Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/3230302e3135302e3235322e302f32322d3234203d3e20323731363730.roa
File:                     3230302e3135302e3235322e302f32322d3234203d3e20323731363730.roa (raw, json)
Hash identifier:          nBJBj9phBk2jGU53mND9J0q0jEbD3MktaeuPNAvJGoY=
Subject key identifier:   0B:CB:0A:E1:11:2C:E2:5F:57:01:D5:AB:8C:72:62:65:A9:54:8F:ED
Certificate issuer:       /CN=32BE580D860CE57E80548533943E4642B25BEE59
Certificate serial:       5DD4543313B3FB93E4199A58B50A3F5A63FF4139
Authority key identifier: 32:BE:58:0D:86:0C:E5:7E:80:54:85:33:94:3E:46:42:B2:5B:EE:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BE580D860CE57E80548533943E4642B25BEE59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/3230302e3135302e3235322e302f32322d3234203d3e20323731363730.roa
Signing time:             Thu 04 Apr 2024 05:40:43 +0000
ROA not before:           Thu 04 Apr 2024 05:35:43 +0000
ROA not after:            Thu 03 Apr 2025 05:40:43 +0000
asID:                     271670
IP address blocks:        200.150.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d4:54:33:13:b3:fb:93:e4:19:9a:58:b5:0a:3f:5a:63:ff:41:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32BE580D860CE57E80548533943E4642B25BEE59
        Validity
            Not Before: Apr  4 05:35:43 2024 GMT
            Not After : Apr  3 05:40:43 2025 GMT
        Subject: CN=0BCB0AE1112CE25F5701D5AB8C726265A9548FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fd:6f:71:19:4e:99:c0:5a:d3:c3:f5:c0:8a:
                    5b:85:d4:e5:e9:4b:21:72:25:4a:93:09:a1:31:90:
                    d8:4e:63:0f:ae:84:7c:74:4b:bf:db:a7:1d:cb:fd:
                    1b:0f:81:96:e6:c9:d6:bb:a8:fe:85:dd:f8:4a:93:
                    e6:c4:6a:72:f7:41:10:34:aa:34:57:2c:c3:e5:81:
                    88:ac:bf:50:7c:92:81:fd:ae:69:0a:fe:09:b4:19:
                    d2:f7:67:e0:f2:b6:44:5e:b3:14:26:51:d4:c3:d9:
                    86:d6:20:d1:9d:65:30:cd:f5:36:68:13:2d:b8:1f:
                    a2:c6:a6:3c:b7:2e:b4:b1:0b:c1:27:09:05:d5:74:
                    ac:c4:30:35:45:a5:c2:a4:46:fe:34:65:4b:b9:2f:
                    74:4d:e7:94:19:20:de:74:a1:dc:41:f4:29:4d:07:
                    b5:cf:cd:3d:26:f2:4c:01:46:ae:f5:4e:a6:ea:6f:
                    43:9e:67:54:a9:7e:f5:f0:ed:d8:17:b8:b5:f6:60:
                    d8:7f:df:57:88:ad:87:a8:42:82:4f:4c:e6:75:ea:
                    77:49:03:04:22:0f:57:81:d0:7f:f7:7d:6a:c7:4f:
                    59:18:ca:90:21:90:8c:04:be:47:17:6e:c0:5d:c2:
                    40:e6:df:1e:61:28:20:7b:e4:95:7a:5b:1a:aa:9d:
                    f8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CB:0A:E1:11:2C:E2:5F:57:01:D5:AB:8C:72:62:65:A9:54:8F:ED
            X509v3 Authority Key Identifier:
                keyid:32:BE:58:0D:86:0C:E5:7E:80:54:85:33:94:3E:46:42:B2:5B:EE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/32BE580D860CE57E80548533943E4642B25BEE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BE580D860CE57E80548533943E4642B25BEE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/1/3230302e3135302e3235322e302f32322d3234203d3e20323731363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:91:6b:04:d1:05:af:2b:2b:ef:1d:19:b1:59:f2:c9:b7:c0:
         76:93:2e:f7:43:f7:ff:4b:28:68:75:4e:d4:ee:45:33:8f:d4:
         d1:73:1d:77:1e:9b:24:28:3c:b4:55:b1:d0:4e:91:b3:58:ef:
         45:28:90:99:63:a8:da:dc:ef:cc:c8:a2:e9:ba:c6:d7:b3:9b:
         b3:91:0a:f1:63:e2:39:97:a5:36:d0:2c:7c:1f:ad:6a:d8:15:
         fa:c4:5a:a6:d6:bc:88:8d:a6:41:dc:66:fb:68:d8:cb:54:98:
         e3:13:b9:b5:b7:04:2e:2f:6f:87:47:e5:73:92:f6:5d:d4:e3:
         df:82:6d:4e:f4:9e:cb:a0:8f:3a:83:67:94:aa:f4:45:59:fe:
         20:14:75:98:1e:8a:1a:3a:f7:d9:d0:31:e7:cf:70:99:25:11:
         5a:e5:f2:e5:2a:36:30:66:6c:ca:51:30:07:2c:bc:12:cb:9c:
         3e:99:e0:cf:d0:03:b7:ed:c4:51:ce:8c:ef:3e:72:3c:86:e9:
         35:17:8c:9b:8f:de:77:86:24:be:d7:4e:ba:1d:28:f6:ac:91:
         04:43:cc:55:83:01:03:18:66:29:ca:7b:80:a8:12:2b:06:4a:
         11:0c:7b:ae:f5:07:68:8a:ad:91:a7:d5:c9:89:72:dc:49:6f:
         c2:a3:97:d5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXdRUMxOz+5PkGZpYtQo/WmP/QTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJCRTU4MEQ4NjBDRTU3RTgwNTQ4NTMzOTQzRTQ2NDJC
MjVCRUU1OTAeFw0yNDA0MDQwNTM1NDNaFw0yNTA0MDMwNTQwNDNaMDMxMTAvBgNV
BAMTKDBCQ0IwQUUxMTEyQ0UyNUY1NzAxRDVBQjhDNzI2MjY1QTk1NDhGRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2/W9xGU6ZwFrTw/XAiluF1OXp
SyFyJUqTCaExkNhOYw+uhHx0S7/bpx3L/RsPgZbmyda7qP6F3fhKk+bEanL3QRA0
qjRXLMPlgYisv1B8koH9rmkK/gm0GdL3Z+DytkResxQmUdTD2YbWINGdZTDN9TZo
Ey24H6LGpjy3LrSxC8EnCQXVdKzEMDVFpcKkRv40ZUu5L3RN55QZIN50odxB9ClN
B7XPzT0m8kwBRq71Tqbqb0OeZ1SpfvXw7dgXuLX2YNh/31eIrYeoQoJPTOZ16ndJ
AwQiD1eB0H/3fWrHT1kYypAhkIwEvkcXbsBdwkDm3x5hKCB75JV6WxqqnfgbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUC8sK4REs4l9XAdWrjHJiZalUj+0wHwYDVR0j
BBgwFoAUMr5YDYYM5X6AVIUzlD5GQrJb7lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1dOYVVxdGJKU3Y4NnVlSmNydkc1SjlMeHp4ZHMzd2paOHhFRzhDRU5y
emgvMS8zMkJFNTgwRDg2MENFNTdFODA1NDg1MzM5NDNFNDY0MkIyNUJFRTU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQkU1ODBEODYwQ0U1N0U4
MDU0ODUzMzk0M0U0NjQyQjI1QkVFNTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXTmFVcXRiSlN2ODZ1ZUpjcnZHNUo5THh6eGRzM3dqWjh4RUc4Q0VOcnpoLzEv
MzIzMDMwMmUzMTM1MzAyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTM2MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsiW/DANBgkqhkiG9w0BAQsFAAOCAQEABZFr
BNEFrysr7x0ZsVnyybfAdpMu90P3/0soaHVO1O5FM4/U0XMddx6bJCg8tFWx0E6R
s1jvRSiQmWOo2tzvzMii6brG17Obs5EK8WPiOZelNtAsfB+tatgV+sRapta8iI2m
Qdxm+2jYy1SY4xO5tbcELi9vh0flc5L2XdTj34JtTvSey6CPOoNnlKr0RVn+IBR1
mB6KGjr32dAx589wmSURWuXy5So2MGZsylEwByy8EsucPpngz9ADt+3EUc6M7z5y
PIbpNReMm4/ed4YkvtdOuh0o9qyRBEPMVYMBAxhmKcp7gKgSKwZKEQx7rvUHaIqt
kafVyYly3ElvwqOX1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org