Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38342e302f32322d3232203d3e20323730343430.roa
File:                     3230302e31332e38342e302f32322d3232203d3e20323730343430.roa (raw, json)
Hash identifier:          8EXoS083/Dj226KmbHXEZVjnwsySc+pQIIWYC0M0YUA=
Subject key identifier:   AF:35:12:CC:4A:C4:0E:56:8A:97:D6:A5:B1:D7:4B:B9:FF:A7:35:C2
Certificate issuer:       /CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
Certificate serial:       726A7A1F95C0C47008A1121D8B4F6D438A05B539
Authority key identifier: F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38342e302f32322d3232203d3e20323730343430.roa
Signing time:             Thu 15 Feb 2024 21:00:00 +0000
ROA not before:           Thu 15 Feb 2024 20:55:00 +0000
ROA not after:            Thu 13 Feb 2025 21:00:00 +0000
asID:                     270440
IP address blocks:        200.13.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6a:7a:1f:95:c0:c4:70:08:a1:12:1d:8b:4f:6d:43:8a:05:b5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
        Validity
            Not Before: Feb 15 20:55:00 2024 GMT
            Not After : Feb 13 21:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:02:83:44:84:c4:e2:93:34:c2:23:61:50:
                    87:ec:1d:00:c5:e8:b7:c0:f5:19:83:62:96:81:47:
                    bc:0e:fa:94:6d:65:4f:9c:ed:6c:15:9e:d9:0f:18:
                    05:69:a8:af:ad:e4:0d:42:00:de:43:3c:cc:b1:ea:
                    0d:3b:54:50:9c:42:36:7b:36:92:4c:6a:68:47:49:
                    69:82:96:7c:d4:db:ca:15:60:5c:9f:1a:cf:c6:f6:
                    a4:9d:57:bd:8d:70:af:57:ec:2b:34:01:67:ad:7c:
                    26:53:9a:b6:9f:a4:bf:67:9f:61:2c:1a:13:5d:02:
                    16:51:be:e9:c7:c6:9d:70:2a:a0:87:25:c8:40:66:
                    9e:c1:5c:a1:8a:29:ee:8c:59:a4:85:14:72:7f:e0:
                    78:47:c7:f0:b3:16:51:ae:7f:17:3a:c5:92:ea:e1:
                    09:18:f5:78:d0:d6:fe:8d:a2:c7:7d:9f:23:69:a6:
                    76:1c:e0:bb:8e:37:a9:4a:2b:59:d8:cb:93:a4:00:
                    0f:8c:cc:49:4d:29:14:53:6f:66:8d:ed:34:1b:d8:
                    ca:50:2c:3f:b5:bf:14:34:b2:9a:74:6f:af:32:03:
                    ba:4c:f7:38:f2:41:e7:d6:f0:da:65:dd:cd:09:70:
                    1b:ce:a3:80:7a:e9:21:9f:9f:cc:f5:b2:74:1b:6f:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:12:CC:4A:C4:0E:56:8A:97:D6:A5:B1:D7:4B:B9:FF:A7:35:C2
            X509v3 Authority Key Identifier:
                keyid:F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38342e302f32322d3232203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:78:4f:17:4b:8a:6c:22:f2:1d:b7:e0:74:cc:0c:3d:ff:14:
         0c:db:31:26:d7:c5:fb:b7:3a:60:99:8e:c6:02:7a:98:66:bc:
         57:c1:94:2e:92:58:23:bd:bf:4a:f7:f8:db:5f:65:33:96:88:
         ca:ba:5a:a1:4f:d2:91:aa:97:1c:45:94:fc:0f:b6:a8:8f:44:
         dc:a4:10:f4:29:18:73:51:eb:d0:32:c3:4a:6e:93:4d:e1:05:
         f7:71:ff:72:0f:7c:d7:5e:85:68:80:b6:5b:40:67:84:26:4b:
         41:d9:fe:68:81:ea:16:c8:91:0f:50:6f:9e:aa:41:0f:01:47:
         3a:b0:13:c1:e2:cd:c2:22:31:69:aa:a3:8a:2f:9e:a1:5e:78:
         0a:72:2c:02:bc:52:a4:99:36:7c:0c:fa:42:74:d3:e8:86:bc:
         bf:e6:e3:56:16:53:a1:ed:30:d9:dc:a6:da:ac:e1:a7:37:a7:
         be:1b:dc:8f:9c:50:4d:75:20:39:69:49:3b:df:2b:94:6b:2c:
         61:1e:64:d2:31:81:f1:97:b3:06:86:39:bf:df:10:95:e3:42:
         da:14:5f:0f:72:9c:77:ef:f7:a2:a8:e9:72:26:4b:4a:88:76:
         a6:9a:7a:f5:c4:1e:2c:91:dd:44:25:24:53:51:50:d7:4a:c2:
         dc:68:f7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org