Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/0/3230302e31302e34382e302f32312d3332203d3e20323633323539.roa
File:                     3230302e31302e34382e302f32312d3332203d3e20323633323539.roa (raw, json)
Hash identifier:          6rvh6X7Aoqy1p4NUY2bzoQNyu+yS1RKzIESfZSmvIKs=
Subject key identifier:   CA:4F:7B:D2:DE:EF:CC:85:D7:68:DC:88:14:66:79:3A:45:F8:CC:A3
Certificate issuer:       /CN=A945D5AB25F78CFF19741052CC069918EB02252B
Certificate serial:       33E556F5D203ADC8819A1F0B4AF72D25AB72E1A8
Authority key identifier: A9:45:D5:AB:25:F7:8C:FF:19:74:10:52:CC:06:99:18:EB:02:25:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A945D5AB25F78CFF19741052CC069918EB02252B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/0/3230302e31302e34382e302f32312d3332203d3e20323633323539.roa
Signing time:             Fri 26 Jan 2024 11:54:49 +0000
ROA not before:           Fri 26 Jan 2024 11:49:49 +0000
ROA not after:            Fri 24 Jan 2025 11:54:49 +0000
asID:                     263259
IP address blocks:        200.10.48.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e5:56:f5:d2:03:ad:c8:81:9a:1f:0b:4a:f7:2d:25:ab:72:e1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A945D5AB25F78CFF19741052CC069918EB02252B
        Validity
            Not Before: Jan 26 11:49:49 2024 GMT
            Not After : Jan 24 11:54:49 2025 GMT
        Subject: CN=CA4F7BD2DEEFCC85D768DC881466793A45F8CCA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:40:25:b2:fe:0e:e2:62:00:a8:c9:15:9d:
                    81:41:96:39:82:56:ff:31:f1:98:4e:8c:9b:92:8e:
                    30:2a:5c:81:f3:f1:e6:0d:f5:b0:31:f0:80:b5:18:
                    46:3b:e3:7e:4d:f8:39:f6:1a:ed:9b:fc:e9:f8:f7:
                    f4:cd:b6:04:4b:67:cd:79:f5:40:27:9b:f3:50:57:
                    0b:01:0b:e4:94:ac:66:f7:57:57:ed:fb:e6:c6:c8:
                    04:77:c7:9c:57:7a:97:a7:e5:b7:9b:2a:dd:fc:a9:
                    5d:af:9f:0c:d6:57:26:d7:b4:34:f7:85:ce:c6:ac:
                    36:7c:1d:30:d0:5b:87:bf:f5:cf:7b:01:c5:6c:9a:
                    50:82:b9:94:a2:fc:d6:34:31:9f:1a:74:cb:cd:a7:
                    db:66:dd:26:d5:7c:8a:f7:82:4d:5f:9a:cc:59:87:
                    c3:72:f4:71:4b:15:5f:35:47:16:22:b6:a2:97:81:
                    86:74:89:13:a0:be:11:ae:80:12:c1:f0:4d:a7:f8:
                    8c:e1:80:2c:6a:97:34:18:b9:44:b6:f9:8a:0a:5c:
                    bf:02:51:25:73:c4:11:60:f8:a7:3b:4e:c0:66:52:
                    28:0a:d8:3c:c0:ae:6d:7c:cd:e5:9d:ca:5d:85:68:
                    a9:48:78:be:e1:ed:b2:22:ae:8b:13:d6:e0:f9:99:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4F:7B:D2:DE:EF:CC:85:D7:68:DC:88:14:66:79:3A:45:F8:CC:A3
            X509v3 Authority Key Identifier:
                keyid:A9:45:D5:AB:25:F7:8C:FF:19:74:10:52:CC:06:99:18:EB:02:25:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/0/A945D5AB25F78CFF19741052CC069918EB02252B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A945D5AB25F78CFF19741052CC069918EB02252B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/0/3230302e31302e34382e302f32312d3332203d3e20323633323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:39:a5:a8:dd:e5:b3:c5:46:56:e8:92:9f:41:43:17:ed:
         34:6e:01:26:c0:3c:35:32:6c:da:23:37:ae:b9:1c:a3:47:42:
         32:2a:14:32:27:33:c8:89:89:6b:5a:8c:ea:36:8d:40:52:4d:
         f0:ae:ea:c0:51:6b:b0:a7:29:60:b0:c6:e5:88:5e:3b:34:87:
         e1:17:db:b1:5b:91:65:52:ef:15:12:42:00:5d:de:9b:13:a4:
         1a:a9:a2:1d:68:43:39:91:b4:95:b1:e6:92:3a:50:32:b8:c7:
         66:90:8f:a1:69:de:e6:b9:51:80:66:eb:f2:69:4e:ea:53:f9:
         72:54:7f:03:34:d8:7e:1a:27:cb:9c:78:c2:f4:9e:27:24:a0:
         90:23:b8:0c:b7:a7:6e:f9:da:db:61:8b:82:69:b2:af:d9:37:
         ed:7c:36:1f:93:69:8e:ba:25:a7:c0:ad:28:4e:46:f7:db:12:
         45:57:4b:ac:ae:72:2c:f4:00:8d:de:0a:d3:a8:09:3f:a9:97:
         6f:3c:ef:7d:3f:6b:55:14:d5:6f:66:fd:28:05:f2:90:fd:df:
         be:c8:aa:1e:22:28:c4:77:7e:57:96:fb:14:e9:2c:b4:fa:80:
         e7:63:d8:c1:7a:1f:5c:03:52:2d:28:a4:da:2e:d8:34:28:81:
         4d:66:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org