Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/3230302e302e33322e302f32302d3234203d3e203631383839.roa
File:                     3230302e302e33322e302f32302d3234203d3e203631383839.roa (raw, json)
Hash identifier:          W1o4qlnrvVvApiMY5eoQ0Gs0oHBymJMAkRPerPFNnYY=
Subject key identifier:   CC:2E:A9:28:83:4E:1E:09:98:F2:F0:CF:15:65:E1:1F:E0:05:30:0E
Certificate issuer:       /CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
Certificate serial:       0385130FEEC003982BEBDB0FF0B07E422ACE54A7
Authority key identifier: E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/3230302e302e33322e302f32302d3234203d3e203631383839.roa
Signing time:             Thu 03 Nov 2022 21:48:30 +0000
ROA not before:           Thu 03 Nov 2022 21:43:30 +0000
ROA not after:            Thu 02 Nov 2023 21:48:30 +0000
asID:                     61889
IP address blocks:        200.0.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:85:13:0f:ee:c0:03:98:2b:eb:db:0f:f0:b0:7e:42:2a:ce:54:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
        Validity
            Not Before: Nov  3 21:43:30 2022 GMT
            Not After : Nov  2 21:48:30 2023 GMT
        Subject: CN=CC2EA928834E1E0998F2F0CF1565E11FE005300E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:40:a3:05:cc:b6:27:9f:dc:a8:6c:5f:5a:b8:
                    b8:a6:8d:91:c3:61:51:3e:c3:c9:bc:24:fc:13:75:
                    8b:e6:cc:b7:9c:8e:ec:77:06:9b:5f:cf:f4:ca:82:
                    1d:98:13:8b:22:ec:d0:bb:2c:62:c8:a1:e6:2d:2a:
                    34:ee:f8:88:8e:dd:f6:76:82:43:d3:44:d5:9e:8c:
                    f3:af:d7:ee:dd:9c:9c:2c:b2:ed:25:9b:16:ee:e5:
                    34:fb:11:cb:b1:a8:02:c5:92:cf:7e:2c:14:f8:a3:
                    b8:d9:26:39:16:f8:b4:56:30:e6:67:c6:e2:49:9b:
                    1c:ca:3f:56:14:12:f4:66:a5:99:6b:77:5c:c4:f0:
                    69:e5:ac:c4:17:3b:f9:82:78:65:02:1d:4c:a5:55:
                    66:26:64:92:2c:bf:2e:2e:5c:95:94:55:7c:42:58:
                    94:ed:56:58:dc:b2:2d:68:dd:94:c3:2e:c7:3e:ca:
                    55:67:35:1c:61:11:d7:b1:1e:c4:2c:4c:8c:55:92:
                    d5:7c:f6:05:52:96:ca:2d:f9:1f:ea:49:3f:63:26:
                    9a:04:bb:e5:ba:e1:8e:2c:1b:4d:1a:58:84:6e:09:
                    ba:3d:99:97:1c:cf:d9:f4:8f:e5:0e:f1:53:37:7a:
                    8a:4b:59:d0:fb:c4:1a:81:ba:63:b0:2a:4d:bb:fa:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2E:A9:28:83:4E:1E:09:98:F2:F0:CF:15:65:E1:1F:E0:05:30:0E
            X509v3 Authority Key Identifier:
                keyid:E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/3230302e302e33322e302f32302d3234203d3e203631383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:1e:59:57:11:58:3c:f7:4a:20:c7:9a:2e:cf:f6:9f:b7:30:
         75:05:2d:e9:10:29:0a:09:8d:f1:b3:ac:aa:78:c9:66:ba:0c:
         c7:72:d7:dc:5b:cf:b0:bd:08:59:71:29:b5:67:7f:b5:76:96:
         ad:ca:38:08:6f:2e:69:32:c4:41:ff:b7:69:9e:8a:ab:da:35:
         f4:25:e1:a4:4a:03:11:5e:4d:f4:e3:93:f2:c1:5e:c7:f9:b5:
         3a:eb:d4:9f:61:41:d4:06:ee:33:da:0c:5b:e0:01:d2:e7:d0:
         ee:91:98:9e:86:59:f0:7b:98:d2:6c:c0:14:c0:4c:50:19:db:
         ea:b4:0e:71:4c:44:bd:4e:d3:f9:3a:1c:71:d0:cb:78:82:3d:
         6e:d0:b2:8c:64:3c:95:61:c1:50:29:8e:4a:f4:7a:4e:bf:8c:
         5d:33:bf:ae:94:8c:0d:31:d9:cc:39:b7:49:ee:b7:79:1e:94:
         18:7a:bd:4c:e7:eb:35:50:75:ea:64:c6:5f:0c:c0:98:76:e8:
         33:25:45:64:f3:b5:22:40:ff:db:25:4a:35:8b:27:d5:af:c0:
         d8:f3:a1:cc:e2:c4:28:24:5e:2f:eb:dc:c8:ac:11:94:79:0f:
         0a:7e:2a:d0:9d:1b:ce:58:55:56:dc:1e:e1:c2:ec:38:07:bc:
         6f:04:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org