Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa
File:                     3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          TQBbSkJrZ3olEK7vv9sDNjHY8CdYZsDfQdZyDVK6Sro=
Subject key identifier:   39:29:37:95:EF:F7:7E:43:BC:01:FD:E8:56:3B:74:E7:0B:7E:56:93
Certificate issuer:       /CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Certificate serial:       2FA8CA9CC83BB874F2486095940E46561B788DDD
Authority key identifier: 65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa
Signing time:             Sun 25 Feb 2024 22:26:59 +0000
ROA not before:           Sun 25 Feb 2024 22:21:59 +0000
ROA not after:            Sun 23 Feb 2025 22:26:59 +0000
asID:                     61317
IP address blocks:        200.220.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a8:ca:9c:c8:3b:b8:74:f2:48:60:95:94:0e:46:56:1b:78:8d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
        Validity
            Not Before: Feb 25 22:21:59 2024 GMT
            Not After : Feb 23 22:26:59 2025 GMT
        Subject: CN=39293795EFF77E43BC01FDE8563B74E70B7E5693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:71:50:f7:85:7a:c4:89:c2:ba:86:db:a6:
                    69:70:a9:9c:aa:fd:4b:07:2b:a0:7b:b2:8e:b5:3b:
                    a5:85:e3:56:80:1a:a9:dd:05:b3:a5:c6:7e:bc:cf:
                    c9:78:b8:a1:7b:b4:26:82:68:a4:e1:ef:1d:42:9c:
                    dc:1e:3a:2a:68:47:14:a0:91:7c:76:c0:46:33:6d:
                    c6:6c:69:0b:62:4a:47:a9:ff:9b:09:1e:da:b1:8b:
                    12:04:d4:bb:df:6e:bb:c8:6f:75:b1:46:6b:1d:58:
                    b3:23:98:31:cb:80:98:d8:d2:c5:4b:18:c2:c3:46:
                    4b:52:a5:b1:54:12:43:6c:b1:7b:c1:37:30:ae:62:
                    2a:8d:6c:c8:62:e1:60:5e:6a:ff:ee:88:85:af:4d:
                    07:1a:01:e0:89:f1:ca:db:91:31:da:df:88:c1:ec:
                    b4:21:67:7d:90:2b:22:08:d1:6a:e1:f4:67:da:9b:
                    3d:cd:df:09:64:1e:d4:32:c6:02:71:4d:e8:59:d5:
                    60:7c:bb:8f:35:d9:5b:fa:f0:2b:f7:e6:31:51:1a:
                    d9:57:30:4f:67:21:4d:2a:16:f4:94:a0:0d:e8:e8:
                    30:d6:d6:b6:df:f9:0f:57:0e:e1:b5:e7:90:d8:65:
                    a8:c6:c2:af:23:df:c2:b2:7d:57:8a:13:3b:f3:9d:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:29:37:95:EF:F7:7E:43:BC:01:FD:E8:56:3B:74:E7:0B:7E:56:93
            X509v3 Authority Key Identifier:
                keyid:65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136382e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:26:eb:72:51:4d:29:81:2b:e8:65:42:d8:fb:ee:f5:02:22:
         c9:0d:eb:e2:2b:5c:9a:d7:82:4b:75:69:99:d6:50:82:22:f8:
         96:ab:d0:69:99:82:dd:a2:5d:0d:8d:9a:49:96:7a:c2:87:ab:
         c7:7d:29:27:a1:db:72:72:38:24:5e:0d:ea:98:99:f7:30:c6:
         1a:42:58:2c:25:95:92:20:a4:74:63:6e:81:01:c2:31:7e:db:
         9f:3a:3c:41:43:64:c1:aa:71:17:b8:92:26:f4:fe:5d:17:f5:
         b7:53:90:3e:63:3e:7e:a8:5c:45:a2:b6:d6:ef:5a:51:b9:00:
         75:64:0f:f2:ca:52:6b:de:a5:09:15:f3:35:fd:4c:66:49:4a:
         c9:e7:94:c0:56:b4:24:92:7b:6c:44:ac:60:60:6b:62:39:fb:
         4f:8f:da:49:f7:56:d2:bc:2e:5d:f1:b9:96:aa:1f:44:69:18:
         24:0b:82:7c:03:96:dd:26:1b:5f:1e:72:49:26:9b:34:38:f4:
         84:89:57:59:cc:f9:91:ec:0d:47:45:87:58:f6:d2:17:f3:92:
         08:b3:97:1e:81:4a:0e:6b:cb:96:7a:a6:b7:c7:e9:bd:1f:d6:
         74:0e:15:4c:59:41:99:10:63:c6:e0:eb:af:96:98:6a:08:37:
         b7:27:8a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:30 2024 by rpki-client on console-ams.rpki-client.org