Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231352e302f32342d3234203d3e20323732313835.roa
File:                     3230302e3130362e3231352e302f32342d3234203d3e20323732313835.roa (raw, json)
Hash identifier:          bYgZkyJyQz7MJpRrObWNp6sI2bTxn6ZubqmQayTOCeI=
Subject key identifier:   6C:84:C4:8A:1A:1A:50:BF:A7:47:02:5A:36:83:DF:C0:2D:2F:C0:67
Certificate issuer:       /CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
Certificate serial:       456DDB574849FE9C8A2033050EBDA3B3DC69B128
Authority key identifier: 97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231352e302f32342d3234203d3e20323732313835.roa
Signing time:             Tue 07 Dec 2021 15:21:20 +0000
ROA not before:           Tue 07 Dec 2021 15:16:20 +0000
ROA not after:            Tue 06 Dec 2022 15:21:20 +0000
asID:                     272185
IP address blocks:        200.106.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6d:db:57:48:49:fe:9c:8a:20:33:05:0e:bd:a3:b3:dc:69:b1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E1948AB638C8EFF90F5297533F4B3540F047C3
        Validity
            Not Before: Dec  7 15:16:20 2021 GMT
            Not After : Dec  6 15:21:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:ab:a6:f4:55:fc:aa:14:d4:25:c4:d5:8a:
                    05:0c:54:1f:04:ef:ab:21:7d:a5:da:51:7c:7b:4e:
                    f4:b1:7d:cb:24:f6:31:83:17:49:42:cb:0a:e3:8c:
                    88:29:e2:1a:00:bb:5b:a8:84:8b:09:e9:63:7f:89:
                    f3:69:8b:d1:a5:2a:86:6c:17:c8:40:f1:6b:6d:61:
                    be:1e:4e:75:90:a7:ec:c2:62:cc:f3:aa:14:b4:5d:
                    b0:10:ce:76:e0:15:3f:22:f2:ee:30:e3:e8:01:06:
                    86:6c:1f:0f:11:5f:56:f5:81:8a:74:86:99:af:cc:
                    2b:ab:9d:b9:3e:20:54:44:73:41:ae:3d:71:c7:90:
                    3d:50:69:f2:5d:a1:3b:78:ae:d8:01:2c:a2:e1:47:
                    2b:6b:4d:75:8e:65:9f:63:35:85:03:97:86:0d:1f:
                    aa:d9:08:39:c3:34:5d:7d:99:a0:f5:e8:83:48:86:
                    8e:d9:a4:e0:2d:0f:ea:dc:ce:7e:27:5f:08:44:27:
                    9a:7e:7b:f5:86:5f:02:96:8b:e0:6e:eb:eb:0c:0e:
                    aa:50:24:f0:ee:cc:fe:bb:99:ff:c8:0b:6b:66:4a:
                    28:9b:2e:3c:69:79:28:23:a3:d8:d6:d1:89:4a:08:
                    4e:ac:4a:49:f1:ff:20:2d:3e:1a:9c:ae:80:b4:57:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:84:C4:8A:1A:1A:50:BF:A7:47:02:5A:36:83:DF:C0:2D:2F:C0:67
            X509v3 Authority Key Identifier:
                keyid:97:E1:94:8A:B6:38:C8:EF:F9:0F:52:97:53:3F:4B:35:40:F0:47:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E1948AB638C8EFF90F5297533F4B3540F047C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/0/3230302e3130362e3231352e302f32342d3234203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:2e:2c:af:33:7a:a2:7b:30:bb:aa:3e:5e:cc:e3:cc:92:11:
         6b:10:ea:59:5e:36:4c:57:f3:8d:67:a3:30:f9:ba:22:70:b5:
         9f:7b:d2:b1:9b:cc:cd:79:39:99:23:78:97:cb:22:44:c0:fc:
         3c:21:82:55:05:57:06:dd:0d:6e:7c:d0:21:91:6d:36:03:38:
         fc:c6:f4:ea:e5:67:58:8a:d3:41:eb:67:a0:32:b3:57:4d:ed:
