Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          K6s7L8FKzoG6mpgudF0GOwJflX6zH1XOJaCzSckCU+g=
Subject key identifier:   6D:A0:22:77:47:1F:7F:7E:BE:9E:99:96:52:9E:18:6D:E1:B7:AC:A4
Certificate issuer:       /CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
Certificate serial:       7C9C854CDA8D62D503A4FB673CAE099C7324CED2
Authority key identifier: A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 10 Apr 2024 13:48:43 +0000
ROA not before:           Wed 10 Apr 2024 13:43:43 +0000
ROA not after:            Wed 09 Apr 2025 13:48:43 +0000
asID:                     270811
IP address blocks:        200.219.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9c:85:4c:da:8d:62:d5:03:a4:fb:67:3c:ae:09:9c:73:24:ce:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
        Validity
            Not Before: Apr 10 13:43:43 2024 GMT
            Not After : Apr  9 13:48:43 2025 GMT
        Subject: CN=6DA02277471F7F7EBE9E9996529E186DE1B7ACA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ad:ed:a2:db:1b:bc:8d:90:bc:ab:e9:25:f9:
                    76:17:06:2a:a3:8d:bf:44:78:05:76:b0:00:86:a2:
                    b3:9c:75:8d:25:0f:f3:05:5c:32:d9:f8:f0:ce:64:
                    f8:8e:79:48:13:65:15:31:bf:49:70:58:bf:55:21:
                    ae:fb:3b:70:3b:68:66:d5:06:2d:3a:72:38:8d:53:
                    37:8a:f7:c0:23:0d:b1:d0:3d:77:2d:88:02:1b:a3:
                    df:64:3b:84:0a:6e:7f:8e:07:dc:aa:53:e1:c0:e2:
                    3a:80:bf:79:67:44:da:fb:f9:d8:d4:b0:c5:c1:61:
                    d8:b7:fc:ab:a1:0c:d0:4e:a7:8c:e8:e4:3a:ff:11:
                    f1:b2:74:fc:ea:dc:e3:49:e4:91:92:f1:86:de:ad:
                    c7:5a:c4:a3:7f:9b:5f:30:d9:e7:62:8f:08:21:dc:
                    9f:9b:33:a4:7a:6b:5a:96:a7:7b:b5:0d:cd:0a:ea:
                    77:ae:33:f3:07:d2:00:40:da:6a:8d:64:ac:fa:cb:
                    cf:9a:0d:47:29:34:53:0f:d0:76:b1:12:12:33:57:
                    9d:40:e8:c6:7f:98:82:e3:37:37:3e:23:41:18:b6:
                    02:72:e3:93:9f:a4:54:83:26:7b:1d:5d:43:0b:ef:
                    cd:25:0c:92:bf:2f:3f:dd:e9:56:fd:d0:10:78:fa:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A0:22:77:47:1F:7F:7E:BE:9E:99:96:52:9E:18:6D:E1:B7:AC:A4
            X509v3 Authority Key Identifier:
                keyid:A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:da:01:e7:9f:39:45:3f:db:66:a3:df:3e:fb:49:78:a1:d8:
         9e:75:3f:29:14:ab:94:87:98:55:23:f8:40:e6:4b:86:31:2c:
         0d:19:b3:77:e0:69:50:17:cb:26:61:0c:ba:ae:a4:8a:d0:02:
         9d:bf:93:34:a4:fb:d8:dd:71:46:6d:42:1a:0a:4b:93:47:5c:
         6d:4d:6b:d6:0c:7a:13:05:29:84:62:ac:72:9b:9d:43:0c:49:
         6f:27:95:90:ed:9a:91:cb:e7:fd:22:46:e2:ee:5d:7c:bb:5d:
         2c:e1:17:b5:dd:d1:e6:9a:36:20:24:e7:8b:5c:09:0d:af:76:
         07:60:c5:14:83:c5:4b:71:a3:06:05:64:23:3b:ca:48:fe:46:
         63:bf:b4:86:e8:0e:9b:6e:51:16:79:06:3d:d0:78:1b:d6:71:
         c6:d2:fc:e5:6d:a3:cc:9a:ce:eb:84:6a:43:8c:25:66:3d:a7:
         d0:5b:a5:93:2d:cb:59:36:a7:85:53:d1:da:0f:25:f2:d7:99:
         9f:de:c4:01:77:8b:f0:04:24:a0:67:33:0b:7c:77:3e:85:e4:
         17:90:2c:c8:3a:76:07:a6:35:13:fb:0d:22:76:8a:48:3f:12:
         ff:bd:0f:9c:ce:dc:d2:2f:b4:d4:94:e0:27:19:da:41:96:41:
         32:f2:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org