Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38342e302f32332d3233203d3e20323730343430.roa
File:                     3230302e31332e38342e302f32332d3233203d3e20323730343430.roa (raw, json)
Hash identifier:          qt7EsBUlYvGl98HFXdfY5TBuH+Cg1wyy/c+jC80Yxsw=
Subject key identifier:   B6:CC:0D:B5:2F:1C:AA:2A:23:A2:75:E9:32:78:E8:82:6F:C9:D6:F9
Certificate issuer:       /CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
Certificate serial:       5A8312EA9BCD58AC72A2340D67AA5F05C1718E9D
Authority key identifier: F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38342e302f32332d3233203d3e20323730343430.roa
Signing time:             Thu 15 Feb 2024 21:00:01 +0000
ROA not before:           Thu 15 Feb 2024 20:55:01 +0000
ROA not after:            Thu 13 Feb 2025 21:00:01 +0000
asID:                     270440
IP address blocks:        200.13.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:83:12:ea:9b:cd:58:ac:72:a2:34:0d:67:aa:5f:05:c1:71:8e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
        Validity
            Not Before: Feb 15 20:55:01 2024 GMT
            Not After : Feb 13 21:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:21:4b:5d:c0:80:ec:3b:dd:ca:1a:c0:cf:
                    4b:cc:b3:b0:67:d6:f5:a8:f8:6e:0a:1d:0d:53:7b:
                    95:61:32:3e:29:7a:80:c6:36:ff:0f:e2:f5:f8:2e:
                    72:20:2f:5e:85:ba:ba:e6:f5:33:48:21:66:77:f0:
                    7e:9a:3e:44:5c:85:7f:39:85:ad:df:2d:e5:32:4c:
                    83:7d:53:54:78:6f:32:0e:ac:3f:5d:d1:5e:e5:0d:
                    d2:00:4d:5b:ce:8f:f5:40:dd:1c:0f:13:c7:63:26:
                    80:dd:54:21:ba:39:10:5d:09:c6:0b:90:f9:a9:81:
                    34:0c:9f:f2:ba:51:5b:cd:33:6f:bb:ae:4a:9f:92:
                    fc:0a:41:5d:3d:22:ad:a7:84:f4:8a:ea:46:c4:66:
                    79:e3:e6:48:cc:2f:94:30:5a:fb:75:be:b4:60:74:
                    80:42:7f:78:b7:ad:b5:2c:53:3a:b4:da:53:94:cc:
                    9c:61:81:16:0c:cd:55:51:8d:92:1a:ec:c1:57:13:
                    b8:4c:73:47:05:ab:b6:d8:8c:f6:7d:92:89:71:ab:
                    cc:a5:16:b7:aa:c4:ac:ed:21:6b:19:66:dc:1c:ed:
                    5b:19:07:32:41:29:01:43:1d:24:85:3d:a9:ba:0d:
                    4e:dc:83:9b:dc:ae:d4:38:1a:7b:37:e1:05:07:e0:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CC:0D:B5:2F:1C:AA:2A:23:A2:75:E9:32:78:E8:82:6F:C9:D6:F9
            X509v3 Authority Key Identifier:
                keyid:F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38342e302f32332d3233203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:1e:9e:b5:f1:5f:b8:c7:4e:71:c2:ea:4b:cd:7e:d0:fb:
         b6:ad:e4:35:0a:ea:10:01:51:f4:68:e8:f0:22:8b:4a:d8:35:
         ff:57:db:ba:78:8f:94:35:75:23:85:9f:b0:04:e1:ac:c2:a9:
         20:2f:78:37:3a:98:24:fa:3b:5e:19:33:3f:6f:b4:77:2b:84:
         ba:fc:d3:84:54:9e:a2:98:28:ec:51:8c:ba:1c:6e:1f:72:e6:
         bc:3f:cb:44:1b:4b:10:0f:66:ed:07:1b:81:b0:49:77:ff:5c:
         06:c3:83:a0:ef:5f:8a:6f:fe:84:af:1f:ab:aa:d6:03:90:90:
         e9:9c:44:95:41:ce:d1:2f:ec:a5:49:82:77:14:ff:8a:66:9b:
         d1:2f:76:87:a4:bd:55:d3:49:c2:34:01:d3:60:eb:b6:8a:e2:
         ab:0f:0f:23:ab:69:e2:f7:3f:43:7b:d8:aa:5b:1b:81:fe:6a:
         8c:f4:64:8b:7e:50:27:32:c9:de:e0:68:5a:ef:a6:43:14:36:
         10:be:63:3c:44:7b:b6:f9:89:c9:3c:68:3c:2b:7f:59:1b:79:
         f3:ad:f6:8f:98:5e:77:94:ff:60:8a:c9:56:de:e7:f4:82:c9:
         eb:a3:e7:7a:08:3d:c6:a1:cf:93:d0:6a:1d:33:ef:99:8b:f8:
         be:25:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org