Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32322d3332203d3e20323730383334.roa
File:                     3230302e3232392e3234302e302f32322d3332203d3e20323730383334.roa (raw, json)
Hash identifier:          LAK2WFPwUGF90ZI/MxEmcjtBBryK3SP/DVJb1nX6eiU=
Subject key identifier:   E1:A5:1D:F0:2F:AA:5F:DF:D5:D7:25:B2:90:66:ED:F1:35:63:D0:35
Certificate issuer:       /CN=36D61D661FEA96A158F222B958FBA78F7B0DB49A
Certificate serial:       0D1BC33F95A38EBE5EF4507506C009554D36244C
Authority key identifier: 36:D6:1D:66:1F:EA:96:A1:58:F2:22:B9:58:FB:A7:8F:7B:0D:B4:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36D61D661FEA96A158F222B958FBA78F7B0DB49A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32322d3332203d3e20323730383334.roa
Signing time:             Tue 18 Jul 2023 18:17:43 +0000
ROA not before:           Tue 18 Jul 2023 18:12:43 +0000
ROA not after:            Tue 16 Jul 2024 18:17:43 +0000
asID:                     270834
IP address blocks:        200.229.240.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1b:c3:3f:95:a3:8e:be:5e:f4:50:75:06:c0:09:55:4d:36:24:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36D61D661FEA96A158F222B958FBA78F7B0DB49A
        Validity
            Not Before: Jul 18 18:12:43 2023 GMT
            Not After : Jul 16 18:17:43 2024 GMT
        Subject: CN=E1A51DF02FAA5FDFD5D725B29066EDF13563D035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:5e:87:c5:89:68:11:ae:5d:b4:9b:43:ce:
                    b0:0a:6d:95:2d:5b:49:d3:d4:80:69:4e:c4:aa:3c:
                    c7:2a:33:d6:29:2e:56:25:53:6e:8f:69:bb:d5:49:
                    bd:86:53:d0:be:eb:ce:b4:e0:87:ff:bf:e1:ac:5c:
                    6c:75:5a:13:9d:c9:23:82:38:5c:34:81:40:c0:b6:
                    86:68:0a:31:66:a1:59:fe:e8:1a:1f:10:63:4e:d1:
                    fc:7e:a2:e4:56:13:2e:7d:93:0d:3a:1d:26:a6:b5:
                    8a:3c:85:19:05:8d:35:c3:43:c8:25:fb:68:f0:1a:
                    24:9b:b9:a3:cc:36:b9:fc:c4:01:d7:01:ee:95:6a:
                    73:88:3c:dd:cd:07:97:b4:d8:00:24:d6:d2:47:98:
                    85:15:12:9a:45:0d:91:32:6a:07:75:fe:1a:ce:a3:
                    af:cd:e3:28:52:ea:7a:4c:68:b3:c8:8c:d6:a1:fb:
                    58:e1:7c:54:5a:1e:8d:8f:8c:5e:39:57:a0:5f:11:
                    34:db:b8:29:da:2c:87:c2:3e:2c:07:dc:76:bd:48:
                    07:70:35:a3:95:9f:69:70:2a:a4:52:77:93:99:23:
                    f3:c2:09:cd:d0:3e:6c:9b:5c:a5:c7:e4:32:87:8c:
                    72:80:74:13:fa:33:3a:11:d4:9d:14:5c:3a:37:a9:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A5:1D:F0:2F:AA:5F:DF:D5:D7:25:B2:90:66:ED:F1:35:63:D0:35
            X509v3 Authority Key Identifier:
                keyid:36:D6:1D:66:1F:EA:96:A1:58:F2:22:B9:58:FB:A7:8F:7B:0D:B4:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/36D61D661FEA96A158F222B958FBA78F7B0DB49A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36D61D661FEA96A158F222B958FBA78F7B0DB49A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32322d3332203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:5c:73:b6:d3:68:f9:a4:25:bd:1f:c1:b4:85:eb:4e:b3:
         97:05:14:32:ad:0c:d7:c4:fa:36:67:ab:25:3b:7c:69:70:2d:
         1d:62:2b:cc:8b:f5:fe:40:48:6d:4a:46:f5:03:f8:1e:43:3c:
         2a:4d:2c:89:a7:12:35:eb:a2:e9:e7:ec:89:1c:21:af:c4:ea:
         d8:f9:e4:59:74:ac:5b:72:12:83:da:f7:ea:c2:e7:13:9d:62:
         6d:0c:1e:c7:07:bc:05:b8:6d:67:d1:bf:90:60:2e:3a:36:5e:
         a9:9a:58:40:8f:f2:32:ee:2c:8f:26:22:f5:a3:16:04:e9:ba:
         dc:93:86:00:2e:fe:73:77:d7:01:8d:b3:62:c4:e3:4a:d5:4f:
         77:18:0a:43:c7:ab:a7:ef:d5:5f:d2:0c:07:55:a9:9c:35:8d:
         23:f3:1e:5b:e3:62:f2:e9:08:61:cb:68:15:8d:e5:cf:42:a6:
         46:15:85:ce:9b:f6:7c:fa:3e:ab:56:cf:96:da:be:c8:57:ba:
         a8:c1:3c:88:68:c2:f1:2e:ce:99:dd:71:aa:2d:7b:a1:58:76:
         40:9c:46:ca:81:f3:3d:47:39:a8:1c:41:1d:e4:bf:14:13:82:
         4a:9e:f2:02:cf:a7:2c:78:0b:2a:d1:45:aa:80:aa:6e:e5:f8:
         a5:87:4f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org