         b0:89:4e:85:90:ae:b2:be:3a:db:45:e3:db:7d:0b:7d:d2:b9:
         bc:57:93:ca:39:c8:13:4c:1b:e2:c2:f9:82:33:fe:de:1f:9d:
         80:78:05:e2:d0:8a:dd:31:9a:57:d8:f8:c4:32:d4:20:a5:f7:
         3e:d7:f5:48:79:92:ac:3c:bc:3d:46:5e:87:49:c1:91:a4:da:
         5f:b2:0b:c2:83:33:87:35:e3:f2:22:a7:d4:cb:9d:27:55:10:
         8a:15:23:fc:2a:3f:29:53:c2:2e:09:f2:45:9f:6b:fb:fd:d7:
         19:d6:12:25:1d:17:9f:38:0f:0a:54:a5:5e:5c:3e:73:bf:b4:
         26:34:95:59:03:ef:c4:e2:73:f0:b6:a4:02:c9:26:39:3f:b6:
         1e:23:29:42:5a:ec:f3:ce:39:e3:ff:60:58:be:f7:93:0f:04:
         3b:f4:47:17
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIURW3bV0hJ/pyKIDMFDr2js9xpsSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdFMTk0OEFCNjM4QzhFRkY5MEY1Mjk3NTMzRjRCMzU0
MEYwNDdDMzAeFw0yMTEyMDcxNTE2MjBaFw0yMjEyMDYxNTIxMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjNERkFCQTZGNDU1RkNBQTE0
RDQyNUM0RDU4QTA1MEM1NDFGMDRFRkFCMjE3REE1REE1MTdDN0I0RUY0QjE3RENC
MjRGNjMxODMxNzQ5NDJDQjBBRTM4Qzg4MjlFMjFBMDBCQjVCQTg4NDhCMDlFOTYz
N0Y4OUYzNjk4QkQxQTUyQTg2NkMxN0M4NDBGMTZCNkQ2MUJFMUU0RTc1OTBBN0VD
QzI2MkNDRjNBQTE0QjQ1REIwMTBDRTc2RTAxNTNGMjJGMkVFMzBFM0U4MDEwNjg2
NkMxRjBGMTE1RjU2RjU4MThBNzQ4Njk5QUZDQzJCQUI5REI5M0UyMDU0NDQ3MzQx
QUUzRDcxQzc5MDNENTA2OUYyNURBMTNCNzhBRUQ4MDEyQ0EyRTE0NzJCNkI0RDc1
OEU2NTlGNjMzNTg1MDM5Nzg2MEQxRkFBRDkwODM5QzMzNDVEN0Q5OUEwRjVFODgz
NDg4NjhFRDlBNEUwMkQwRkVBRENDRTdFMjc1RjA4NDQyNzlBN0U3QkY1ODY1RjAy
OTY4QkUwNkVFQkVCMEMwRUFBNTAyNEYwRUVDQ0ZFQkI5OUZGQzgwQjZCNjY0QTI4
OUIyRTNDNjk3OTI4MjNBM0Q4RDZEMTg5NEEwODRFQUM0QTQ5RjFGRjIwMkQzRTFB
OUNBRTgwQjQ1NzhCOUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs9+rpvRV/KoU1CXE1YoFDFQfBO+rIX2l2lF8e070sX3LJPYxgxdJ
QssK44yIKeIaALtbqISLCeljf4nzaYvRpSqGbBfIQPFrbWG+Hk51kKfswmLM86oU
tF2wEM524BU/IvLuMOPoAQaGbB8PEV9W9YGKdIaZr8wrq525PiBURHNBrj1xx5A9
UGnyXaE7eK7YASyi4Ucra011jmWfYzWFA5eGDR+q2Qg5wzRdfZmg9eiDSIaO2aTg
LQ/q3M5+J18IRCeafnv1hl8ClovgbuvrDA6qUCTw7sz+u5n/yAtrZkoomy48aXko
I6PY1tGJSghOrEpJ8f8gLT4anK6AtFeLnQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FGyExIoaGlC/p0cCWjaD38AtL8BnMB8GA1UdIwQYMBaAFJfhlIq2OMjv+Q9Sl1M/
SzVA8EfDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RGa2UyaEtDcFpTRUpV
cHN0VFhEODZNUFpMeUVwUDJmWGY4NVpkWWQyOVhLLzAvOTdFMTk0OEFCNjM4QzhF
RkY5MEY1Mjk3NTMzRjRCMzU0MEYwNDdDMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85N0UxOTQ4QUI2MzhDOEVGRjkwRjUyOTc1MzNGNEIzNTQwRjA0
N0MzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERmtlMmhLQ3BaU0VKVXBzdFRY
RDg2TVBaTHlFcFAyZlhmODVaZFlkMjlYSy8wLzMyMzAzMDJlMzEzMDM2MmUzMjMx
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzMTM4MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADIatcwDQYJKoZIhvcNAQELBQADggEBAAAuLK8zeqJ7MLuqPl7M48ySEWsQ6lle
NkxX841nozD5uiJwtZ970rGbzM15OZkjeJfLIkTA/DwhglUFVwbdDW580CGRbTYD
OPzG9OrlZ1iK00HrZ6Ays1dN7bCJToWQrrK+OttF49t9C33SubxXk8o5yBNMG+LC
+YIz/t4fnYB4BeLQit0xmlfY+MQy1CCl9z7X9Uh5kqw8vD1GXodJwZGk2l+yC8KD
M4c14/Iip9TLnSdVEIoVI/wqPylTwi4J8kWfa/v91xnWEiUdF584DwpUpV5cPnO/
tCY0lVkD78Tic/C2pALJJjk/th4jKUJa7PPOOeP/YFi+95MPBDv0Rxc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org