Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/3230302e392e32382e302f32322d3234203d3e20323636323035.roa
File:                     3230302e392e32382e302f32322d3234203d3e20323636323035.roa (raw, json)
Hash identifier:          Z7D1Ahn6YI1zlJWFItomLZYfRUCs7Br+pxQtrO+AL/4=
Subject key identifier:   8D:A7:53:06:3C:E2:F4:22:26:C8:27:6F:08:B0:84:E3:36:7B:EB:A7
Certificate issuer:       /CN=4460B4AA93E985A9AA92DBCFD1A0643DE7669047
Certificate serial:       150FD4C2600DAFDC34F5D3CC15F29E4726CE7EFD
Authority key identifier: 44:60:B4:AA:93:E9:85:A9:AA:92:DB:CF:D1:A0:64:3D:E7:66:90:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4460B4AA93E985A9AA92DBCFD1A0643DE7669047.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/3230302e392e32382e302f32322d3234203d3e20323636323035.roa
Signing time:             Thu 31 Aug 2023 14:02:00 +0000
ROA not before:           Thu 31 Aug 2023 13:57:00 +0000
ROA not after:            Thu 29 Aug 2024 14:02:00 +0000
asID:                     266205
IP address blocks:        200.9.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0f:d4:c2:60:0d:af:dc:34:f5:d3:cc:15:f2:9e:47:26:ce:7e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4460B4AA93E985A9AA92DBCFD1A0643DE7669047
        Validity
            Not Before: Aug 31 13:57:00 2023 GMT
            Not After : Aug 29 14:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:92:d7:eb:89:86:06:01:ee:2a:e4:50:32:
                    11:ab:5b:95:bc:80:f1:5c:16:f2:42:2a:69:40:bb:
                    1e:04:26:30:1d:41:01:2c:37:5e:fa:43:1e:33:53:
                    1b:71:a9:2b:87:da:50:66:83:3d:2e:d1:86:5f:04:
                    c1:f0:cf:46:53:7b:25:0f:17:e1:8b:df:00:cf:df:
                    ea:c1:f0:d7:a5:0e:21:07:96:f6:92:36:c2:db:d3:
                    ad:68:ac:fd:f4:cf:12:ea:ab:af:70:a1:c0:ca:de:
                    28:c9:1b:a9:10:20:0a:68:bd:56:96:7b:48:93:60:
                    72:63:02:0c:61:f5:22:e7:b5:ea:94:57:07:fc:aa:
                    c9:66:f3:db:b9:0a:b3:5e:8a:aa:37:bd:c8:8d:69:
                    06:32:c0:10:16:e3:fe:da:b2:de:c5:fc:8c:c6:fd:
                    a3:7b:82:67:53:ce:48:83:1e:ea:2b:e1:33:14:4e:
                    07:b9:58:3c:52:a7:f1:c1:c1:a9:6c:0d:14:bf:b7:
                    43:2f:da:24:95:c7:f2:d5:9a:47:a2:a9:18:f0:dd:
                    15:09:ce:ff:e9:12:6b:22:98:0a:1f:73:82:55:e3:
                    10:06:1b:76:b2:c3:c0:b0:b9:32:1d:80:7e:d4:6c:
                    3f:1b:20:15:52:57:b5:75:bb:74:5f:85:11:74:3e:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A7:53:06:3C:E2:F4:22:26:C8:27:6F:08:B0:84:E3:36:7B:EB:A7
            X509v3 Authority Key Identifier:
                keyid:44:60:B4:AA:93:E9:85:A9:AA:92:DB:CF:D1:A0:64:3D:E7:66:90:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/4460B4AA93E985A9AA92DBCFD1A0643DE7669047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4460B4AA93E985A9AA92DBCFD1A0643DE7669047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/3230302e392e32382e302f32322d3234203d3e20323636323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:98:07:c7:3e:15:d1:06:b7:b5:cf:c2:3c:83:c7:29:00:20:
         db:ec:cc:52:f3:93:40:54:b3:45:9a:7a:5e:57:85:d8:65:8e:
         4b:70:d9:1a:40:1a:3c:0d:8a:a6:e7:57:b1:9e:75:af:51:6e:
         4c:57:57:2c:ea:ce:d6:f8:f3:84:f8:58:66:1f:dd:5a:1b:55:
         53:8e:92:00:92:13:8d:54:ff:6e:98:ea:39:6e:8c:e0:4f:05:
         1f:d1:9e:12:c7:30:2a:5e:b5:cb:39:b9:7a:d9:12:47:98:83:
         a2:be:11:24:31:86:58:2f:7c:fb:9f:d7:ed:8d:d9:a4:ac:cd:
         70:8e:4d:67:e4:42:5e:fb:53:4b:4d:44:f9:c8:cd:aa:24:74:
         7a:85:ac:c2:0b:88:5f:74:b8:b8:db:9b:b3:da:eb:be:fc:56:
         f6:8e:d3:1a:a9:29:19:76:94:09:be:4e:27:e6:09:00:60:d7:
         79:3e:e4:52:71:30:b8:b8:73:0b:f2:79:c1:39:87:c7:59:42:
         e8:10:13:6f:af:46:b5:c1:70:cc:67:e2:d2:67:78:2c:68:ed:
         e1:45:b4:38:7f:21:4f:c1:01:5e:69:fb:8b:70:39:43:8f:44:
         9c:fc:1f:26:63:ce:08:53:30:81:cd:26:14:b4:56:12:6d:0c:
         49:bf:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org