Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231342e302f32342d3234203d3e20323731333833.roa
File:                     3230302e33362e3231342e302f32342d3234203d3e20323731333833.roa (raw, json)
Hash identifier:          8koy2OU2YIbvoYH1VWyKR0iGEsfdIUsC64Pyti8e5yA=
Subject key identifier:   B3:CF:95:FF:62:63:1D:E6:E3:54:7F:0A:34:07:E2:99:44:24:5B:45
Certificate issuer:       /CN=796F564AEAADE5A568F1954847A0276FEAA52A25
Certificate serial:       2EB2F19920D54ECE2F5696C532B4C02FFE0FB49A
Authority key identifier: 79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231342e302f32342d3234203d3e20323731333833.roa
Signing time:             Fri 14 Apr 2023 13:20:04 +0000
ROA not before:           Fri 14 Apr 2023 13:15:04 +0000
ROA not after:            Fri 12 Apr 2024 13:20:04 +0000
asID:                     271383
IP address blocks:        200.36.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b2:f1:99:20:d5:4e:ce:2f:56:96:c5:32:b4:c0:2f:fe:0f:b4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796F564AEAADE5A568F1954847A0276FEAA52A25
        Validity
            Not Before: Apr 14 13:15:04 2023 GMT
            Not After : Apr 12 13:20:04 2024 GMT
        Subject: CN=B3CF95FF62631DE6E3547F0A3407E29944245B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:f9:04:e0:a4:d2:c6:f3:97:aa:cf:2f:33:
                    28:4e:5d:de:23:40:4d:9c:c7:b6:7c:78:c8:a9:67:
                    c7:78:cb:ae:84:5e:11:1a:6c:2d:c5:9e:5a:92:9f:
                    4d:c1:d1:40:4f:ae:ec:6e:9d:83:6a:8e:7a:46:0f:
                    cc:58:e3:6a:e7:dd:ed:f0:7c:93:c9:1c:c4:b4:bc:
                    96:3a:b0:80:48:5a:30:04:a6:97:44:0a:9d:99:6d:
                    2a:d1:08:53:31:8e:a9:30:fa:04:21:73:b9:c9:b8:
                    21:48:eb:ba:4f:55:d6:e9:46:de:5f:bd:36:22:37:
                    8a:c7:1c:eb:8e:15:a7:a1:4d:f6:f4:75:55:3e:1b:
                    4e:d4:11:9e:a9:3b:40:f6:7e:03:61:63:2a:3c:62:
                    28:54:15:63:26:62:8f:ec:d1:8c:3f:8e:c7:eb:5d:
                    72:e8:01:64:9a:01:cd:33:e5:ec:d4:61:4e:3c:e0:
                    de:a7:5c:f5:ec:0b:ca:8a:e6:ca:36:2d:cc:d3:65:
                    ad:5a:7e:02:72:b4:63:7e:26:74:f5:6d:0a:03:42:
                    43:20:c3:54:0b:05:e0:a2:1c:37:fd:2a:32:00:ee:
                    19:1b:5b:63:4e:7e:6f:94:b8:1a:92:aa:25:55:32:
                    e9:7c:dc:01:6e:cb:c5:87:6c:ae:e0:59:2a:3d:a1:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CF:95:FF:62:63:1D:E6:E3:54:7F:0A:34:07:E2:99:44:24:5B:45
            X509v3 Authority Key Identifier:
                keyid:79:6F:56:4A:EA:AD:E5:A5:68:F1:95:48:47:A0:27:6F:EA:A5:2A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/796F564AEAADE5A568F1954847A0276FEAA52A25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/796F564AEAADE5A568F1954847A0276FEAA52A25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/3230302e33362e3231342e302f32342d3234203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:38:59:84:7c:c0:cd:57:24:21:1a:e4:a7:7a:56:d9:2f:05:
         ff:f1:c9:6c:d3:92:68:07:7a:f4:ca:0c:6f:d7:e8:65:cb:35:
         63:d1:72:58:1d:6d:8e:e1:73:67:0b:d8:6c:54:a5:3d:2c:a2:
         6d:95:42:18:40:71:13:23:14:f3:27:61:f8:77:cd:c0:39:04:
         ef:42:80:b0:84:c3:14:0a:20:81:6e:32:85:1d:5e:a1:21:5d:
         97:41:05:bb:20:32:40:8f:ce:d3:19:8d:e6:48:cf:8b:06:d4:
         d9:17:9d:cb:c2:b1:39:f5:20:c2:6e:4b:4e:9d:e6:80:69:26:
         9f:04:b5:ab:64:69:01:d4:b4:b9:70:f1:69:bc:e3:cc:c5:d4:
         81:af:5a:aa:22:90:b7:ae:6e:bc:8b:26:ea:74:33:48:88:5a:
         9c:07:f2:97:67:23:54:21:93:91:ad:c6:dc:57:bb:3a:3d:7f:
         60:c0:36:f7:59:86:c4:35:fc:b3:9d:b6:c6:1f:40:18:ce:b0:
         f1:c0:83:42:e5:40:a9:76:c5:1e:fc:a6:74:7c:2f:c7:5d:96:
         42:c3:a4:bf:07:69:87:5a:a7:ec:5c:99:fb:80:89:9c:33:3b:
         b9:bf:f6:bf:b6:a9:91:02:8d:b0:25:bb:b6:99:5b:09:2d:dd:
         10:11:f7:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULrLxmSDVTs4vVpbFMrTAL/4PtJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk2RjU2NEFFQUFERTVBNTY4RjE5NTQ4NDdBMDI3NkZF
QUE1MkEyNTAeFw0yMzA0MTQxMzE1MDRaFw0yNDA0MTIxMzIwMDRaMDMxMTAvBgNV
BAMTKEIzQ0Y5NUZGNjI2MzFERTZFMzU0N0YwQTM0MDdFMjk5NDQyNDVCNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFg/kE4KTSxvOXqs8vMyhOXd4j
QE2cx7Z8eMipZ8d4y66EXhEabC3FnlqSn03B0UBPruxunYNqjnpGD8xY42rn3e3w
fJPJHMS0vJY6sIBIWjAEppdECp2ZbSrRCFMxjqkw+gQhc7nJuCFI67pPVdbpRt5f
vTYiN4rHHOuOFaehTfb0dVU+G07UEZ6pO0D2fgNhYyo8YihUFWMmYo/s0Yw/jsfr
XXLoAWSaAc0z5ezUYU484N6nXPXsC8qK5so2LczTZa1afgJytGN+JnT1bQoDQkMg
w1QLBeCiHDf9KjIA7hkbW2NOfm+UuBqSqiVVMul83AFuy8WHbK7gWSo9oXuTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUs8+V/2JjHebjVH8KNAfimUQkW0UwHwYDVR0j
BBgwFoAUeW9WSuqt5aVo8ZVIR6Anb+qlKiUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkZZWlNNNXJ1RTFCbnY2alYxclNzUFpQOG9UWmluUU5zWlJNMUtBUEN6
MXIvMS83OTZGNTY0QUVBQURFNUE1NjhGMTk1NDg0N0EwMjc2RkVBQTUyQTI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5NkY1NjRBRUFBREU1QTU2
OEYxOTU0ODQ3QTAyNzZGRUFBNTJBMjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJGWVpTTTVydUUxQm52NmpWMXJTc1BaUDhvVFppblFOc1pSTTFLQVBDejFyLzEv
MzIzMDMwMmUzMzM2MmUzMjMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIJNYwDQYJKoZIhvcNAQELBQADggEBAEY4WYR8
wM1XJCEa5Kd6VtkvBf/xyWzTkmgHevTKDG/X6GXLNWPRclgdbY7hc2cL2GxUpT0s
om2VQhhAcRMjFPMnYfh3zcA5BO9CgLCEwxQKIIFuMoUdXqEhXZdBBbsgMkCPztMZ
jeZIz4sG1NkXncvCsTn1IMJuS06d5oBpJp8EtatkaQHUtLlw8Wm848zF1IGvWqoi
kLeubryLJup0M0iIWpwH8pdnI1Qhk5GtxtxXuzo9f2DANvdZhsQ1/LOdtsYfQBjO
sPHAg0LlQKl2xR78pnR8L8ddlkLDpL8HaYdap+xcmfuAiZwzO7m/9r+2qZECjbAl
u7aZWwkt3RAR98s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org