Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136392e302f32342d3234203d3e203631333137.roa
File:                     3230302e3232302e3136392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          l46OiVUMwMEg5gBzVZKQOzkF7mNQ6esFVrEyjpVQDic=
Subject key identifier:   FF:4B:6C:4E:91:25:83:0E:EB:69:01:70:EE:8C:10:0B:C1:8D:0A:01
Certificate issuer:       /CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Certificate serial:       66E4C08422A238E432F4E45C8F4D04538CDE4FDD
Authority key identifier: 65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136392e302f32342d3234203d3e203631333137.roa
Signing time:             Sun 25 Feb 2024 23:24:35 +0000
ROA not before:           Sun 25 Feb 2024 23:19:35 +0000
ROA not after:            Sun 23 Feb 2025 23:24:35 +0000
asID:                     61317
IP address blocks:        200.220.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e4:c0:84:22:a2:38:e4:32:f4:e4:5c:8f:4d:04:53:8c:de:4f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
        Validity
            Not Before: Feb 25 23:19:35 2024 GMT
            Not After : Feb 23 23:24:35 2025 GMT
        Subject: CN=FF4B6C4E9125830EEB690170EE8C100BC18D0A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:86:9e:9d:d7:bf:a8:12:00:6d:12:a4:9d:
                    07:b0:97:e7:38:1e:3c:55:2a:82:c3:3c:dc:fb:ba:
                    f3:c8:7a:b8:f2:de:9f:5b:a7:8a:66:02:cb:8c:26:
                    ce:ed:44:9b:70:28:45:e8:4c:19:cb:6c:51:20:00:
                    69:09:f2:72:10:ae:e7:34:fa:0e:64:30:af:4a:c2:
                    01:cd:75:1d:43:5b:51:52:2c:f9:1c:1b:92:66:65:
                    cf:ad:a0:07:19:13:21:2e:18:db:22:da:28:d9:0d:
                    ac:da:40:cd:c2:bb:a1:0f:d1:80:3b:35:92:61:cb:
                    b2:ee:fe:47:f1:4d:97:38:c0:17:c1:e2:bd:a5:7b:
                    7f:79:b9:cd:ab:dc:01:88:de:83:0a:97:1e:d0:c0:
                    57:68:c4:ef:34:b8:62:4e:78:36:73:db:03:16:30:
                    28:ec:c4:0e:5d:d8:01:66:29:6c:b5:93:d7:17:03:
                    7e:82:33:06:5b:c4:e2:1d:63:64:08:37:25:9a:04:
                    51:e6:23:7c:c1:cb:8c:68:27:93:c2:0b:65:b2:c1:
                    cf:71:2c:c1:51:74:dc:11:45:a8:78:0e:17:e6:11:
                    bc:d8:22:c8:04:22:e9:27:19:5c:f6:73:11:c4:b3:
                    52:2f:15:79:65:e6:b7:23:fd:5e:6a:2e:d2:0b:b0:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4B:6C:4E:91:25:83:0E:EB:69:01:70:EE:8C:10:0B:C1:8D:0A:01
            X509v3 Authority Key Identifier:
                keyid:65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:62:7b:a3:44:72:07:47:ef:a5:88:74:0e:28:5d:96:6e:11:
         c6:50:2e:2e:dc:fd:ce:72:9b:21:a1:03:e1:d3:eb:37:b5:df:
         c6:38:ea:ef:af:36:a5:77:55:59:45:d3:55:54:cc:31:69:ab:
         31:75:38:61:f8:a2:3c:4d:b7:63:e9:c7:03:1b:ac:53:7e:3e:
         3d:2d:a9:e0:99:6e:ea:77:58:f7:be:47:bf:9f:bf:eb:e8:46:
         0d:1a:7c:f8:ea:ee:f1:89:3a:2b:1f:b9:63:87:3f:f3:2f:56:
         59:53:a4:db:fc:56:5d:87:ce:b5:31:4f:0b:24:01:ef:f1:38:
         2d:14:52:78:2f:bd:63:5b:3a:55:18:0e:a5:fe:a0:d5:bd:3a:
         b0:9e:23:c8:89:ad:98:58:94:d3:de:72:d3:f4:f0:e2:81:58:
         18:b4:20:a8:51:64:30:e4:d8:5d:29:55:20:fa:03:02:d2:ab:
         6a:14:46:d1:12:01:74:55:10:db:46:05:ea:4f:0f:2f:54:cd:
         d0:54:bb:66:e4:7f:46:49:3d:cb:3a:f4:12:37:a7:00:29:69:
         d6:07:dd:c5:6c:1c:44:0a:2a:1d:6c:1a:1d:06:90:03:dc:9e:
         7b:11:da:1e:29:f3:5f:38:25:d8:4b:c5:ba:25:fb:47:04:06:
         61:24:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:30 2024 by rpki-client on console-ams.rpki-client.org