5b:55:4f:06:ce:c2:ef:db:b3:50:dc:
                    05:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2B:8D:F4:93:E2:C3:91:AE:67:A0:C3:74:DB:BB:70:3D:98:0C:E2
            X509v3 Authority Key Identifier:
                keyid:32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:5a:3d:7a:eb:bf:d0:0f:f8:63:ef:8b:83:ee:4f:eb:ad:cd:
         92:66:36:df:55:0f:cf:dd:d3:e6:e9:94:a1:be:11:34:52:df:
         ca:68:01:8b:d1:db:6c:1b:00:0c:f1:86:69:b3:b9:a2:0e:4f:
         4a:0a:0f:29:fe:41:fb:1d:cf:7b:35:71:9c:3e:a3:f9:3a:93:
         4a:08:27:aa:cb:3b:fc:55:55:6f:81:08:97:6d:72:2c:ce:19:
         8a:11:72:2a:92:64:52:0d:3d:a3:91:8e:10:ae:fd:d1:4d:2b:
         b5:87:8f:82:55:7c:e5:99:91:5c:32:e0:e2:51:d1:f8:e2:a4:
         58:83:8e:fd:d6:db:a0:37:3a:c2:cd:e1:e7:69:fd:91:5f:88:
         6f:78:e8:b1:3f:f0:c9:d2:ea:ed:3f:d1:0d:ce:28:73:85:78:
         60:61:d3:94:ef:42:d7:14:6f:0a:0e:97:69:63:8c:21:6e:c2:
         eb:83:d3:72:8d:24:28:72:ef:7b:c5:cb:e0:31:0c:b7:4e:f3:
         2a:a7:7e:7f:c1:d7:d2:36:1c:24:e1:31:57:89:07:a4:c2:bb:
         66:2a:ed:e4:ac:4c:c0:20:e8:3b:de:3d:5a:cd:6b:04:8c:4b:
         98:f7:d2:e1:bd:c4:76:38:d6:e5:c5:b1:1e:91:bf:ac:e5:48:
         4e:2e:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org