Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38362e302f32332d3233203d3e20323730323734.roa
File:                     3230302e3132342e38362e302f32332d3233203d3e20323730323734.roa (raw, json)
Hash identifier:          Z3eqTBOGK95EtzMr5XCqba/cKqaiyzhQrJNDZk+0hm8=
Subject key identifier:   C1:71:E3:91:1D:66:C0:B4:7D:4C:9C:AD:60:23:98:7A:EF:8D:B0:9A
Certificate issuer:       /CN=2C8A5342CB39EDDB94256DE3BD80FE7138BAD100
Certificate serial:       34478F2AEF2D0508D113A9CF2DA6CF89E1FF6886
Authority key identifier: 2C:8A:53:42:CB:39:ED:DB:94:25:6D:E3:BD:80:FE:71:38:BA:D1:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38362e302f32332d3233203d3e20323730323734.roa
Signing time:             Tue 04 Jul 2023 21:36:16 +0000
ROA not before:           Tue 04 Jul 2023 21:31:16 +0000
ROA not after:            Tue 02 Jul 2024 21:36:16 +0000
asID:                     270274
IP address blocks:        200.124.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:47:8f:2a:ef:2d:05:08:d1:13:a9:cf:2d:a6:cf:89:e1:ff:68:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C8A5342CB39EDDB94256DE3BD80FE7138BAD100
        Validity
            Not Before: Jul  4 21:31:16 2023 GMT
            Not After : Jul  2 21:36:16 2024 GMT
        Subject: CN=C171E3911D66C0B47D4C9CAD6023987AEF8DB09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:97:da:1c:f3:6a:00:ef:f2:42:95:63:71:
                    82:57:99:71:fe:3d:78:a7:71:aa:be:64:aa:4d:fc:
                    b6:23:91:55:f5:c6:bf:c4:7f:2b:15:43:44:8d:a5:
                    94:6d:24:cc:04:e2:4b:a2:2d:2a:9f:19:e0:26:83:
                    67:de:b4:d4:34:62:23:9e:e5:45:27:61:37:21:72:
                    9f:1c:3a:33:21:30:24:38:d6:ff:64:d8:ef:2f:9d:
                    35:82:b3:e1:2a:e5:bd:e8:08:fc:6c:ce:1e:da:dc:
                    7a:20:9b:3f:71:59:9f:33:93:f5:45:3f:5e:a4:8f:
                    55:d8:30:40:0e:08:31:a6:f6:06:e7:25:4d:b7:30:
                    49:7f:41:a4:ab:b9:05:da:29:5b:f5:fc:b0:3c:86:
                    df:be:d6:fc:a0:ee:a7:d2:9c:8c:ab:32:ba:31:2f:
                    32:ae:fc:76:1c:67:b1:c1:cc:ef:ae:c9:21:1c:95:
                    32:2d:14:a1:73:d5:18:3d:af:83:a6:1f:55:64:a6:
                    34:cc:2e:83:3a:8a:02:37:0e:a7:de:ab:01:83:3c:
                    70:03:42:26:ca:9b:fd:f3:4f:bc:ee:fa:02:89:c8:
                    b6:2d:3e:be:ce:ff:f3:18:a1:dd:8b:a4:52:fe:a3:
                    76:aa:b2:30:0d:23:22:42:07:b6:d1:73:5c:c5:a1:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:71:E3:91:1D:66:C0:B4:7D:4C:9C:AD:60:23:98:7A:EF:8D:B0:9A
            X509v3 Authority Key Identifier:
                keyid:2C:8A:53:42:CB:39:ED:DB:94:25:6D:E3:BD:80:FE:71:38:BA:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/3230302e3132342e38362e302f32332d3233203d3e20323730323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:5f:5b:ce:07:fd:01:07:fd:16:5f:1d:4d:fa:9c:67:29:
