Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38362e302f32342d3234203d3e20323731303736.roa
File:                     3230302e37312e38362e302f32342d3234203d3e20323731303736.roa (raw, json)
Hash identifier:          sYbq/J80cn8pkq/xT8KnnCgQHE4whlqkDXN2Cv7xLxs=
Subject key identifier:   8C:59:ED:F3:1B:47:89:8F:56:E7:4B:B0:F4:DD:F0:E6:24:1D:B7:CF
Certificate issuer:       /CN=D52232967406E705729EA909CBA1A57972539515
Certificate serial:       530DB0B5CFFCC3568FB9FDE2CA2CE0DC92C88B0C
Authority key identifier: D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38362e302f32342d3234203d3e20323731303736.roa
Signing time:             Thu 21 Sep 2023 19:00:00 +0000
ROA not before:           Thu 21 Sep 2023 18:55:00 +0000
ROA not after:            Thu 19 Sep 2024 19:00:00 +0000
asID:                     271076
IP address blocks:        200.71.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0d:b0:b5:cf:fc:c3:56:8f:b9:fd:e2:ca:2c:e0:dc:92:c8:8b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52232967406E705729EA909CBA1A57972539515
        Validity
            Not Before: Sep 21 18:55:00 2023 GMT
            Not After : Sep 19 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:a1:d8:28:12:c6:92:d4:a2:e4:16:98:78:
                    01:20:03:89:4f:ad:27:39:88:8f:cd:74:1f:f2:bc:
                    16:48:50:09:1f:13:9e:b4:23:f0:07:bd:38:8d:55:
                    0f:7b:6e:aa:ae:2d:2c:0d:0f:40:f7:64:5b:e0:a7:
                    7d:bf:e9:46:06:2d:07:88:fa:e3:ba:81:92:b2:33:
                    b7:34:f8:dc:f0:24:de:36:0d:e9:77:3d:ac:83:3c:
                    b1:01:ed:ce:7b:97:cd:5d:ed:8d:40:70:30:41:c3:
                    d8:0f:8d:13:eb:1c:88:35:1d:d2:25:6c:3c:3e:f8:
                    67:3f:0b:a2:b6:a8:3e:42:9c:8e:42:9b:8a:81:3e:
                    d2:ef:c8:33:ba:0b:f8:ab:bd:e2:be:fb:c6:fa:e3:
                    a7:92:95:71:2d:29:bc:ae:da:ce:09:92:47:b7:b6:
                    e9:47:b6:6e:3c:bb:f0:40:93:a7:73:0a:19:10:14:
                    bb:f1:e8:a8:e0:54:6f:9e:e4:ad:b0:3c:22:26:b7:
                    ad:0e:2f:85:4d:21:60:e4:e1:09:0a:70:f9:ff:ed:
                    32:20:1c:19:a9:b9:7e:f4:b2:6a:99:cf:6f:00:a0:
                    3f:4c:24:b2:34:ee:a5:08:50:be:0a:a0:0b:8f:a9:
                    21:1c:f9:cf:ad:30:eb:5f:af:f8:f4:71:2c:43:45:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:59:ED:F3:1B:47:89:8F:56:E7:4B:B0:F4:DD:F0:E6:24:1D:B7:CF
            X509v3 Authority Key Identifier:
                keyid:D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/D52232967406E705729EA909CBA1A57972539515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38362e302f32342d3234203d3e20323731303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:84:d6:2c:58:fc:2b:f4:26:cb:cd:58:a2:6c:f0:d6:de:e2:
         cc:16:7c:9a:65:c8:59:ce:e8:61:b6:11:b9:84:b2:e3:96:06:
         cb:48:d2:77:87:ba:0e:73:ae:a8:bd:11:79:24:53:92:02:44:
         65:02:30:c5:5f:bc:16:32:9e:a5:0b:0d:d0:6d:df:e5:37:d8:
         18:18:b4:b3:41:89:60:85:fe:df:35:b8:f0:72:c8:49:fe:5c:
