Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa
File:                     3230302e31332e38372e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier:          +LeNCFM8LgU3rxKfmx125gP0QVMnDhYAWiKCRSeNZIM=
Subject key identifier:   DC:F3:19:5C:B6:EA:4F:ED:A1:EB:4E:5C:04:66:44:52:98:11:2F:76
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       62E25F4959242E40195A35E8F78EB9CD2B09CD7D
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:29:34 +0000
ROA not before:           Tue 23 Apr 2024 13:24:34 +0000
ROA not after:            Tue 22 Apr 2025 13:29:34 +0000
asID:                     270440
IP address blocks:        200.13.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e2:5f:49:59:24:2e:40:19:5a:35:e8:f7:8e:b9:cd:2b:09:cd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:24:34 2024 GMT
            Not After : Apr 22 13:29:34 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:fa:bc:04:0c:24:1d:ab:48:e2:11:74:34:
                    13:43:81:59:80:d6:b4:f2:70:50:f8:4a:92:30:4b:
                    61:fb:0a:56:18:3d:35:a3:87:1e:a2:3b:ed:f4:0d:
                    06:24:3e:5d:25:3d:58:9a:df:81:37:0e:bb:de:e9:
                    99:a0:36:3c:df:b8:5e:09:82:71:14:24:32:d6:09:
                    06:cc:c4:bb:f2:40:1a:d2:a9:1c:74:d8:62:30:2e:
                    82:4a:e6:9f:9d:c7:9e:ca:a1:93:f7:1b:61:45:5d:
                    20:33:7c:20:0b:58:18:1d:72:7d:f3:96:37:d2:52:
                    1c:13:49:3c:c5:c1:8f:47:38:e5:82:02:48:1a:ad:
                    15:71:2c:cd:b6:c2:5e:29:22:fe:03:ac:9f:39:1b:
                    9c:44:db:42:40:53:fc:bb:54:75:b6:8e:2a:37:72:
                    41:64:76:52:f9:34:01:20:46:37:52:67:23:2f:63:
                    fb:ca:25:8e:54:6f:4e:dc:1f:ce:b2:1f:d4:dd:f9:
                    3f:0b:57:b5:25:14:d4:f8:1e:9e:dd:2b:e7:c4:89:
                    8c:39:90:cf:bd:22:7a:45:41:63:e2:db:08:e5:7e:
                    5e:c6:02:64:cc:57:25:36:de:57:5c:01:14:68:66:
                    ec:aa:08:e9:f2:6d:aa:03:ae:ec:2c:28:7f:28:e8:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:19:5C:B6:EA:4F:ED:A1:EB:4E:5C:04:66:44:52:98:11:2F:76
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:72:d5:7b:aa:03:39:9f:fe:4b:d5:bc:ad:70:cc:f7:82:4f:
         31:97:50:04:90:fc:ba:68:36:be:45:17:18:da:51:27:3d:4c:
         d9:0a:c4:d3:fc:ed:de:b5:ab:e6:b8:96:e5:e9:e6:87:52:9f:
         34:ab:69:f5:37:8a:59:0b:42:fa:ee:5b:66:aa:1a:61:e1:ff:
         c4:7b:17:81:ea:32:4f:23:d0:30:52:cb:b9:dd:ee:2d:25:13:
         17:e9:32:b4:a6:5d:13:15:cd:49:46:40:02:ce:3c:25:19:32:
         b5:0d:30:2c:da:84:db:d8:80:48:4f:89:02:29:f2:9a:33:96:
         04:58:70:ad:ff:22:e2:d7:7d:ee:f8:99:98:65:65:12:d7:5e:
         6d:ef:cd:7c:d6:d8:60:28:00:89:16:d2:28:16:97:bd:39:4d:
         2e:90:c4:9f:1a:17:4b:5f:70:8e:fa:30:79:61:6c:17:6e:f9:
         08:0f:ba:29:ec:5e:a9:a3:12:4f:1f:d7:89:df:10:4d:93:86:
         68:72:e4:06:67:72:d5:2d:3c:b9:b7:c1:e0:17:01:28:d7:fb:
         49:40:fe:60:15:c9:78:e6:6a:a1:52:d5:f5:74:75:8b:f6:66:
         bc:f6:9a:a2:ba:50:a1:26:ca:d1:bf:40:f1:47:f3:15:dc:eb:
         38:73:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org