Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa
File:                     3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa (raw, json)
Hash identifier:          prLyjS4qUqn+utCfT6JQBMnNjeWPn36gGKWvPsFLj7M=
Subject key identifier:   CA:21:EF:AF:8F:25:1E:2B:74:F0:C2:E2:AB:C0:72:9F:BF:70:9F:A7
Certificate issuer:       /CN=30927BB169705D61DFE4973ACED55565431260B1
Certificate serial:       4993A545190BC51A401E640B0D715742AF807FB2
Authority key identifier: 30:92:7B:B1:69:70:5D:61:DF:E4:97:3A:CE:D5:55:65:43:12:60:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30927BB169705D61DFE4973ACED55565431260B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa
Signing time:             Thu 30 Nov 2023 18:01:19 +0000
ROA not before:           Thu 30 Nov 2023 17:56:19 +0000
ROA not after:            Thu 28 Nov 2024 18:01:19 +0000
asID:                     270259
IP address blocks:        200.107.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:93:a5:45:19:0b:c5:1a:40:1e:64:0b:0d:71:57:42:af:80:7f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30927BB169705D61DFE4973ACED55565431260B1
        Validity
            Not Before: Nov 30 17:56:19 2023 GMT
            Not After : Nov 28 18:01:19 2024 GMT
        Subject: CN=CA21EFAF8F251E2B74F0C2E2ABC0729FBF709FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:73:e5:86:ab:14:3f:9b:d7:ac:12:d8:7d:
                    94:d3:a4:d7:4e:3a:6c:42:5f:0f:a8:b8:a6:3b:91:
                    1d:8f:cb:b3:3d:f0:c9:1e:bc:49:9e:ad:af:65:bd:
                    91:4c:06:43:3b:16:45:89:10:fd:06:73:5d:04:48:
                    31:c4:cd:e7:8b:95:e9:09:8b:1e:2e:9b:d6:4f:d0:
                    46:62:2b:9c:e8:6b:a9:d4:9d:59:cb:87:93:9c:bd:
                    6f:45:73:ad:cf:10:d0:d7:75:a8:33:8d:7f:f8:1e:
                    1b:f5:15:75:bc:17:35:e1:53:b3:96:cd:cc:96:92:
                    ce:1f:1f:96:85:46:f5:ee:d3:1f:3b:fe:e6:6a:74:
                    ae:4b:7c:00:5c:70:0a:91:14:46:bf:44:b7:cf:b0:
                    8b:e0:e0:6f:6e:f1:9a:0b:fb:b9:f6:ed:10:ff:67:
                    7a:26:07:d7:3b:85:d6:fc:de:c9:e4:5a:60:b6:35:
                    b1:82:e2:40:ef:0c:95:11:bb:ef:c2:12:b8:3f:21:
                    6f:3b:a5:dd:03:c0:d5:71:6e:df:54:6c:51:88:42:
                    46:d2:9a:0d:fe:ef:01:a1:d3:21:6f:d3:42:fb:5f:
                    e1:1b:79:35:64:94:df:01:14:8b:4c:1f:9c:de:27:
                    de:8a:7a:f0:65:32:fe:1d:49:e3:ea:43:95:52:73:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:EF:AF:8F:25:1E:2B:74:F0:C2:E2:AB:C0:72:9F:BF:70:9F:A7
            X509v3 Authority Key Identifier:
                keyid:30:92:7B:B1:69:70:5D:61:DF:E4:97:3A:CE:D5:55:65:43:12:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/30927BB169705D61DFE4973ACED55565431260B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30927BB169705D61DFE4973ACED55565431260B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:93:7a:cc:fe:94:b2:b8:0f:3d:16:b7:51:05:10:fd:b1:3a:
