Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
File:                     3230312e37312e372e302f32342d3234203d3e20323730323832.roa (raw, json)
Hash identifier:          L/l3OtSjfFmcNXdZTx5VvgEkGU22AAKcqTmguyjHAYM=
Subject key identifier:   B7:DC:D9:E1:BA:3D:E2:D1:94:39:F6:BC:CC:C4:AF:C8:C8:4C:68:06
Certificate issuer:       /CN=9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987
Certificate serial:       3BD6F0C47E11F51E27B1CBAFCAC33845EA744068
Authority key identifier: 9C:E8:CE:BD:C4:E0:3A:AB:44:40:17:4F:1E:B0:D0:64:41:ED:A9:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/3230312e37312e372e302f32342d3234203d3e20323730323832.roa
Signing time:             Fri 16 Feb 2024 14:57:17 +0000
ROA not before:           Fri 16 Feb 2024 14:52:17 +0000
ROA not after:            Fri 14 Feb 2025 14:57:17 +0000
asID:                     270282
IP address blocks:        201.71.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d6:f0:c4:7e:11:f5:1e:27:b1:cb:af:ca:c3:38:45:ea:74:40:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987
        Validity
            Not Before: Feb 16 14:52:17 2024 GMT
            Not After : Feb 14 14:57:17 2025 GMT
        Subject: CN=B7DCD9E1BA3DE2D19439F6BCCCC4AFC8C84C6806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:59:39:db:98:d1:2c:7f:84:ff:ac:04:8b:
                    c3:a5:53:61:49:e5:b2:46:62:38:f5:e7:6b:08:a9:
                    a0:8a:ce:78:fe:4a:83:90:62:2d:67:28:80:1b:28:
                    f4:41:fa:1b:89:fb:4e:2f:c6:9f:c2:32:df:25:01:
                    c1:20:8f:a9:2e:23:4f:7b:0d:85:83:a5:b7:e3:ba:
                    a7:1e:ed:53:88:32:ae:f2:b6:cc:dc:18:cf:83:f7:
                    db:4f:cf:95:0b:19:48:6f:6a:42:b8:95:3a:b2:49:
                    88:a6:cd:82:40:00:b8:e1:9e:3e:a6:de:98:1b:fd:
                    8c:db:c9:dc:ed:61:e3:af:7d:5c:3f:d1:93:aa:29:
                    34:b1:03:d6:d8:23:43:8f:98:6b:5b:dd:7e:a7:bb:
                    56:d5:a8:25:e2:cb:bb:48:9e:01:d1:25:cf:2a:a6:
                    93:6a:d7:58:65:48:35:00:cd:27:a0:a9:5a:67:df:
                    5e:9e:63:25:bb:89:00:20:95:a1:a4:75:b5:b0:02:
                    85:d4:04:58:9c:f4:90:dc:83:8d:9d:d4:bb:e9:e9:
                    ec:78:72:56:74:2f:38:44:1d:ab:e6:d5:7d:df:8d:
                    71:b3:8f:3e:11:39:3c:92:d0:68:d9:43:50:65:6c:
                    95:09:b9:5b:6e:6b:a3:21:a8:ae:2b:0a:6d:4b:21:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DC:D9:E1:BA:3D:E2:D1:94:39:F6:BC:CC:C4:AF:C8:C8:4C:68:06
            X509v3 Authority Key Identifier:
                keyid:9C:E8:CE:BD:C4:E0:3A:AB:44:40:17:4F:1E:B0:D0:64:41:ED:A9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/3230312e37312e372e302f32342d3234203d3e20323730323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:08:04:c5:2b:28:71:8b:8c:17:b0:45:0e:b7:bd:2f:6e:
         0d:5f:1e:d3:c4:4a:02:7f:68:99:b8:e4:49:03:e1:32:dd:0e:
         5c:34:fe:c9:0b:4a:a8:83:53:6a:73:eb:33:54:e3:0a:80:37:
         63:4d:e8:46:f8:cf:26:3c:d2:b0:98:d8:ad:91:f7:93:99:7d:
         e2:c2:6c:1c:5a:a2:ed:e7:2d:61:f3:70:96:45:92:b5:6f:eb:
         eb:fd:e4:59:c6:96:3d:6f:ec:12:87:9c:ac:c6:6c:d0:ac:20:
         b4:3f:54:9b:d7:04:28:6a:e6:b3:a9:ac:14:1c:c7:5f:28:c0:
         e0:31:c7:c9:79:43:ab:87:f9:66:3c:2d:d7:56:88:09:7f:f0:
         04:18:d0:e8:56:03:df:dc:50:1e:92:2b:27:4f:b7:b3:e0:7b:
         9e:34:b2:13:92:3f:2a:8d:4c:c9:38:a6:54:4f:dd:e5:1c:d9:
         f1:d6:3b:13:04:c6:a6:e0:0d:43:4e:5e:9b:93:9e:c2:6a:95:
         38:53:f7:11:c6:ac:da:48:34:d3:a6:1f:cf:72:95:36:46:5d:
         61:0f:aa:6d:46:c6:5e:f2:56:80:7b:9a:07:40:12:91:76:e5:
         de:1c:ec:26:04:c4:72:29:a0:47:70:71:c0:9d:6c:45:32:cc:
         ac:1b:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org