Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa
File:                     3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa (raw, json)
Hash identifier:          8VD4JRxYFcbOzm0N0QIJ4RA+oXqHXKRXd8mdhDjel04=
Subject key identifier:   EE:67:60:B2:71:A6:BF:1F:D6:71:CA:80:28:6B:2C:47:24:21:A8:92
Certificate issuer:       /CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
Certificate serial:       01E7C90E1CC43E2AD8C65367FD6BE58671531230
Authority key identifier: F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa
Signing time:             Mon 26 Feb 2024 16:48:06 +0000
ROA not before:           Mon 26 Feb 2024 16:43:06 +0000
ROA not after:            Mon 24 Feb 2025 16:48:06 +0000
asID:                     270834
IP address blocks:        200.229.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e7:c9:0e:1c:c4:3e:2a:d8:c6:53:67:fd:6b:e5:86:71:53:12:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
        Validity
            Not Before: Feb 26 16:43:06 2024 GMT
            Not After : Feb 24 16:48:06 2025 GMT
        Subject: CN=EE6760B271A6BF1FD671CA80286B2C472421A892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:53:25:20:81:82:a1:aa:e1:a3:97:86:d1:
                    ee:aa:95:09:4a:0e:0d:c5:85:e1:20:78:da:35:d3:
                    ca:44:7c:d9:d8:84:ba:b3:a3:12:79:a0:2e:e6:74:
                    5c:51:98:e4:09:a8:75:20:b7:05:90:df:65:ad:17:
                    53:e5:a4:bb:e5:ec:7c:7b:84:b9:f5:0a:63:8e:75:
                    89:98:5b:e8:a5:d7:2a:d8:45:6e:5c:59:78:37:2b:
                    3c:cb:ec:c2:c4:84:70:01:aa:3a:8f:0a:7d:71:a6:
                    d5:14:d3:8f:62:0c:14:34:42:df:76:cf:54:16:5a:
                    41:fc:61:81:30:33:80:88:b4:be:ee:ec:b5:9c:0a:
                    1a:67:e4:ee:73:5b:df:6c:c2:07:f4:2a:21:bb:65:
                    d1:51:4e:bf:d1:ac:65:9b:49:33:05:31:10:00:f7:
                    8d:f5:4e:cd:d9:1b:9d:e0:11:49:22:14:5a:07:e3:
                    6e:29:9d:84:19:3f:31:c1:07:1c:82:ab:db:4f:6f:
                    e3:fc:b6:79:2e:7c:2b:11:57:6b:e9:cd:6f:8e:9c:
                    ee:63:d7:db:6d:38:97:5f:9b:34:3d:a4:be:82:f2:
                    29:be:08:a8:07:3a:ae:9b:4b:92:b3:dc:c2:84:17:
                    53:89:71:48:c9:4c:73:8c:3c:e2:79:fe:1c:83:43:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:67:60:B2:71:A6:BF:1F:D6:71:CA:80:28:6B:2C:47:24:21:A8:92
            X509v3 Authority Key Identifier:
                keyid:F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:0e:7f:34:32:31:3d:51:78:74:7c:70:08:5d:62:48:de:8e:
         6c:46:eb:1d:81:34:f1:42:ab:7d:b0:54:f7:44:e9:08:16:23:
         f4:f1:51:97:1a:36:5f:23:a5:19:73:53:4c:9e:0a:a1:8e:99:
         6e:db:fd:d4:d9:c8:d4:6c:1b:81:15:cc:56:bb:38:c9:a2:8f:
         16:c6:73:8c:42:e8:62:8a:f4:cb:e0:8a:03:10:89:26:13:8f:
         58:a9:7b:92:1e:11:ab:60:63:c9:a3:24:91:e0:1e:7e:e1:b6:
         ae:e1:3a:7c:6f:5d:aa:9f:a3:86:af:c3:a2:17:c0:9d:aa:e0:
         59:e9:08:7e:3a:68:cf:7a:69:22:35:8c:cd:fe:ce:e9:d6:1d:
         77:07:94:ac:1a:09:16:c7:e6:f5:b7:a4:40:aa:12:ec:69:0a:
         46:aa:d3:db:83:d2:cb:60:d0:36:c1:9d:4e:17:63:26:0d:76:
         d6:ea:f9:d2:21:8d:b4:b9:ef:da:a4:85:ee:ce:c4:97:cc:92:
         09:4a:ba:e1:8d:7a:3b:a1:94:6f:d7:d5:f5:f3:ce:c4:20:b5:
         5d:08:09:a4:b1:8f:b1:91:77:6b:33:dc:60:9e:82:67:20:6a:
         72:a5:e3:ff:b2:8a:b7:c0:17:81:be:5d:74:f4:e2:06:cd:5a:
         55:a6:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org