Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32342d3234203d3e20323730373137.roa
File:                     3230302e362e38342e302f32342d3234203d3e20323730373137.roa (raw, json)
Hash identifier:          o8bVHXv5FMREBV+UQhTRaUgDPiec6yZNfaU61TOBh+U=
Subject key identifier:   52:BE:4D:B9:0F:9D:10:15:34:2A:9A:17:6E:8D:BC:70:3E:68:D6:58
Certificate issuer:       /CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
Certificate serial:       34A1935CF43902046EBF3166EA85554AC5AEC078
Authority key identifier: CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32342d3234203d3e20323730373137.roa
Signing time:             Mon 04 Sep 2023 14:26:28 +0000
ROA not before:           Mon 04 Sep 2023 14:21:28 +0000
ROA not after:            Mon 02 Sep 2024 14:26:28 +0000
asID:                     270717
IP address blocks:        200.6.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a1:93:5c:f4:39:02:04:6e:bf:31:66:ea:85:55:4a:c5:ae:c0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
        Validity
            Not Before: Sep  4 14:21:28 2023 GMT
            Not After : Sep  2 14:26:28 2024 GMT
        Subject: CN=52BE4DB90F9D1015342A9A176E8DBC703E68D658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:d2:1a:a0:5f:39:28:8d:4e:1f:fa:af:b0:
                    8b:a3:c6:00:77:33:43:36:3b:55:a6:fd:cd:6a:d2:
                    6d:52:a3:b9:47:fa:ee:4c:ef:2d:ed:6d:8f:ee:3c:
                    ad:31:68:ca:81:7b:e1:e3:50:c6:ea:9a:1e:61:eb:
                    05:24:49:2f:ad:e1:95:9d:0f:9e:0c:14:c4:ce:2e:
                    ec:14:43:1d:f9:14:4c:cc:da:9b:e9:ff:d3:6f:06:
                    d6:fe:95:25:1d:fb:eb:c4:fe:0e:16:7f:57:ac:46:
                    21:ed:ff:3f:48:75:10:d7:30:35:38:0f:b0:d2:a9:
                    27:e4:d9:0d:d1:3d:7d:e8:ae:fb:cb:8c:71:47:22:
                    f5:22:8d:1c:ad:96:ef:7d:f4:de:e8:03:01:4a:18:
                    66:65:e3:91:a8:58:81:6f:7c:54:8e:9d:75:1f:ef:
                    3a:e5:b4:ae:e6:b2:a8:7f:6e:44:b0:3c:4d:37:4f:
                    1f:64:5e:9e:95:10:ca:e2:a8:ec:c9:9b:34:fd:12:
                    16:24:15:24:83:c3:ad:af:34:4f:79:11:6e:c8:cf:
                    46:d8:7c:c4:d0:d3:f2:68:b2:d6:09:e9:fc:f6:b9:
                    a2:27:f2:36:a0:2a:06:37:ee:27:e0:fe:c0:f4:db:
                    50:90:91:39:18:06:51:d6:32:74:60:58:99:f6:f7:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BE:4D:B9:0F:9D:10:15:34:2A:9A:17:6E:8D:BC:70:3E:68:D6:58
            X509v3 Authority Key Identifier:
                keyid:CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32342d3234203d3e20323730373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:7a:6c:69:c6:b1:e2:81:b1:01:ad:ea:2c:e6:1a:2a:99:54:
         ec:8d:93:51:62:a4:1e:13:3b:c1:aa:46:13:a1:23:b7:1c:57:
         1c:b5:fc:5d:7a:a1:9a:ff:56:28:0f:a1:ec:93:6f:49:e4:29:
         39:0f:41:bb:18:1f:c0:aa:2f:84:a5:b4:78:f4:4a:e4:98:45:
         b9:db:cb:8f:c8:a8:15:c7:5d:30:98:0b:7a:5a:2f:c6:83:52:
         0e:de:a3:c1:ae:52:01:12:8e:56:58:7e:44:90:37:a3:16:55:
         c3:71:96:a5:2c:ea:1c:64:1e:2e:cd:ab:ba:3a:65:c9:fc:0a:
         98:fd:1d:ef:e7:83:e7:81:93:59:e1:ed:63:4b:8c:4c:60:68:
         73:82:9f:d0:8f:86:09:eb:4f:af:9a:8e:a1:e4:8b:2f:4f:54:
         09:1e:3b:29:79:b8:17:68:73:f8:98:0f:41:df:7d:53:11:94:
         0f:a2:26:92:cf:0b:93:2f:0d:62:31:8e:2a:7e:28:2f:74:3e:
         28:4e:96:eb:7e:be:60:b0:44:81:db:6b:61:20:60:b7:ae:2f:
         13:61:b9:92:32:cf:79:d6:ad:ef:3f:85:38:42:83:8a:7b:c9:
         70:0b:d4:69:6d:97:3c:fb:6b:15:2b:a2:63:a9:39:79:d5:6d:
         bd:54:d7:88
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNKGTXPQ5AgRuvzFm6oVVSsWuwHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxRDRFRDQwMkY2QTc0OTVGRjk4NzA0RjY1MDQ2MTZF
OUNEMDJGQTAeFw0yMzA5MDQxNDIxMjhaFw0yNDA5MDIxNDI2MjhaMDMxMTAvBgNV
BAMTKDUyQkU0REI5MEY5RDEwMTUzNDJBOUExNzZFOERCQzcwM0U2OEQ2NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kdIaoF85KI1OH/qvsIujxgB3
M0M2O1Wm/c1q0m1So7lH+u5M7y3tbY/uPK0xaMqBe+HjUMbqmh5h6wUkSS+t4ZWd
D54MFMTOLuwUQx35FEzM2pvp/9NvBtb+lSUd++vE/g4Wf1esRiHt/z9IdRDXMDU4
D7DSqSfk2Q3RPX3orvvLjHFHIvUijRytlu999N7oAwFKGGZl45GoWIFvfFSOnXUf
7zrltK7msqh/bkSwPE03Tx9kXp6VEMriqOzJmzT9EhYkFSSDw62vNE95EW7Iz0bY
fMTQ0/JostYJ6fz2uaIn8jagKgY37ifg/sD021CQkTkYBlHWMnRgWJn29w1FAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUr5NuQ+dEBU0KpoXbo28cD5o1lgwHwYDVR0j
BBgwFoAUzx1O1AL2p0lf+YcE9lBGFunNAvowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTJXOHZRZzc4bldQdVRZVjVwaGVOZUhRQXk4RmVhRHBFR0JCQVVVcFhh
MlIvMC9DRjFENEVENDAyRjZBNzQ5NUZGOTg3MDRGNjUwNDYxNkU5Q0QwMkZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGMUQ0RUQ0MDJGNkE3NDk1
RkY5ODcwNEY2NTA0NjE2RTlDRDAyRkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzEyVzh2UWc3OG5XUHVUWVY1cGhlTmVIUUF5OEZlYURwRUdCQkFVVXBYYTJSLzAv
MzIzMDMwMmUzNjJlMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDM3
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMgGVDANBgkqhkiG9w0BAQsFAAOCAQEAenpsacax4oGx
Aa3qLOYaKplU7I2TUWKkHhM7wapGE6EjtxxXHLX8XXqhmv9WKA+h7JNvSeQpOQ9B
uxgfwKovhKW0ePRK5JhFudvLj8ioFcddMJgLelovxoNSDt6jwa5SARKOVlh+RJA3
oxZVw3GWpSzqHGQeLs2rujplyfwKmP0d7+eD54GTWeHtY0uMTGBoc4Kf0I+GCetP
r5qOoeSLL09UCR47KXm4F2hz+JgPQd99UxGUD6Imks8Lky8NYjGOKn4oL3Q+KE6W
636+YLBEgdtrYSBgt64vE2G5kjLPedat7z+FOEKDinvJcAvUaW2XPPtrFSuiY6k5
edVtvVTXiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org