Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32322d3232203d3e20323730323734.roa
File:                     3230302e3132342e38342e302f32322d3232203d3e20323730323734.roa (raw, json)
Hash identifier:          CShQR4/5P7o26B5rmUnwM7toU9HDV5A38xkXafNlv/o=
Subject key identifier:   5A:53:B5:6B:C7:7E:B8:48:BD:73:C2:17:43:6F:65:C0:B8:10:49:25
Certificate issuer:       /CN=2C8A5342CB39EDDB94256DE3BD80FE7138BAD100
Certificate serial:       1C9E6E1517AF8C3D340FDA7DC82C32ED53C1C737
Authority key identifier: 2C:8A:53:42:CB:39:ED:DB:94:25:6D:E3:BD:80:FE:71:38:BA:D1:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32322d3232203d3e20323730323734.roa
Signing time:             Tue 04 Jul 2023 21:36:16 +0000
ROA not before:           Tue 04 Jul 2023 21:31:16 +0000
ROA not after:            Tue 02 Jul 2024 21:36:16 +0000
asID:                     270274
IP address blocks:        200.124.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9e:6e:15:17:af:8c:3d:34:0f:da:7d:c8:2c:32:ed:53:c1:c7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C8A5342CB39EDDB94256DE3BD80FE7138BAD100
        Validity
            Not Before: Jul  4 21:31:16 2023 GMT
            Not After : Jul  2 21:36:16 2024 GMT
        Subject: CN=5A53B56BC77EB848BD73C217436F65C0B8104925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:20:96:92:f5:96:45:cb:d5:77:7e:c7:56:
                    89:44:c8:ec:73:43:18:2d:43:2b:fe:f5:59:a4:de:
                    0d:ef:19:62:bd:13:13:eb:d1:e4:50:c5:66:54:ff:
                    33:c7:3e:ae:a7:f2:73:9e:94:b3:34:d8:50:ec:45:
                    80:89:75:bf:7d:93:37:3b:79:1d:a3:e8:dd:a0:4e:
                    0d:0a:60:0b:31:fa:b8:45:a5:4d:fc:79:e0:60:77:
                    3b:f1:3b:da:24:27:3e:aa:f7:e3:96:1a:86:24:64:
                    e8:d1:a2:23:60:34:39:24:57:59:dd:88:15:1d:92:
                    d4:ac:f7:73:c5:57:29:1d:ec:3d:ff:83:98:57:23:
                    9e:e7:db:7d:4b:a4:71:d5:f4:fd:84:3a:d0:af:14:
                    67:90:a6:4b:70:75:78:d6:d7:cd:51:c5:7a:83:d2:
                    84:a8:30:5b:ec:b3:cd:52:c8:44:27:64:ae:c2:d8:
                    eb:7a:0c:45:e2:01:56:d8:8a:cd:56:bc:10:f8:e1:
                    dd:f8:84:a1:36:05:f3:47:fa:39:32:f0:41:e9:c8:
                    b5:65:bd:db:d3:75:d4:81:b9:21:79:37:85:6d:f5:
                    5c:ed:86:b5:4f:28:78:88:07:69:a2:1e:5b:c8:ae:
                    1a:f7:76:73:a3:b3:9c:46:17:ba:3c:96:42:9e:86:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:53:B5:6B:C7:7E:B8:48:BD:73:C2:17:43:6F:65:C0:B8:10:49:25
            X509v3 Authority Key Identifier:
                keyid:2C:8A:53:42:CB:39:ED:DB:94:25:6D:E3:BD:80:FE:71:38:BA:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38342e302f32322d3232203d3e20323730323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:89:03:09:8f:a5:53:67:f8:7e:50:54:4c:e3:87:5c:19:81:
