Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/3230302e342e3131362e302f32322d3234203d3e20323633353639.roa
File:                     3230302e342e3131362e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          RnydNwPb9UJa/HGzVU9NftoEHE10DKYHyO0/uN48ci8=
Subject key identifier:   EA:D6:BA:4F:E3:D1:7D:51:9D:25:2D:D2:B5:BE:15:97:F0:E7:9F:76
Certificate issuer:       /CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
Certificate serial:       084A85E778CFB15C8D7542D569B9390FC7BD5108
Authority key identifier: 47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/3230302e342e3131362e302f32322d3234203d3e20323633353639.roa
Signing time:             Tue 16 May 2023 15:00:08 +0000
ROA not before:           Tue 16 May 2023 14:55:08 +0000
ROA not after:            Tue 14 May 2024 15:00:08 +0000
asID:                     263569
IP address blocks:        200.4.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4a:85:e7:78:cf:b1:5c:8d:75:42:d5:69:b9:39:0f:c7:bd:51:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
        Validity
            Not Before: May 16 14:55:08 2023 GMT
            Not After : May 14 15:00:08 2024 GMT
        Subject: CN=EAD6BA4FE3D17D519D252DD2B5BE1597F0E79F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:8c:66:f3:46:99:36:b3:7f:6f:f7:82:29:
                    8f:c1:ae:5c:27:56:43:d4:c1:4a:71:ce:30:14:9c:
                    62:09:4b:db:41:8b:6d:7c:3e:d3:c6:af:a5:52:37:
                    96:2c:2d:7e:f4:09:55:ed:c4:97:e3:cd:96:68:91:
                    88:36:70:66:83:d8:39:8a:b5:2f:65:4c:41:02:c3:
                    12:89:39:71:13:cb:1d:7b:ba:d0:88:0c:19:0b:25:
                    be:ee:36:ca:b1:28:73:ff:4d:08:7d:5e:e6:7b:f5:
                    be:59:df:df:03:b3:f0:3f:40:f6:8b:f0:a4:96:23:
                    cd:f6:3c:93:12:aa:e0:96:c4:56:26:7b:f9:58:1f:
                    c7:f7:08:89:17:59:e3:3d:46:50:b6:86:f4:5e:5f:
                    ff:8d:3f:b5:c2:36:18:a3:45:04:45:2a:e8:8d:d7:
                    40:6c:91:d6:52:7b:73:a4:1a:3e:f4:b3:08:06:5c:
                    70:b7:09:55:74:14:75:d0:ef:a0:00:9e:2d:ec:c8:
                    6f:cc:d0:79:ae:b2:b8:93:f6:a5:9c:f6:e5:13:1d:
                    c4:db:0e:8a:fa:cb:c2:4f:e2:e7:b2:cf:64:15:56:
                    94:43:59:4d:82:ff:6d:57:a0:18:90:f2:58:69:af:
                    da:4c:29:07:d7:9b:a5:33:8b:f3:5f:08:c7:05:9b:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D6:BA:4F:E3:D1:7D:51:9D:25:2D:D2:B5:BE:15:97:F0:E7:9F:76
            X509v3 Authority Key Identifier:
                keyid:47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/47598FC43095FBBAC65DD11244210ED67DD9A40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/3230302e342e3131362e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:f1:fb:59:b1:6b:2c:58:83:9a:35:79:d0:eb:cb:01:bb:55:
         6e:62:5c:c2:67:a8:d0:40:b4:a5:7c:2e:ed:36:4a:24:51:0b:
         74:f5:34:91:5e:23:d2:e8:0a:b6:14:9e:7a:2e:a1:79:c9:04:
         f1:d2:94:c1:a5:5f:7c:ea:0a:65:c9:40:2e:05:d0:bd:ae:24:
         77:f6:cd:cc:c8:fb:50:89:e4:a6:fd:20:a8:22:ad:50:cc:fe:
         e3:2d:6f:7c:62:5d:25:3c:1f:c9:68:5a:08:c9:55:9a:49:b6:
         ce:e7:fe:b5:d5:44:4e:a6:8b:95:a6:1d:16:b6:b7:29:87:7e:
         11:fe:15:6d:b5:07:9f:5a:72:3f:0f:1e:63:ec:ec:6a:1d:d1:
         07:c3:b3:6d:8c:98:67:da:17:7c:fe:fa:ee:4f:67:aa:e5:e2:
         99:95:bf:b9:a7:a0:60:2a:d3:c8:48:34:65:11:dd:b8:57:91:
         93:d6:b3:1a:e2:69:26:75:c5:02:db:ae:29:19:f8:30:e9:0f:
         a4:58:18:c5:81:f6:d9:33:ed:ac:54:bd:1b:74:86:ab:e3:b2:
         bc:11:56:b2:b9:0d:ae:72:a9:cb:ea:48:10:13:e9:4d:6f:71:
         09:4c:58:38:00:86:fa:11:47:50:f7:d6:8f:37:a4:e9:b6:06:
         0d:6d:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org