         ea:02:c7:39:40:34:1a:b8:d5:a4:bb:48:f9:74:a1:12:fd:1c:
         a1:78:c2:5e:e7:fb:f5:52:8e:3e:b1:ca:08:de:34:fa:90:99:
         88:c2:a7:6d:68:31:d8:00:82:1b:3e:a3:cc:b7:ed:b3:47:9d:
         11:f8:36:64:22:26:46:81:1b:91:95:0a:82:23:b5:31:e1:85:
         28:12:6c:df:c4:5d:f7:e9:1d:b1:2d:2c:46:37:b7:55:f1:fb:
         82:7d:54:e1:7e:19:f2:6c:21:bd:ae:9b:99:43:07:d7:f7:fa:
         7c:bd:02:eb:7a:56:49:a6:ea:c4:f8:0a:09:88:b8:bd:ef:92:
         69:b0:da:15:82:a5:d6:d1:7c:93:4c:8b:01:db:81:f6:cb:b1:
         16:2c:51:be:35:12:d2:2a:4b:cc:89:24:e6:3a:5b:ef:5a:f6:
         03:4b:7f:d9
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUUw2wtc/8w1aPuf3iyizg3JLIiwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUyMjMyOTY3NDA2RTcwNTcyOUVBOTA5Q0JBMUE1Nzk3
MjUzOTUxNTAeFw0yMzA5MjExODU1MDBaFw0yNDA5MTkxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDUxM0ExRDgyODEyQzY5MkQ0
QTJFNDE2OTg3ODAxMjAwMzg5NEZBRDI3Mzk4ODhGQ0Q3NDFGRjJCQzE2NDg1MDA5
MUYxMzlFQjQyM0YwMDdCRDM4OEQ1NTBGN0I2RUFBQUUyRDJDMEQwRjQwRjc2NDVC
RTBBNzdEQkZFOTQ2MDYyRDA3ODhGQUUzQkE4MTkyQjIzM0I3MzRGOERDRjAyNERF
MzYwREU5NzczREFDODMzQ0IxMDFFRENFN0I5N0NENURFRDhENDA3MDMwNDFDM0Q4
MEY4RDEzRUIxQzg4MzUxREQyMjU2QzNDM0VGODY3M0YwQkEyQjZBODNFNDI5QzhF
NDI5QjhBODEzRUQyRUZDODMzQkEwQkY4QUJCREUyQkVGQkM2RkFFM0E3OTI5NTcx
MkQyOUJDQUVEQUNFMDk5MjQ3QjdCNkU5NDdCNjZFM0NCQkYwNDA5M0E3NzMwQTE5
MTAxNEJCRjFFOEE4RTA1NDZGOUVFNEFEQjAzQzIyMjZCN0FEMEUyRjg1NEQyMTYw
RTRFMTA5MEE3MEY5RkZFRDMyMjAxQzE5QTlCOTdFRjRCMjZBOTlDRjZGMDBBMDNG
NEMyNEIyMzRFRUE1MDg1MEJFMEFBMDBCOEZBOTIxMUNGOUNGQUQzMEVCNUZBRkY4
RjQ3MTJDNDM0NTRCNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1ROh2CgSxpLUouQWmHgBIAOJT60nOYiPzXQf8rwWSFAJHxOetCPw
B704jVUPe26qri0sDQ9A92Rb4Kd9v+lGBi0HiPrjuoGSsjO3NPjc8CTeNg3pdz2s
gzyxAe3Oe5fNXe2NQHAwQcPYD40T6xyINR3SJWw8PvhnPwuitqg+QpyOQpuKgT7S
78gzugv4q73ivvvG+uOnkpVxLSm8rtrOCZJHt7bpR7ZuPLvwQJOncwoZEBS78eio
4FRvnuStsDwiJretDi+FTSFg5OEJCnD5/+0yIBwZqbl+9LJqmc9vAKA/TCSyNO6l
CFC+CqALj6khHPnPrTDrX6/49HEsQ0VLRQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FIxZ7fMbR4mPVudLsPTd8OYkHbfPMB8GA1UdIwQYMBaAFNUiMpZ0BucFcp6pCcuh
pXlyU5UVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FoMlp5em9xaFp0MlZp
YVNzY2FBdnhSYUZZcXJrbXZDWUR6UUxWM2JucGJSLzAvRDUyMjMyOTY3NDA2RTcw
NTcyOUVBOTA5Q0JBMUE1Nzk3MjUzOTUxNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENTIyMzI5Njc0MDZFNzA1NzI5RUE5MDlDQkExQTU3OTcyNTM5
NTE1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BaDJaeXpvcWhadDJWaWFTc2Nh
QXZ4UmFGWXFya212Q1lEelFMVjNibnBiUi8wLzMyMzAzMDJlMzczMTJlMzgzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMwMzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhH
VjANBgkqhkiG9w0BAQsFAAOCAQEAGYTWLFj8K/Qmy81Yomzw1t7izBZ8mmXIWc7o
YbYRuYSy45YGy0jSd4e6DnOuqL0ReSRTkgJEZQIwxV+8FjKepQsN0G3f5TfYGBi0
s0GJYIX+3zW48HLISf5c6gLHOUA0GrjVpLtI+XShEv0coXjCXuf79VKOPrHKCN40
+pCZiMKnbWgx2ACCGz6jzLfts0edEfg2ZCImRoEbkZUKgiO1MeGFKBJs38Rd9+kd
sS0sRje3VfH7gn1U4X4Z8mwhva6bmUMH1/f6fL0C63pWSabqxPgKCYi4ve+SabDa
FYKl1tF8k0yLAduB9suxFixRvjUS0ipLzIkk5jpb71r2A0t/2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org