Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/3230312e3138322e3230382e302f32322d3234203d3e20323637353333.roa
File:                     3230312e3138322e3230382e302f32322d3234203d3e20323637353333.roa (raw, json)
Hash identifier:          WhjOaSHKZYT9gZLvYgZX6ShiEPxM1u2gRs9azylFAzk=
Subject key identifier:   CE:A4:C5:F6:E2:B8:44:30:38:60:7D:F0:0A:75:8A:7A:81:20:B8:68
Certificate issuer:       /CN=CAA23EEA631A3796DD41858E8C6EBAD578F1D06A
Certificate serial:       5473AC332F0E5DE000CE2F684BA9BB08D0369B16
Authority key identifier: CA:A2:3E:EA:63:1A:37:96:DD:41:85:8E:8C:6E:BA:D5:78:F1:D0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/3230312e3138322e3230382e302f32322d3234203d3e20323637353333.roa
Signing time:             Wed 22 Nov 2023 23:00:00 +0000
ROA not before:           Wed 22 Nov 2023 22:55:00 +0000
ROA not after:            Wed 20 Nov 2024 23:00:00 +0000
asID:                     267533
IP address blocks:        201.182.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:73:ac:33:2f:0e:5d:e0:00:ce:2f:68:4b:a9:bb:08:d0:36:9b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA23EEA631A3796DD41858E8C6EBAD578F1D06A
        Validity
            Not Before: Nov 22 22:55:00 2023 GMT
            Not After : Nov 20 23:00:00 2024 GMT
        Subject: CN=CEA4C5F6E2B8443038607DF00A758A7A8120B868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:a2:47:8a:c7:e4:4d:18:97:ca:da:b4:ab:
                    4b:0a:82:bb:29:09:28:53:d0:d0:ce:a1:7d:d8:ba:
                    93:80:b0:98:16:9a:44:cb:36:0b:2b:09:86:3e:9e:
                    2f:fd:7b:b2:4b:a4:1c:64:d1:bf:f8:7e:9b:b9:eb:
                    9f:d9:9b:f1:40:37:d0:5b:fb:10:79:9f:8a:93:74:
                    2d:f8:aa:80:e1:e2:72:11:4a:31:13:80:e4:95:a2:
                    cb:a5:5d:02:bd:b6:d1:35:b5:a0:d4:9e:f5:b5:98:
                    65:fa:18:ad:ae:d1:f1:69:33:94:8b:7f:02:f2:cf:
                    0f:6a:cb:24:e9:7a:f6:72:3d:44:13:c8:b9:0b:4b:
                    9c:1d:ed:9f:19:ac:2b:de:6b:5d:1f:46:8d:da:6b:
                    2b:68:d5:f1:c6:b1:84:ad:53:54:9c:75:41:d5:67:
                    a5:68:cc:16:44:1f:8a:18:66:cd:42:e8:b7:69:3c:
                    ff:db:a3:f3:4c:07:11:7e:51:28:a3:22:e9:27:6e:
                    e3:6c:1c:a5:56:ef:ba:eb:b4:8d:d9:0a:dc:ea:40:
                    19:56:e9:17:10:83:72:2b:16:40:85:2e:78:1f:01:
                    b0:44:a5:b8:e4:0d:2e:9c:ba:a7:97:c5:e5:fc:99:
                    1b:3d:f4:af:11:d3:4d:1c:6c:75:aa:67:aa:d4:d5:
                    48:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A4:C5:F6:E2:B8:44:30:38:60:7D:F0:0A:75:8A:7A:81:20:B8:68
            X509v3 Authority Key Identifier:
                keyid:CA:A2:3E:EA:63:1A:37:96:DD:41:85:8E:8C:6E:BA:D5:78:F1:D0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/3230312e3138322e3230382e302f32322d3234203d3e20323637353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:10:c9:0f:0a:8a:13:6d:72:2a:1e:f7:e6:16:a2:35:86:e2:
         03:99:f9:68:92:1b:58:a9:c4:8f:9a:ee:d2:d3:fa:41:a0:46:
         96:82:04:f5:43:a8:90:3d:a6:e9:73:25:b5:c3:14:ef:ab:80:
         db:a2:26:88:e4:45:39:cc:2a:3b:bc:c8:b5:ab:09:e1:d3:97:
         2d:5a:20:2a:cb:9d:64:d3:09:83:ac:44:91:04:be:c8:d5:64:
         6c:d7:1f:65:ee:37:24:4d:55:2f:46:51:3b:1e:51:ce:c2:cc:
         04:e4:e4:4d:9b:b1:8e:c4:9d:fa:0e:56:60:19:ac:c7:5c:d8:
         f7:f7:ba:75:88:4b:dc:c1:11:9a:83:27:15:bf:3e:ce:17:9d:
         72:3c:28:7d:b5:d1:74:a3:b3:b5:13:8f:d2:28:e2:b8:10:e0:
         81:09:0f:1f:32:f3:ac:b3:85:12:22:6c:5c:7c:cc:6f:4a:74:
         dc:12:71:f5:eb:80:6f:98:c1:8f:ad:fc:de:23:db:ca:ea:6e:
         54:05:42:cc:ca:22:d0:b5:a1:c1:2c:18:43:f4:1e:a4:c5:56:
         2a:1d:6e:5c:70:b1:d0:8f:d1:b4:a4:79:ad:fa:2e:d9:7b:10:
         d9:10:ef:36:21:d5:55:21:9c:da:32:ab:7a:07:67:d7:f2:76:
         13:64:e4:c5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVHOsMy8OXeAAzi9oS6m7CNA2mxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBMjNFRUE2MzFBMzc5NkRENDE4NThFOEM2RUJBRDU3
OEYxRDA2QTAeFw0yMzExMjIyMjU1MDBaFw0yNDExMjAyMzAwMDBaMDMxMTAvBgNV
BAMTKENFQTRDNUY2RTJCODQ0MzAzODYwN0RGMDBBNzU4QTdBODEyMEI4NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PKJHisfkTRiXytq0q0sKgrsp
CShT0NDOoX3YupOAsJgWmkTLNgsrCYY+ni/9e7JLpBxk0b/4fpu565/Zm/FAN9Bb
+xB5n4qTdC34qoDh4nIRSjETgOSVosulXQK9ttE1taDUnvW1mGX6GK2u0fFpM5SL
fwLyzw9qyyTpevZyPUQTyLkLS5wd7Z8ZrCvea10fRo3aayto1fHGsYStU1ScdUHV
Z6VozBZEH4oYZs1C6LdpPP/bo/NMBxF+USijIuknbuNsHKVW77rrtI3ZCtzqQBlW
6RcQg3IrFkCFLngfAbBEpbjkDS6cuqeXxeX8mRs99K8R000cbHWqZ6rU1UjjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzqTF9uK4RDA4YH3wCnWKeoEguGgwHwYDVR0j
BBgwFoAUyqI+6mMaN5bdQYWOjG661Xjx0GowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pE
cGQvMC9DQUEyM0VFQTYzMUEzNzk2REQ0MTg1OEU4QzZFQkFENTc4RjFEMDZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBQTIzRUVBNjMxQTM3OTZE
RDQxODU4RThDNkVCQUQ1NzhGMUQwNkEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUyZTJVanhTcDdLa29IVUZ4ZE5xcVExZFF6THdaS0VLMlJ2bnJkS0dKRHBkLzAv
MzIzMDMxMmUzMTM4MzIyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNzM1MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsm20DANBgkqhkiG9w0BAQsFAAOCAQEAdhDJ
DwqKE21yKh735haiNYbiA5n5aJIbWKnEj5ru0tP6QaBGloIE9UOokD2m6XMltcMU
76uA26ImiORFOcwqO7zItasJ4dOXLVogKsudZNMJg6xEkQS+yNVkbNcfZe43JE1V
L0ZROx5RzsLMBOTkTZuxjsSd+g5WYBmsx1zY9/e6dYhL3MERmoMnFb8+zhedcjwo
fbXRdKOztROP0ijiuBDggQkPHzLzrLOFEiJsXHzMb0p03BJx9euAb5jBj6383iPb
yupuVAVCzMoi0LWhwSwYQ/QepMVWKh1uXHCx0I/RtKR5rfou2XsQ2RDvNiHVVSGc
2jKregdn1/J2E2TkxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org