Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa
File:                     3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa (raw, json)
Hash identifier:          Mod34u/f+I7dyjn7yUXR5FSMNRuUW/Vq5F/5SF8vFc4=
Subject key identifier:   7E:EC:15:67:C6:3C:2B:FC:1E:FC:0B:02:42:65:BD:4E:4B:97:31:99
Certificate issuer:       /CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
Certificate serial:       1D3AD1BE26042A219744D4DA4F680699FA550D59
Authority key identifier: 8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa
Signing time:             Fri 16 Feb 2024 18:38:42 +0000
ROA not before:           Fri 16 Feb 2024 18:33:42 +0000
ROA not after:            Fri 14 Feb 2025 18:38:42 +0000
asID:                     270615
IP address blocks:        200.215.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3a:d1:be:26:04:2a:21:97:44:d4:da:4f:68:06:99:fa:55:0d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
        Validity
            Not Before: Feb 16 18:33:42 2024 GMT
            Not After : Feb 14 18:38:42 2025 GMT
        Subject: CN=7EEC1567C63C2BFC1EFC0B024265BD4E4B973199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:c1:bb:db:5c:d4:9e:64:52:a0:9b:7e:84:
                    0f:97:ea:99:02:b6:bc:43:97:cd:9c:0b:f9:fd:6d:
                    93:32:04:68:43:cf:49:49:e7:fe:86:4a:d9:b8:06:
                    ab:6a:d1:08:00:e0:13:8b:af:6e:4c:b8:d0:92:e8:
                    3e:90:da:e5:ba:84:45:a2:0b:c6:86:db:a2:b7:5b:
                    f0:0d:46:bd:d4:9d:bc:2e:3c:86:a4:c8:cf:95:9c:
                    67:aa:e3:57:6a:5b:0f:22:81:65:ac:b0:c3:36:35:
                    8c:db:21:a6:db:11:ad:8e:f5:d6:97:dc:ea:36:00:
                    5b:d6:5f:de:9b:e9:ac:04:3a:8a:b3:8e:61:2f:cf:
                    ce:bf:06:28:0b:90:79:17:da:00:31:3d:cf:96:48:
                    20:3d:4a:3e:13:05:7b:af:98:88:c1:07:a6:13:38:
                    e3:83:5c:70:0e:65:69:07:7b:dd:55:59:61:e8:c7:
                    ad:85:3e:90:ce:30:b0:b7:31:ee:bd:77:78:b6:5b:
                    a8:8f:33:fd:b9:30:30:d9:3a:92:45:21:8a:02:63:
                    c3:12:c2:a1:e3:88:0e:86:80:40:57:1f:14:29:15:
                    10:0e:9e:81:76:ab:38:df:32:51:49:f8:c8:4a:c4:
                    13:70:cf:99:07:80:b5:ad:fa:d7:de:72:0a:85:e0:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:15:67:C6:3C:2B:FC:1E:FC:0B:02:42:65:BD:4E:4B:97:31:99
            X509v3 Authority Key Identifier:
                keyid:8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:1b:85:d1:a7:e9:42:9e:7e:10:58:25:62:fe:82:5f:4f:50:
         36:e2:9f:35:c7:e1:6c:d9:9c:d5:36:bc:41:60:3d:bf:fd:71:
