Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          rhO98ZL52MmNjrxAq//qo0Mv8jHW0YBXVdHfL8jl+yw=
Subject key identifier:   50:CA:6F:C2:74:C6:06:A0:AE:23:D7:21:39:15:7B:4C:54:6D:06:95
Certificate issuer:       /CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
Certificate serial:       1869AF8D5255ADDB45828F9B46BE84D5FC302871
Authority key identifier: A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 10 Apr 2024 13:48:42 +0000
ROA not before:           Wed 10 Apr 2024 13:43:42 +0000
ROA not after:            Wed 09 Apr 2025 13:48:42 +0000
asID:                     270811
IP address blocks:        200.219.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:69:af:8d:52:55:ad:db:45:82:8f:9b:46:be:84:d5:fc:30:28:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
        Validity
            Not Before: Apr 10 13:43:42 2024 GMT
            Not After : Apr  9 13:48:42 2025 GMT
        Subject: CN=50CA6FC274C606A0AE23D72139157B4C546D0695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:f2:1c:d1:78:d1:82:95:f8:d1:e4:58:99:
                    0a:58:b8:03:74:26:5e:a1:94:76:34:b2:83:1e:2c:
                    1d:0c:da:24:f4:f3:0e:14:cf:aa:d2:1e:6c:da:c4:
                    8c:5d:0b:84:6f:8d:9f:21:3c:21:c4:0c:22:41:67:
                    af:1b:a9:f2:1a:67:54:1a:fe:f2:51:51:ae:b0:2f:
                    db:08:a8:ee:67:96:ad:a1:20:1e:54:ce:7e:6d:56:
                    a2:75:44:8e:41:63:7c:1b:df:79:20:4c:5c:81:62:
                    93:18:9d:82:88:1a:50:4c:df:5e:f1:ae:3d:80:0b:
                    79:d3:57:a2:bc:ed:6c:41:f7:36:c9:0b:7d:58:00:
                    4f:7b:1d:c2:7c:a5:22:db:c5:6c:2a:38:4e:ee:42:
                    b0:bc:de:65:39:ce:cd:db:2f:a4:49:00:cb:54:ff:
                    02:f6:06:75:b4:24:25:05:17:29:08:91:eb:00:a6:
                    3b:85:8d:20:6f:25:84:11:1d:7f:c3:02:8b:36:18:
                    72:0d:0f:ba:49:14:60:c7:b4:34:1d:ca:8b:ce:2e:
                    a9:32:18:61:6e:1a:e9:44:79:21:c5:2f:35:38:90:
                    96:0f:f5:a5:fa:f8:bd:d5:42:4b:2a:8c:bb:f7:01:
                    75:7d:d3:4e:7c:32:4b:6e:14:a6:e4:1a:bc:78:48:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CA:6F:C2:74:C6:06:A0:AE:23:D7:21:39:15:7B:4C:54:6D:06:95
            X509v3 Authority Key Identifier:
                keyid:A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:0a:69:96:b4:e5:cb:21:a4:09:52:44:64:e8:90:09:53:
         3e:65:51:94:7d:60:7c:e9:94:a6:77:7e:76:cb:30:e1:26:57:
         6c:e9:3a:b3:22:23:87:1f:dc:67:53:76:46:41:7f:d5:45:ff:
         2b:13:f7:99:31:36:8c:3e:b6:01:93:b5:9a:55:e5:e3:63:de:
         b1:24:79:20:55:27:44:b0:df:7a:96:6c:91:ab:6f:b9:b9:30:
         95:0b:47:f1:03:9f:63:d2:07:42:42:f3:72:d2:e8:89:a3:f1:
         a4:72:1e:71:a2:1e:72:2a:71:b0:1c:05:3f:cc:68:ba:ab:29:
         db:fe:4c:84:69:d7:e8:71:b7:dc:e7:26:e8:09:75:88:66:ec:
         10:33:87:6b:b9:1e:34:fa:53:a9:1a:37:dd:c3:2e:41:c5:d0:
         5b:96:c2:f3:d4:09:54:46:15:bd:87:f2:b7:b2:48:07:c6:b2:
         7f:83:82:fc:c5:d7:0b:cd:52:b9:19:a0:71:5f:87:33:1e:cf:
         ab:ff:ad:3d:47:3e:fb:8b:ed:c9:db:0b:0b:94:2d:da:da:0b:
         dd:7d:41:24:dc:7d:93:8f:df:02:2d:90:a7:01:5a:6f:27:2c:
         9f:51:36:2b:a1:62:7f:f7:19:47:7c:6f:02:49:b4:ce:0b:54:
         43:71:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org