Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232322e302f32332d3233203d3e203532383733.roa
File:                     3230302e3232392e3232322e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier:          ZF+SF/MZX8eRyWWPkH0ioRuuPYibQ0vabDeFNPz8ifM=
Subject key identifier:   39:A8:C4:63:95:20:09:73:A6:29:91:C3:CA:B5:9E:55:7E:B8:B4:72
Certificate issuer:       /CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Certificate serial:       2A4C0CEA173A5D0286F1E5AE50C4F13BB8BAE2E8
Authority key identifier: BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232322e302f32332d3233203d3e203532383733.roa
Signing time:             Mon 04 Sep 2023 19:55:35 +0000
ROA not before:           Mon 04 Sep 2023 19:50:35 +0000
ROA not after:            Mon 02 Sep 2024 19:55:35 +0000
asID:                     52873
IP address blocks:        200.229.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4c:0c:ea:17:3a:5d:02:86:f1:e5:ae:50:c4:f1:3b:b8:ba:e2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
        Validity
            Not Before: Sep  4 19:50:35 2023 GMT
            Not After : Sep  2 19:55:35 2024 GMT
        Subject: CN=39A8C46395200973A62991C3CAB59E557EB8B472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4d:4f:85:5e:99:cc:e2:8a:13:dd:ad:80:84:
                    51:94:eb:34:c3:27:2d:23:bb:0d:2f:de:fe:a2:ed:
                    44:7e:1d:21:87:22:f6:ac:97:e5:38:63:74:60:33:
                    dc:41:60:88:1e:73:8c:80:77:dd:76:bf:30:ea:3e:
                    d1:b3:91:c4:f3:17:58:2d:31:42:ab:10:22:8e:b9:
                    5d:37:d2:11:fc:f8:a2:0a:90:9e:44:c1:56:db:93:
                    0c:32:23:57:2c:96:fe:13:61:0f:4d:b8:c0:30:4b:
                    57:bc:70:c6:3c:65:45:cd:ee:ec:51:49:f6:6a:3e:
                    77:a6:3f:be:61:a7:f4:0d:af:f5:62:07:1e:75:91:
                    65:97:79:fa:31:12:b2:2a:af:26:c4:3b:6f:41:99:
                    e5:7b:c8:b4:c8:7c:b6:86:c1:1d:82:7c:0f:25:05:
                    eb:02:05:ba:63:4c:91:84:55:c0:e2:3d:1f:70:26:
                    ac:9d:1f:1d:b0:7c:a5:a8:2a:44:ee:cc:6f:80:7b:
                    d8:b6:72:fb:e0:40:90:11:92:05:48:6e:58:ef:ac:
                    16:cb:66:44:fa:d4:9f:d9:0b:de:15:87:f2:f3:69:
                    ce:56:74:d1:f2:5e:a9:9e:09:b8:71:6c:13:0e:c7:
                    a4:bb:54:13:f6:f8:1b:88:ce:ce:04:0d:67:f0:5f:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A8:C4:63:95:20:09:73:A6:29:91:C3:CA:B5:9E:55:7E:B8:B4:72
            X509v3 Authority Key Identifier:
                keyid:BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232322e302f32332d3233203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:7c:d3:ca:85:ab:00:13:6c:3e:7f:96:73:f6:0e:ad:0a:04:
         83:dc:4a:97:f2:2a:ab:cb:fd:3c:f9:4f:55:8d:04:1a:d1:eb:
         3b:62:ea:6b:cf:93:d8:45:9b:3e:e9:95:f4:ad:9f:f2:67:c2:
         51:2f:60:e8:00:b0:4b:42:0b:06:30:63:f3:ed:bb:22:04:b6:
         0e:4f:5d:ae:fa:75:26:3c:01:e9:8e:98:67:13:4d:cc:1c:00:
         0d:50:a4:64:64:9e:70:09:51:0f:3e:d1:82:32:2c:43:9d:df:
         98:3c:28:e5:53:94:ed:2e:63:a6:b0:69:86:72:61:7f:9f:2f:
         48:b1:87:85:32:a3:89:1b:a3:54:26:bf:d9:aa:61:5e:5e:c2:
         83:a2:5c:2d:18:b5:b7:08:67:22:dc:3f:26:07:44:7c:30:ad:
         f6:92:5d:0c:ba:f5:58:47:09:ba:23:41:fe:e1:76:16:44:9c:
         35:6b:04:89:7a:28:90:75:7d:cd:b8:3b:5e:e1:ea:a4:b7:bb:
         99:11:d6:31:86:27:94:d8:06:50:c9:6c:22:d5:35:5e:eb:66:
         28:79:8d:40:db:8b:72:b7:e3:4e:f6:f5:34:f9:35:37:63:ad:
         cf:36:ba:9c:c0:8a:22:04:98:c7:45:4f:58:ce:95:60:c0:5c:
         f4:13:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net