Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa
File:                     3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa (raw, json)
Hash identifier:          5l9Zmyu4gK8H8hBAAV0pvfYSCN97fZMVrei7MJtmTIQ=
Subject key identifier:   71:06:89:A6:F4:B6:83:5C:D2:2F:D2:DF:CE:65:D1:A7:C4:2D:B5:D0
Certificate issuer:       /CN=CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5
Certificate serial:       1E64AD112FD667DED65658921F8ECB5DF332436A
Authority key identifier: CF:6E:BB:49:C2:AE:6F:92:DE:C6:A1:B3:B2:E2:74:9C:1F:53:9A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa
Signing time:             Tue 13 Feb 2024 21:18:00 +0000
ROA not before:           Tue 13 Feb 2024 21:13:00 +0000
ROA not after:            Tue 11 Feb 2025 21:18:00 +0000
asID:                     270450
IP address blocks:        200.50.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:64:ad:11:2f:d6:67:de:d6:56:58:92:1f:8e:cb:5d:f3:32:43:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5
        Validity
            Not Before: Feb 13 21:13:00 2024 GMT
            Not After : Feb 11 21:18:00 2025 GMT
        Subject: CN=710689A6F4B6835CD22FD2DFCE65D1A7C42DB5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:9c:af:5f:b5:24:89:7a:4a:96:98:cc:ab:
                    52:33:4e:74:34:a8:53:6e:7e:47:0f:c0:b9:25:02:
                    19:84:41:7b:46:fd:05:e4:b2:4f:99:b2:0c:f9:4a:
                    b6:56:fd:b4:e1:0f:0e:26:64:3a:6a:c6:66:19:a4:
                    ce:76:47:87:4d:2b:33:b8:a0:78:b9:60:dc:b4:c6:
                    d9:ec:23:cf:eb:3f:3c:8e:e4:f3:b2:ab:a0:63:da:
                    78:a9:27:d3:d3:af:ab:c6:ca:8d:75:37:81:2b:4a:
                    d5:2e:fa:69:6a:d0:2b:31:76:27:bd:a5:d5:ef:35:
                    f3:41:54:67:bd:b8:e1:a4:79:3d:a2:cc:6a:5a:df:
                    c9:eb:b0:d3:29:4c:2a:44:64:e2:23:05:b0:90:28:
                    45:3b:78:79:7a:ae:5c:32:ee:18:f9:65:d1:a8:d0:
                    3a:55:cd:65:80:47:4f:a8:c0:81:66:78:5e:c8:4c:
                    06:3c:6d:bb:9b:0a:f5:f8:17:93:8e:95:81:99:6d:
                    2d:92:63:e9:b5:43:56:43:27:cd:54:b8:be:0e:ae:
                    2f:46:07:d2:9a:e7:5b:4a:22:7b:bd:dc:7e:5d:d2:
                    26:0b:91:35:2c:be:89:98:a6:9b:7d:2d:13:4d:a3:
                    5d:94:03:9c:c4:90:93:8e:d5:4e:28:3b:e2:23:0e:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:06:89:A6:F4:B6:83:5C:D2:2F:D2:DF:CE:65:D1:A7:C4:2D:B5:D0
            X509v3 Authority Key Identifier:
                keyid:CF:6E:BB:49:C2:AE:6F:92:DE:C6:A1:B3:B2:E2:74:9C:1F:53:9A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:80:b6:e2:af:d9:ec:1a:f2:32:7c:80:45:da:6b:7f:c4:
         ff:38:4b:dc:a5:e8:b8:fa:ec:9f:e7:f6:54:01:5f:2b:46:ab:
         53:5b:de:dc:c2:af:96:8a:16:5d:c0:eb:a5:26:58:36:28:5b:
         54:02:98:76:5a:4a:58:e4:4d:5f:a3:20:49:50:b2:21:d7:4a:
         93:c1:37:13:d7:df:11:e9:e7:8a:8d:ba:2f:2e:15:f8:fd:d0:
         ff:ab:82:e1:dc:08:8b:87:ee:a6:91:40:99:be:67:b0:1e:94:
         14:68:37:cf:e6:6b:89:ed:25:73:44:41:90:1e:8d:d8:1c:b7:
         ba:39:3e:f4:e6:1d:62:7a:b2:92:7c:c6:87:d5:c9:a3:51:b6:
         c5:07:de:2d:2c:ee:08:e2:94:f1:c2:ca:65:35:12:61:8f:1a:
         57:e4:fa:e5:bb:55:ab:3b:c9:df:18:46:34:7a:20:91:91:5b:
         2d:23:af:82:49:68:37:b8:36:52:79:ca:1d:df:40:db:e5:ba:
         32:73:fb:ae:72:7a:22:19:b1:ab:75:0b:ad:fd:2e:5f:75:21:
         36:aa:e3:b2:e3:3d:48:a3:ef:be:cd:d8:10:5c:a7:69:8a:d8:
         32:02:29:21:f0:51:47:38:45:93:fa:c1:34:5f:e0:ab:3c:18:
         66:5c:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org