Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32322d3234203d3e20323730383334.roa
File:                     3230302e3232392e3234302e302f32322d3234203d3e20323730383334.roa (raw, json)
Hash identifier:          3lbMhC2AXal6A39WpNYwO5v0ZyXm1s398Pwhd15ZPsI=
Subject key identifier:   E2:BA:97:33:BF:98:C1:15:1A:E3:AD:24:A6:C5:0C:90:CA:1A:71:FB
Certificate issuer:       /CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
Certificate serial:       2D2003EDDD04EF9BB78279FF23E3AB18D19D50E8
Authority key identifier: F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32322d3234203d3e20323730383334.roa
Signing time:             Thu 07 Dec 2023 18:06:26 +0000
ROA not before:           Thu 07 Dec 2023 18:01:26 +0000
ROA not after:            Thu 05 Dec 2024 18:06:26 +0000
asID:                     270834
IP address blocks:        200.229.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:20:03:ed:dd:04:ef:9b:b7:82:79:ff:23:e3:ab:18:d1:9d:50:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
        Validity
            Not Before: Dec  7 18:01:26 2023 GMT
            Not After : Dec  5 18:06:26 2024 GMT
        Subject: CN=E2BA9733BF98C1151AE3AD24A6C50C90CA1A71FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:35:39:94:92:ac:2e:23:2d:84:47:48:2a:
                    3f:ca:8f:38:35:58:8d:2e:38:46:f8:c2:5f:46:1a:
                    8d:2b:dc:90:19:34:a2:c6:0a:b6:01:9f:56:c3:74:
                    b6:ba:e2:b2:4a:23:a3:cc:0b:64:f2:0d:de:54:50:
                    fc:fa:9d:15:5b:5d:79:80:38:f5:77:a4:6e:14:8e:
                    bf:99:25:b2:97:73:63:8c:76:07:54:55:c3:a1:2f:
                    a4:22:1e:66:b5:b4:fd:ac:96:55:80:0e:0b:2a:ed:
                    04:a1:4c:5a:d6:c4:62:30:b5:59:59:dc:46:2f:8b:
                    d5:7d:38:54:cc:e2:af:ff:3e:0a:3f:bc:d9:72:dc:
                    f1:da:13:24:87:e0:cb:49:f1:5c:9d:2d:47:81:f1:
                    fd:65:42:d9:0a:b2:74:06:02:c4:48:b1:53:42:a4:
                    fe:45:af:a2:60:b4:74:e2:ef:f1:a1:8f:d9:3b:02:
                    33:20:04:94:85:b8:a3:3a:15:28:9e:51:d5:cb:78:
                    f6:ba:37:a5:1a:b5:c7:c9:b0:ae:cb:78:95:8b:b2:
                    f2:e7:97:fc:7f:e3:6f:c6:30:ef:20:72:7b:b1:56:
                    f1:d4:4a:5a:86:f0:f7:eb:41:dd:8e:98:ff:f1:a5:
                    f3:29:4b:00:51:9b:70:a8:41:51:c8:3a:2a:96:c4:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:97:33:BF:98:C1:15:1A:E3:AD:24:A6:C5:0C:90:CA:1A:71:FB
            X509v3 Authority Key Identifier:
                keyid:F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32322d3234203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:34:68:a6:21:fc:93:ba:ed:06:a2:d2:fa:50:8a:ef:e9:99:
         41:33:4f:f1:59:a2:3b:d3:2f:43:be:f0:62:e7:a4:d1:03:2b:
         5e:49:ab:47:56:bf:dd:60:7f:ab:f8:c8:67:63:aa:2c:ae:83:
         91:45:9c:b8:d5:7d:0e:57:7a:4a:0a:2e:df:b0:a2:47:a2:1b:
         20:2b:26:1a:13:8f:69:de:e3:13:ee:f8:9a:2a:74:89:b0:f7:
         10:f4:0b:48:ac:1a:04:e7:56:47:de:21:87:81:57:d8:4f:51:
         d1:04:e9:62:42:b1:37:3f:8d:cd:d7:10:50:e0:6e:67:4a:eb:
         76:ad:6e:46:ce:36:d5:24:e9:f2:e3:3d:13:6d:b2:ce:80:5c:
         9b:f8:a2:72:bf:b8:37:6b:69:79:70:f0:54:29:2a:56:66:76:
         23:47:17:c3:16:70:94:00:c0:aa:71:ba:6f:de:c2:d1:44:fd:
         1f:e2:e9:ed:83:da:9b:a6:d0:f3:5d:7a:15:d2:44:4f:4e:de:
         76:36:65:d9:6e:2d:fe:40:25:14:fe:76:5f:dd:8f:45:a0:f5:
         66:ad:8a:8b:8a:94:c6:2a:fd:69:77:45:9d:cb:3f:3f:1f:69:
         23:ef:f2:38:f4:47:6d:4a:31:27:91:19:fc:66:e3:3c:6d:ff:
         4b:20:61:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org