         de:20:2a:f3:c0:fe:a6:e1:69:70:f6:a3:e9:db:b2:82:07:21:
         c8:b0:d1:4d:d4:d7:b5:91:ef:97:97:64:7a:1d:81:7c:d9:e4:
         78:88:0b:bc:22:be:b1:57:cd:fc:d1:35:f0:e0:6a:4d:c7:d7:
         3b:65:22:f2:89:15:27:fe:30:a8:52:20:66:1a:9b:73:ca:be:
         9a:d5:e5:80:3c:64:8b:0a:61:91:d9:f2:cc:10:f1:5c:c5:e4:
         db:ac:28:2d:d2:ef:a7:aa:9f:04:04:8d:9c:86:94:aa:f8:73:
         ff:9e:d9:e1:be:f8:bf:fb:22:cd:68:ca:94:b2:cb:fc:48:36:
         0b:1a:20:0b:50:94:54:72:12:61:31:64:f0:a8:64:d6:6e:2e:
         be:0c:96:e6:62:ba:0a:a0:4d:de:82:16:86:45:53:aa:7a:6c:
         9a:7e:f1:c1:ad:a1:13:d4:46:fe:af:b8:28:ea:7b:6d:0e:ce:
         4c:e7:7a:40:a7:38:66:13:e9:42:ce:be:51:f2:98:50:61:99:
         46:9e:50:bc:d8:08:91:2e:8e:f2:f9:e9:57:5f:8b:98:10:d8:
         7d:f6:df:5e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHTrRviYEKiGXRNTaT2gGmfpVDVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5NzA3NTZFRDVCNDVCQjMyNTlGQjQzMTFBQTg4RUU5
NzdFQUVFMDAeFw0yNDAyMTYxODMzNDJaFw0yNTAyMTQxODM4NDJaMDMxMTAvBgNV
BAMTKDdFRUMxNTY3QzYzQzJCRkMxRUZDMEIwMjQyNjVCRDRFNEI5NzMxOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4O8G721zUnmRSoJt+hA+X6pkC
trxDl82cC/n9bZMyBGhDz0lJ5/6GStm4Bqtq0QgA4BOLr25MuNCS6D6Q2uW6hEWi
C8aG26K3W/ANRr3UnbwuPIakyM+VnGeq41dqWw8igWWssMM2NYzbIabbEa2O9daX
3Oo2AFvWX96b6awEOoqzjmEvz86/BigLkHkX2gAxPc+WSCA9Sj4TBXuvmIjBB6YT
OOODXHAOZWkHe91VWWHox62FPpDOMLC3Me69d3i2W6iPM/25MDDZOpJFIYoCY8MS
wqHjiA6GgEBXHxQpFRAOnoF2qzjfMlFJ+MhKxBNwz5kHgLWt+tfecgqF4OJxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUfuwVZ8Y8K/we/AsCQmW9TkuXMZkwHwYDVR0j
BBgwFoAUjpcHVu1bRbsyWftDEaqI7pd+ruAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRQMjJ6QTlZMmdqcmg0WGJVVFJFenF1aEREY0dVY05iQnJIQ0M2amNy
cjYvMC84RTk3MDc1NkVENUI0NUJCMzI1OUZCNDMxMUFBODhFRTk3N0VBRUUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhFOTcwNzU2RUQ1QjQ1QkIz
MjU5RkI0MzExQUE4OEVFOTc3RUFFRTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkUDIyekE5WTJnanJoNFhiVVRSRXpxdWhERGNHVWNOYkJySENDNmpjcnI2LzAv
MzIzMDMwMmUzMjMxMzUyZTMyMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM2MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcjX/DANBgkqhkiG9w0BAQsFAAOCAQEALBuF
0afpQp5+EFglYv6CX09QNuKfNcfhbNmc1Ta8QWA9v/1x3iAq88D+puFpcPaj6duy
ggchyLDRTdTXtZHvl5dkeh2BfNnkeIgLvCK+sVfN/NE18OBqTcfXO2Ui8okVJ/4w
qFIgZhqbc8q+mtXlgDxkiwphkdnyzBDxXMXk26woLdLvp6qfBASNnIaUqvhz/57Z
4b74v/sizWjKlLLL/Eg2CxogC1CUVHISYTFk8Khk1m4uvgyW5mK6CqBN3oIWhkVT
qnpsmn7xwa2hE9RG/q+4KOp7bQ7OTOd6QKc4ZhPpQs6+UfKYUGGZRp5QvNgIkS6O
8vnpV1+LmBDYffbfXg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org