Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/1/3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa
File:                     3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa (raw, json)
Hash identifier:          9zgiCfhd0mBrYrfI3xkdyTaYejbs5FtoYxurwlWl3vk=
Subject key identifier:   1C:8A:3B:66:57:4D:9A:31:E6:55:91:37:25:73:F7:5C:C3:1A:03:FE
Certificate issuer:       /CN=7EFB1F4698A706D800051B2455B22A8B20F627C9
Certificate serial:       63E29DC5ED453DB1124A02FF689C84A63833444E
Authority key identifier: 7E:FB:1F:46:98:A7:06:D8:00:05:1B:24:55:B2:2A:8B:20:F6:27:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EFB1F4698A706D800051B2455B22A8B20F627C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/1/3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa
Signing time:             Wed 06 Sep 2023 23:45:25 +0000
ROA not before:           Wed 06 Sep 2023 23:40:25 +0000
ROA not after:            Wed 04 Sep 2024 23:45:25 +0000
asID:                     271388
IP address blocks:        200.36.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e2:9d:c5:ed:45:3d:b1:12:4a:02:ff:68:9c:84:a6:38:33:44:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EFB1F4698A706D800051B2455B22A8B20F627C9
        Validity
            Not Before: Sep  6 23:40:25 2023 GMT
            Not After : Sep  4 23:45:25 2024 GMT
        Subject: CN=1C8A3B66574D9A31E65591372573F75CC31A03FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:1b:9f:c9:cc:eb:0b:17:66:48:b7:32:af:
                    94:a2:ec:8a:2b:a8:38:d0:f5:5a:e4:ac:18:6e:46:
                    ca:23:76:59:b7:3d:5d:12:4c:94:40:fa:b7:e5:6e:
                    cb:43:1f:d6:57:c0:c7:31:3e:67:8a:57:f3:1d:01:
                    d7:53:0a:4e:49:b7:c9:74:19:fb:ef:65:cc:91:31:
                    a2:97:3e:0f:3c:7f:29:e4:4b:8f:02:69:b0:04:39:
                    8d:cc:bc:39:f7:35:5a:d1:65:5e:aa:bf:57:bd:16:
                    06:12:b6:f3:54:76:4e:40:78:ae:04:47:f3:15:26:
                    71:49:d3:31:f5:90:d8:db:53:64:b7:ac:b2:65:2f:
                    18:e1:94:65:ec:77:3f:1e:12:a7:63:e1:ac:27:9f:
                    c9:f5:24:e2:ea:7f:78:3a:78:c5:ae:89:cc:8c:53:
                    14:36:6d:6d:74:eb:d2:e7:93:80:ea:93:56:d2:c2:
                    f3:5f:c1:17:b1:b1:fc:91:71:6c:7a:34:b2:00:fd:
                    30:9a:27:52:f1:2e:13:95:e7:5d:1c:66:cf:2b:00:
                    a8:c8:f1:1c:5c:0a:2a:bc:cd:c3:c0:fd:51:cc:8d:
                    b4:cf:f1:e6:47:43:12:c6:71:4d:49:03:cc:4c:a5:
                    eb:f7:73:2c:49:96:5c:9c:c5:ad:7f:a6:e6:06:20:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8A:3B:66:57:4D:9A:31:E6:55:91:37:25:73:F7:5C:C3:1A:03:FE
            X509v3 Authority Key Identifier:
                keyid:7E:FB:1F:46:98:A7:06:D8:00:05:1B:24:55:B2:2A:8B:20:F6:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/1/7EFB1F4698A706D800051B2455B22A8B20F627C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EFB1F4698A706D800051B2455B22A8B20F627C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/1/3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:29:50:1f:7c:c0:58:82:6b:fb:b9:f1:99:a6:2c:bf:d4:f5:
         38:01:f4:d6:2f:da:4f:29:6d:79:d5:5c:d1:bc:a1:bc:47:60:
         a3:82:ba:ee:10:a7:64:a4:c2:db:7a:80:d0:7d:2a:0f:1f:d0:
         ce:80:a3:4f:37:d5:98:61:0c:9d:8c:e6:1e:69:8e:ff:0f:bd:
         59:cc:b7:58:de:bd:a3:c8:cf:a6:59:60:a3:2e:19:47:78:27:
         b5:fb:98:a3:dc:97:3f:d5:a7:e9:37:3a:b5:d6:3e:53:d4:70:
         21:fc:c9:c0:6c:bc:db:45:45:0a:94:ce:ac:d0:6f:08:b7:b1:
         b9:81:2a:13:a7:47:a5:2f:c1:aa:f7:ee:1a:c3:5c:cd:18:89:
         60:10:9e:e5:65:db:d7:2f:1d:84:e2:df:59:20:82:0b:d0:57:
         54:41:2e:46:c6:8f:bc:c1:24:9b:84:7b:c9:73:5a:bd:59:73:
         01:a5:8c:12:c7:51:d3:9e:32:6e:82:02:38:e0:bc:15:25:01:
         fe:0b:8e:65:5c:4d:e1:60:e7:4f:97:4a:62:2a:e2:2a:12:aa:
         cf:95:53:94:8c:44:2e:81:5b:89:01:5a:cf:98:d4:5a:72:f1:
         ca:4e:e6:f9:8c:ac:f7:89:85:08:cb:58:fb:a4:ab:ea:fb:a6:
         60:d7:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org