Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32322e302f32332d3233203d3e20323730383131.roa
File:                     3230302e3231392e32322e302f32332d3233203d3e20323730383131.roa (raw, json)
Hash identifier:          9UMPtwJ7UyfFC5tZPME1rbQCPwol2vwVyVmN3wNkKuY=
Subject key identifier:   EB:12:4A:39:79:C7:5E:00:39:CF:AC:F1:69:B5:FB:CF:13:88:E6:E0
Certificate issuer:       /CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
Certificate serial:       4C7DE2348C184D2F5E57AE1359AC82BFD4937832
Authority key identifier: A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32322e302f32332d3233203d3e20323730383131.roa
Signing time:             Wed 10 Apr 2024 13:48:43 +0000
ROA not before:           Wed 10 Apr 2024 13:43:43 +0000
ROA not after:            Wed 09 Apr 2025 13:48:43 +0000
asID:                     270811
IP address blocks:        200.219.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7d:e2:34:8c:18:4d:2f:5e:57:ae:13:59:ac:82:bf:d4:93:78:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
        Validity
            Not Before: Apr 10 13:43:43 2024 GMT
            Not After : Apr  9 13:48:43 2025 GMT
        Subject: CN=EB124A3979C75E0039CFACF169B5FBCF1388E6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:b7:05:59:9a:b8:be:14:8a:cd:37:fe:b2:
                    29:22:59:1a:db:3c:11:81:08:be:47:6c:91:3a:b7:
                    b8:1a:a7:d2:cd:dc:6d:11:39:03:3b:32:e7:d4:37:
                    06:00:fa:e9:77:a3:02:a4:63:8e:72:35:0d:d6:ae:
                    83:45:b4:16:47:14:ad:0c:7f:e0:ad:96:e9:10:bf:
                    e5:5f:67:75:31:86:0a:58:68:5f:cf:76:83:cb:c1:
                    82:6f:c6:dd:d3:8a:f1:a2:85:d9:57:66:1c:61:e3:
                    90:e5:25:cf:13:ea:1b:35:89:16:ed:79:11:6e:14:
                    83:d0:38:95:a3:9d:d2:a4:2d:49:bb:7c:7e:26:cb:
                    ee:3b:52:06:3e:e9:6c:ba:cb:03:e0:46:67:36:ec:
                    57:62:2d:07:1c:4d:30:4e:f5:e5:61:d7:25:cf:ba:
                    ec:09:8a:5b:2a:1e:22:a7:6c:c8:16:cb:01:48:3e:
                    2a:3b:d7:8d:c1:6a:50:7f:c9:7c:04:e2:00:22:65:
                    d6:c1:bc:4b:39:81:ec:7f:79:e1:88:f7:bd:53:2e:
                    1b:3b:15:63:0c:76:73:1b:23:83:84:c8:36:fd:b9:
                    93:66:4d:a9:0e:2d:cf:70:39:61:aa:b0:1b:19:e2:
                    cd:06:88:08:d6:83:4e:8a:23:a7:d1:ea:85:9b:89:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:12:4A:39:79:C7:5E:00:39:CF:AC:F1:69:B5:FB:CF:13:88:E6:E0
            X509v3 Authority Key Identifier:
                keyid:A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32322e302f32332d3233203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:78:46:44:96:5f:20:96:95:9b:70:73:cc:0a:f4:ef:e9:de:
         70:28:a4:5c:07:5f:c3:37:97:17:a9:f4:c0:5e:58:24:4a:41:
         89:3b:1b:0d:e0:d2:a3:b5:72:39:24:59:c7:3d:b7:c4:d8:5b:
         31:57:02:f1:31:a9:51:df:fd:9b:ce:ee:fa:cc:9e:62:0d:59:
         e6:89:db:76:91:09:12:74:25:9a:01:cb:4e:f5:2f:14:69:18:
         b0:cf:ca:4a:07:70:57:63:f5:5c:0b:f0:61:9a:0d:97:19:f8:
         a3:a4:f0:bb:38:3c:c6:5e:61:23:cd:7a:34:43:14:db:b6:e1:
         3d:03:02:69:cb:70:61:69:c1:fd:40:74:df:63:cf:e8:b9:f2:
         2b:d9:48:1f:f7:4e:d7:48:c7:bc:6d:32:46:18:42:f3:f7:05:
         b2:6c:49:54:5d:d9:b9:80:43:6a:05:c6:7e:8c:db:ec:cb:61:
         71:96:e6:fb:da:35:64:92:df:04:09:b3:f1:21:38:40:7b:80:
         32:7c:75:65:3f:a0:6d:15:72:6e:ce:37:93:36:4c:b7:d0:77:
         46:e6:04:f0:39:95:da:89:30:16:97:0b:02:ca:eb:1b:c7:fd:
         90:69:80:33:b6:22:bc:de:2d:45:6d:f4:f9:93:d2:e2:f9:8e:
         ab:39:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org