Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32332d3233203d3e20323730373137.roa
File:                     3230302e362e38342e302f32332d3233203d3e20323730373137.roa (raw, json)
Hash identifier:          H4c6zeTfteQ1ZHp/DDupmHIJVQnKfDA0KusGM9ofyxY=
Subject key identifier:   73:28:EF:BB:4B:01:25:10:0A:1F:D4:74:1B:90:C0:97:AF:D6:B6:32
Certificate issuer:       /CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
Certificate serial:       3EA5505252018711E26217FFB10FCC13584B31C1
Authority key identifier: CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32332d3233203d3e20323730373137.roa
Signing time:             Mon 04 Sep 2023 14:26:30 +0000
ROA not before:           Mon 04 Sep 2023 14:21:30 +0000
ROA not after:            Mon 02 Sep 2024 14:26:30 +0000
asID:                     270717
IP address blocks:        200.6.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:50:52:52:01:87:11:e2:62:17:ff:b1:0f:cc:13:58:4b:31:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
        Validity
            Not Before: Sep  4 14:21:30 2023 GMT
            Not After : Sep  2 14:26:30 2024 GMT
        Subject: CN=7328EFBB4B0125100A1FD4741B90C097AFD6B632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:b7:b2:1a:a8:74:89:aa:65:87:33:e7:15:
                    ac:ac:e7:14:fd:73:d5:ff:69:26:c5:da:ef:5d:35:
                    4b:73:62:ef:16:3d:9b:72:f1:05:c2:d4:bb:9f:9f:
                    9d:18:4f:1a:65:a0:0b:1a:7b:55:94:32:69:b9:74:
                    52:65:df:33:db:9d:ef:c3:f3:2f:3d:48:42:18:ce:
                    31:c5:82:5e:1b:10:94:a3:56:02:60:2c:95:1d:6d:
                    c0:9e:b2:d2:ca:68:e7:c7:9e:f1:a9:2a:f0:78:c5:
                    6c:16:e9:eb:ed:15:02:f0:ad:ab:b3:c8:e3:eb:fb:
                    15:f6:1e:66:53:29:b6:90:64:85:78:22:fe:bf:b0:
                    b0:a4:55:4c:74:a2:0a:62:b0:cb:2a:d0:97:ae:e3:
                    02:83:ad:e5:db:80:d3:91:45:3f:b1:6c:2c:e8:bb:
                    0d:16:42:70:74:3e:e8:cd:71:ce:0e:84:aa:89:ba:
                    2c:34:cc:83:8d:78:0d:c2:57:3f:d3:5d:7a:e5:da:
                    13:59:b6:3b:ce:a0:73:7e:db:0f:10:17:8c:e2:23:
                    1e:b5:d4:26:2c:2e:1d:ae:93:ef:28:36:a2:b5:98:
                    32:21:ef:49:18:b6:db:00:61:5a:07:5f:48:07:c4:
                    30:f2:ed:77:13:c9:e1:71:9e:95:d4:28:c7:a3:f8:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:28:EF:BB:4B:01:25:10:0A:1F:D4:74:1B:90:C0:97:AF:D6:B6:32
            X509v3 Authority Key Identifier:
                keyid:CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32332d3233203d3e20323730373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:98:72:68:f3:ec:09:30:1b:f6:71:a6:ce:c2:6d:3c:29:ac:
         14:10:cb:e0:6f:47:02:d6:f5:a9:ca:36:1c:8f:c7:6b:68:ed:
         91:ed:f4:86:6f:ef:24:0c:53:22:4d:09:54:1f:ee:97:be:ff:
         a7:d6:7a:28:c7:91:b2:fd:88:42:fe:9c:c0:c9:b1:3a:36:d0:
         f1:46:e7:1a:fd:27:cc:a5:89:3a:d9:85:59:12:c5:f3:78:a1:
         f3:87:76:27:96:18:5b:fc:90:91:ae:6f:85:7c:95:c5:ca:d3:
         eb:d6:5b:09:29:02:99:72:ac:64:e8:27:21:80:86:1a:2b:d7:
         e9:1d:32:7d:4c:01:a7:ec:9d:6f:ed:ce:2b:59:b4:55:73:43:
         28:ba:08:33:bb:32:d4:b5:21:b2:4c:f6:f0:7e:cc:90:5e:b9:
         c3:5c:e0:ef:59:e0:e5:32:43:aa:9b:7e:b2:a5:91:f4:ec:5c:
         9f:b5:53:ba:20:9f:b9:c5:7a:d6:b4:84:12:15:e7:c9:1d:b1:
         57:f4:66:03:d3:a4:97:28:1f:04:91:36:8b:eb:3a:af:7f:02:
         4e:f7:22:fb:66:35:c9:e0:dc:6c:49:59:00:36:04:38:93:9a:
         13:6b:28:59:4e:ab:8b:38:76:f0:b0:34:a4:65:c9:f8:4b:4a:
         a5:05:62:01
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPqVQUlIBhxHiYhf/sQ/ME1hLMcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxRDRFRDQwMkY2QTc0OTVGRjk4NzA0RjY1MDQ2MTZF
OUNEMDJGQTAeFw0yMzA5MDQxNDIxMzBaFw0yNDA5MDIxNDI2MzBaMDMxMTAvBgNV
BAMTKDczMjhFRkJCNEIwMTI1MTAwQTFGRDQ3NDFCOTBDMDk3QUZENkI2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5reyGqh0iaplhzPnFays5xT9
c9X/aSbF2u9dNUtzYu8WPZty8QXC1Lufn50YTxploAsae1WUMmm5dFJl3zPbne/D
8y89SEIYzjHFgl4bEJSjVgJgLJUdbcCestLKaOfHnvGpKvB4xWwW6evtFQLwrauz
yOPr+xX2HmZTKbaQZIV4Iv6/sLCkVUx0ogpisMsq0Jeu4wKDreXbgNORRT+xbCzo
uw0WQnB0PujNcc4OhKqJuiw0zIONeA3CVz/TXXrl2hNZtjvOoHN+2w8QF4ziIx61
1CYsLh2uk+8oNqK1mDIh70kYttsAYVoHX0gHxDDy7XcTyeFxnpXUKMej+Ee5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUcyjvu0sBJRAKH9R0G5DAl6/WtjIwHwYDVR0j
BBgwFoAUzx1O1AL2p0lf+YcE9lBGFunNAvowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTJXOHZRZzc4bldQdVRZVjVwaGVOZUhRQXk4RmVhRHBFR0JCQVVVcFhh
MlIvMC9DRjFENEVENDAyRjZBNzQ5NUZGOTg3MDRGNjUwNDYxNkU5Q0QwMkZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGMUQ0RUQ0MDJGNkE3NDk1
RkY5ODcwNEY2NTA0NjE2RTlDRDAyRkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzEyVzh2UWc3OG5XUHVUWVY1cGhlTmVIUUF5OEZlYURwRUdCQkFVVXBYYTJSLzAv
MzIzMDMwMmUzNjJlMzgzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzczMDM3
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcgGVDANBgkqhkiG9w0BAQsFAAOCAQEAjJhyaPPsCTAb
9nGmzsJtPCmsFBDL4G9HAtb1qco2HI/Ha2jtke30hm/vJAxTIk0JVB/ul77/p9Z6
KMeRsv2IQv6cwMmxOjbQ8UbnGv0nzKWJOtmFWRLF83ih84d2J5YYW/yQka5vhXyV
xcrT69ZbCSkCmXKsZOgnIYCGGivX6R0yfUwBp+ydb+3OK1m0VXNDKLoIM7sy1LUh
skz28H7MkF65w1zg71ng5TJDqpt+sqWR9Oxcn7VTuiCfucV61rSEEhXnyR2xV/Rm
A9OklygfBJE2i+s6r38CTvci+2Y1yeDcbElZADYEOJOaE2soWU6rizh28LA0pGXJ
+EtKpQViAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org