         2b:5c:57:b3:c3:d5:90:b4:a6:e3:fc:e3:6d:68:e2:8a:a3:7f:
         e7:17:0d:02:c4:7d:67:a5:c1:2d:ad:cc:a3:52:f2:78:4c:cd:
         0c:61:d4:4b:53:ab:31:c3:43:3c:00:6c:fd:a9:b9:96:c6:82:
         84:ac:54:15:6a:a0:bd:cb:2d:95:a3:42:20:70:1d:77:62:73:
         22:1e:b4:af:ff:bf:d5:74:bb:e4:b0:e9:32:44:71:86:80:ca:
         f8:ec:75:2b:6c:53:cc:f3:ad:f4:10:76:75:11:c9:cf:56:e6:
         fe:92:1d:53:95:16:71:57:d0:e3:46:1e:08:2c:5c:30:80:3f:
         a6:fb:9b:38:eb:c7:2a:65:54:5a:4b:8c:18:49:4a:95:4d:d2:
         0b:70:87:c3:6a:17:67:af:80:b1:28:6e:17:e6:82:a4:f0:fb:
         ee:49:46:5b:ea:37:62:73:e1:8f:a1:c1:af:87:ae:0c:55:e0:
         5d:09:d1:26:25:8d:47:33:bd:64:52:c6:01:83:18:d0:8e:17:
         92:30:d9:0e:0f:a6:c6:1b:5b:42:ba:e2:05:dd:dc:ed:42:65:
         7d:0a:25:53:52:47:e0:ec:07:91:a7:3f:db:30:7f:cd:9d:64:
         45:3e:ea:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHJ5uFRevjD00D9p9yCwy7VPBxzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM4QTUzNDJDQjM5RUREQjk0MjU2REUzQkQ4MEZFNzEz
OEJBRDEwMDAeFw0yMzA3MDQyMTMxMTZaFw0yNDA3MDIyMTM2MTZaMDMxMTAvBgNV
BAMTKDVBNTNCNTZCQzc3RUI4NDhCRDczQzIxNzQzNkY2NUMwQjgxMDQ5MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvCCWkvWWRcvVd37HVolEyOxz
QxgtQyv+9Vmk3g3vGWK9ExPr0eRQxWZU/zPHPq6n8nOelLM02FDsRYCJdb99kzc7
eR2j6N2gTg0KYAsx+rhFpU38eeBgdzvxO9okJz6q9+OWGoYkZOjRoiNgNDkkV1nd
iBUdktSs93PFVykd7D3/g5hXI57n231LpHHV9P2EOtCvFGeQpktwdXjW181RxXqD
0oSoMFvss81SyEQnZK7C2Ot6DEXiAVbYis1WvBD44d34hKE2BfNH+jky8EHpyLVl
vdvTddSBuSF5N4Vt9VzthrVPKHiIB2miHlvIrhr3dnOjs5xGF7o8lkKeho53AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWlO1a8d+uEi9c8IXQ29lwLgQSSUwHwYDVR0j
BBgwFoAULIpTQss57duUJW3jvYD+cTi60QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNKcWtBSkRzbkE3TjZWcGRQSkZNZ1RjbnBKVDZNZnNpMWNiU0g5WTdF
eVovMC8yQzhBNTM0MkNCMzlFRERCOTQyNTZERTNCRDgwRkU3MTM4QkFEMTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDOEE1MzQyQ0IzOUVEREI5
NDI1NkRFM0JEODBGRTcxMzhCQUQxMDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzSnFrQUpEc25BN042VnBkUEpGTWdUY25wSlQ2TWZzaTFjYlNIOVk3RXlaLzAv
MzIzMDMwMmUzMTMyMzQyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzMjM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIfFQwDQYJKoZIhvcNAQELBQADggEBAJaJAwmP
pVNn+H5QVEzjh1wZgStcV7PD1ZC0puP8421o4oqjf+cXDQLEfWelwS2tzKNS8nhM
zQxh1EtTqzHDQzwAbP2puZbGgoSsVBVqoL3LLZWjQiBwHXdicyIetK//v9V0u+Sw
6TJEcYaAyvjsdStsU8zzrfQQdnURyc9W5v6SHVOVFnFX0ONGHggsXDCAP6b7mzjr
xyplVFpLjBhJSpVN0gtwh8NqF2evgLEobhfmgqTw++5JRlvqN2Jz4Y+hwa+HrgxV
4F0J0SYljUczvWRSxgGDGNCOF5Iw2Q4PpsYbW0K64gXd3O1CZX0KJVNSR+DsB5Gn
P9swf82dZEU+6vQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org