Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
File:                     3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (raw, json)
Hash identifier:          uCKOGjW+NJesvdGvJiIY6t4cFl83s4e/uSZZz+WxxHs=
Subject key identifier:   8B:A7:1F:CC:81:1B:3B:4C:27:3E:AE:73:8D:EE:F8:72:90:C9:27:D3
Certificate issuer:       /CN=99DE7BA6BC9BE54FCA330650814B8D01D9E16E82
Certificate serial:       41E127222942DE5D5654DC6D2DC51B7FAD9C0F93
Authority key identifier: 99:DE:7B:A6:BC:9B:E5:4F:CA:33:06:50:81:4B:8D:01:D9:E1:6E:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa
Signing time:             Fri 18 Aug 2023 02:18:44 +0000
ROA not before:           Fri 18 Aug 2023 02:13:44 +0000
ROA not after:            Fri 16 Aug 2024 02:18:44 +0000
asID:                     271343
IP address blocks:        200.39.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e1:27:22:29:42:de:5d:56:54:dc:6d:2d:c5:1b:7f:ad:9c:0f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99DE7BA6BC9BE54FCA330650814B8D01D9E16E82
        Validity
            Not Before: Aug 18 02:13:44 2023 GMT
            Not After : Aug 16 02:18:44 2024 GMT
        Subject: CN=8BA71FCC811B3B4C273EAE738DEEF87290C927D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:82:5a:56:7f:cf:67:76:1a:ea:93:96:1d:
                    15:89:34:3c:89:02:9a:87:90:e0:1d:0c:65:db:e8:
                    27:c4:0d:ec:9f:c3:15:d3:da:2f:2e:91:51:20:c7:
                    c3:45:9e:c7:b4:0f:d9:d1:81:bf:d0:21:76:a5:b0:
                    b0:d4:23:1f:cb:55:49:a8:10:6d:10:3e:12:ae:b0:
                    0b:a9:2d:67:fb:d6:da:ba:a9:d8:15:2d:d2:38:80:
                    a4:e9:e5:b7:60:c8:55:14:33:75:4c:4a:2d:76:8c:
                    69:07:20:8f:e2:db:08:80:86:c8:5d:ec:e1:16:a8:
                    a3:15:38:9e:8d:58:e8:72:46:c0:1f:9f:27:45:eb:
                    2e:63:d4:dd:f8:69:3e:d3:93:b2:40:4a:98:68:e4:
                    8a:f1:1e:cd:74:53:ba:6a:56:c7:57:ef:34:dc:7c:
                    df:aa:80:1b:4d:ab:e0:0d:db:49:d0:73:40:de:49:
                    a0:d4:d2:c9:c4:1d:81:39:01:ef:68:5a:be:02:9a:
                    af:17:38:56:02:a8:a4:e2:a4:e8:dd:9b:ae:0c:be:
                    8d:31:69:bb:ad:83:9a:a5:38:1d:f2:0a:66:b7:a4:
                    18:51:8f:96:51:fe:c4:23:7e:52:65:e8:d9:21:ad:
                    45:f3:ce:3a:85:eb:4f:23:75:e3:c7:4b:cb:e5:68:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A7:1F:CC:81:1B:3B:4C:27:3E:AE:73:8D:EE:F8:72:90:C9:27:D3
            X509v3 Authority Key Identifier:
                keyid:99:DE:7B:A6:BC:9B:E5:4F:CA:33:06:50:81:4B:8D:01:D9:E1:6E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/3230302e33392e33362e302f32322d3234203d3e20323731333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:87:ce:19:ef:fc:5d:76:37:f4:33:6a:39:92:9a:8f:52:1c:
         77:02:ef:14:cf:7d:a8:d4:6c:5f:0a:ff:86:b0:1e:ad:9d:ac:
         e6:40:17:f7:16:07:b2:0c:0d:60:7f:08:94:ea:7c:ee:df:23:
         9c:e5:a0:79:91:52:69:df:cb:67:95:46:31:42:96:d9:57:f7:
         42:35:8b:45:5c:6e:3e:35:15:b4:2f:4a:64:16:3f:40:a0:12:
         c9:02:11:06:70:ca:d7:c6:e7:9e:47:a8:a0:32:5e:7f:97:5a:
         7e:79:53:ba:8b:90:4c:68:63:78:05:3b:ba:33:fc:d4:48:c1:
         b9:92:f9:0c:2d:fe:fb:bc:bb:f3:b0:a8:ef:7c:eb:06:d7:27:
         1d:e9:47:b8:20:d7:7c:98:1b:e8:94:ac:fd:89:19:10:f7:ac:
         10:bd:90:68:66:6c:a1:f4:51:27:d8:17:a6:4f:64:ef:0b:fa:
         62:a5:e4:d7:9d:72:26:e2:d5:17:fe:24:06:0d:99:b5:e1:eb:
         3e:12:45:d9:2b:e7:82:76:24:18:56:65:51:5f:b7:92:80:8c:
         d5:38:8f:10:91:c4:9e:bd:75:43:1e:6e:4d:22:aa:dd:c5:a2:
         bb:d4:aa:09:d7:02:a6:d9:23:ef:eb:7d:f5:62:6f:59:0a:52:
         6f:c7:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org