         d7:14:49:1e:60:7d:cf:f4:e5:cb:1d:93:7a:76:35:5d:ae:83:
         3c:1e:97:a0:26:ee:04:8a:09:57:0f:ad:1f:2c:ec:60:79:ac:
         a6:06:11:82:61:de:59:37:1e:25:7c:09:41:45:c4:6d:73:20:
         aa:2f:45:0f:b3:4b:4e:b0:19:16:7d:b0:e8:13:4a:0e:46:b1:
         8e:dd:12:c7:17:af:40:62:8c:ec:36:f1:d9:da:44:d9:32:ef:
         74:70:8e:f3:f0:4f:1d:65:39:74:a3:80:98:45:d8:d2:d1:1c:
         03:05:08:46:f2:60:3c:34:a5:7e:55:2d:11:18:88:59:5d:e6:
         88:05:4d:c5:58:24:8c:3e:15:5b:57:47:0a:b0:9c:04:70:af:
         3b:04:3e:23:d1:26:03:30:48:83:38:82:ec:b0:ab:8f:3e:7c:
         9d:cc:49:16:7a:57:d0:2f:87:16:2c:4d:b6:4d:5b:92:64:3c:
         0b:41:3c:b4:d1:af:b3:08:fa:07:ae:5d:0c:f8:35:3e:87:97:
         c6:a5:80:0a:08:12:aa:87:95:53:85:29:74:1f:e3:8e:33:13:
         5d:5a:53:db:d8:ca:c3:ce:0f:41:be:81:a5:4d:3e:d8:7f:e8:
         fc:fd:95:15
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNEePKu8tBQjRE6nPLabPieH/aIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM4QTUzNDJDQjM5RUREQjk0MjU2REUzQkQ4MEZFNzEz
OEJBRDEwMDAeFw0yMzA3MDQyMTMxMTZaFw0yNDA3MDIyMTM2MTZaMDMxMTAvBgNV
BAMTKEMxNzFFMzkxMUQ2NkMwQjQ3RDRDOUNBRDYwMjM5ODdBRUY4REIwOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbJfaHPNqAO/yQpVjcYJXmXH+
PXincaq+ZKpN/LYjkVX1xr/EfysVQ0SNpZRtJMwE4kuiLSqfGeAmg2fetNQ0YiOe
5UUnYTchcp8cOjMhMCQ41v9k2O8vnTWCs+Eq5b3oCPxszh7a3Hogmz9xWZ8zk/VF
P16kj1XYMEAOCDGm9gbnJU23MEl/QaSruQXaKVv1/LA8ht++1vyg7qfSnIyrMrox
LzKu/HYcZ7HBzO+uySEclTItFKFz1Rg9r4OmH1VkpjTMLoM6igI3DqfeqwGDPHAD
QibKm/3zT7zu+gKJyLYtPr7O//MYod2LpFL+o3aqsjANIyJCB7bRc1zFoaBtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwXHjkR1mwLR9TJytYCOYeu+NsJowHwYDVR0j
BBgwFoAULIpTQss57duUJW3jvYD+cTi60QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNKcWtBSkRzbkE3TjZWcGRQSkZNZ1RjbnBKVDZNZnNpMWNiU0g5WTdF
eVovMC8yQzhBNTM0MkNCMzlFRERCOTQyNTZERTNCRDgwRkU3MTM4QkFEMTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDOEE1MzQyQ0IzOUVEREI5
NDI1NkRFM0JEODBGRTcxMzhCQUQxMDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzSnFrQUpEc25BN042VnBkUEpGTWdUY25wSlQ2TWZzaTFjYlNIOVk3RXlaLzAv
MzIzMDMwMmUzMTMyMzQyZTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzMjM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIfFYwDQYJKoZIhvcNAQELBQADggEBAE4eX1vO
B/0BB/0WXx1N+pxnKdcUSR5gfc/05csdk3p2NV2ugzwel6Am7gSKCVcPrR8s7GB5
rKYGEYJh3lk3HiV8CUFFxG1zIKovRQ+zS06wGRZ9sOgTSg5GsY7dEscXr0BijOw2
8dnaRNky73RwjvPwTx1lOXSjgJhF2NLRHAMFCEbyYDw0pX5VLREYiFld5ogFTcVY
JIw+FVtXRwqwnARwrzsEPiPRJgMwSIM4guywq48+fJ3MSRZ6V9AvhxYsTbZNW5Jk
PAtBPLTRr7MI+geuXQz4NT6Hl8algAoIEqqHlVOFKXQf444zE11aU9vYysPOD0G+
gaVNPth/6Pz9lRU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:18:48 2025 by rpki-client