         1b:bf:86:b0:e8:03:72:d9:a2:56:16:90:80:08:d7:c4:5f:20:
         e6:05:5b:89:db:21:40:1a:c9:eb:0d:ac:8e:64:38:65:a6:2a:
         25:80:6b:68:4d:21:28:6a:33:dc:2b:de:21:6c:9e:a6:b2:38:
         27:57:9d:34:6a:b6:4d:81:67:2f:c9:b2:1e:52:fb:a0:65:40:
         fb:09:20:e5:51:37:3c:3d:4e:95:97:b4:cb:1b:48:85:49:6e:
         bd:d5:e4:d4:a6:78:a5:ff:7e:54:8e:dc:fb:e4:70:9d:40:c8:
         40:6a:38:d6:c7:4f:b8:4c:b9:e0:c1:19:b7:20:81:0e:3c:d5:
         e6:b2:b4:bd:90:ae:c9:d3:b8:e2:37:93:5b:2f:97:cf:52:49:
         6d:49:9d:e4:36:3b:60:f0:11:1d:49:5a:09:88:62:b8:59:f9:
         ff:bb:8c:63:af:e8:71:25:79:86:ae:cf:c7:cd:1e:56:06:79:
         27:eb:51:b5:8e:e1:14:21:89:77:0d:1e:b0:96:c4:64:b8:8e:
         61:73:68:8c:97:f9:c7:a3:fe:ad:01:c6:3b:52:be:60:a6:c5:
         1f:3d:3a:6c:4c:f0:82:c6:b8:2d:55:b4:cd:eb:30:4a:84:30:
         78:61:b6:b3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSZOlRRkLxRpAHmQLDXFXQq+Af7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5MjdCQjE2OTcwNUQ2MURGRTQ5NzNBQ0VENTU1NjU0
MzEyNjBCMTAeFw0yMzExMzAxNzU2MTlaFw0yNDExMjgxODAxMTlaMDMxMTAvBgNV
BAMTKENBMjFFRkFGOEYyNTFFMkI3NEYwQzJFMkFCQzA3MjlGQkY3MDlGQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8nPlhqsUP5vXrBLYfZTTpNdO
OmxCXw+ouKY7kR2Py7M98MkevEmera9lvZFMBkM7FkWJEP0Gc10ESDHEzeeLlekJ
ix4um9ZP0EZiK5zoa6nUnVnLh5OcvW9Fc63PENDXdagzjX/4Hhv1FXW8FzXhU7OW
zcyWks4fH5aFRvXu0x87/uZqdK5LfABccAqRFEa/RLfPsIvg4G9u8ZoL+7n27RD/
Z3omB9c7hdb83snkWmC2NbGC4kDvDJURu+/CErg/IW87pd0DwNVxbt9UbFGIQkbS
mg3+7wGh0yFv00L7X+EbeTVklN8BFItMH5zeJ96KevBlMv4dSePqQ5VSc0yFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyiHvr48lHit08MLiq8Byn79wn6cwHwYDVR0j
BBgwFoAUMJJ7sWlwXWHf5Jc6ztVVZUMSYLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlpmNDdzeDFqVE1tdWh0YkZCeWhyaVZCcXdNYmtCY1JnR2VNS0g4SGN4
V1QvMC8zMDkyN0JCMTY5NzA1RDYxREZFNDk3M0FDRUQ1NTU2NTQzMTI2MEIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwOTI3QkIxNjk3MDVENjFE
RkU0OTczQUNFRDU1NTY1NDMxMjYwQjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJaZjQ3c3gxalRNbXVodGJGQnlocmlWQnF3TWJrQmNSZ0dlTUtIOEhjeFdULzAv
MzIzMDMwMmUzMTMwMzcyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDMyMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshr3DANBgkqhkiG9w0BAQsFAAOCAQEAG5N6
zP6UsrgPPRa3UQUQ/bE6G7+GsOgDctmiVhaQgAjXxF8g5gVbidshQBrJ6w2sjmQ4
ZaYqJYBraE0hKGoz3CveIWyeprI4J1edNGq2TYFnL8myHlL7oGVA+wkg5VE3PD1O
lZe0yxtIhUluvdXk1KZ4pf9+VI7c++RwnUDIQGo41sdPuEy54MEZtyCBDjzV5rK0
vZCuydO44jeTWy+Xz1JJbUmd5DY7YPARHUlaCYhiuFn5/7uMY6/ocSV5hq7Px80e
VgZ5J+tRtY7hFCGJdw0esJbEZLiOYXNojJf5x6P+rQHGO1K+YKbFHz06bEzwgsa4
LVW0zeswSoQweGG2sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org