Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa
File:                     3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa (raw, json)
Hash identifier:          F/3XFmbKLK41Yr8dBj70mpjDQnx6NEXmFmCF3wpgL0s=
Subject key identifier:   E7:2B:89:F9:98:E0:1B:10:1E:6A:C9:8E:5C:94:24:E9:C9:24:1E:40
Certificate issuer:       /CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
Certificate serial:       73D07E8D5BBAD2002EBB87A00E34EB7FB87E304A
Authority key identifier: 40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa
Signing time:             Wed 04 Oct 2023 14:00:01 +0000
ROA not before:           Wed 04 Oct 2023 13:55:01 +0000
ROA not after:            Fri 04 Oct 2024 14:00:01 +0000
asID:                     28283
IP address blocks:        200.240.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d0:7e:8d:5b:ba:d2:00:2e:bb:87:a0:0e:34:eb:7f:b8:7e:30:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
        Validity
            Not Before: Oct  4 13:55:01 2023 GMT
            Not After : Oct  4 14:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:63:05:ed:f8:fd:d4:99:7f:e6:fd:60:a7:
                    5b:16:a4:63:d7:83:7d:17:8d:0c:94:30:d4:27:98:
                    be:0b:c0:52:cf:ea:d9:4d:ac:74:1e:74:18:87:5d:
                    7c:43:95:88:28:22:fe:d2:49:84:1b:32:71:22:b7:
                    44:59:0a:5b:b3:12:3c:e7:31:48:d0:36:f1:5d:fd:
                    48:b2:1b:55:2a:13:be:31:1b:17:30:50:b0:65:1c:
                    e0:31:d4:ea:15:70:ca:a2:33:35:42:fd:53:ab:15:
                    1f:4a:49:3d:ad:5b:cd:1c:e7:65:00:f9:23:65:0a:
                    ac:04:1e:84:f2:b9:7e:77:48:19:83:49:66:11:36:
                    80:a3:c2:f2:32:c9:f6:73:b4:1f:4a:01:6d:f1:04:
                    38:41:6a:92:6a:22:93:84:b9:78:4d:3a:3e:49:d9:
                    d2:75:91:df:ad:ca:c6:98:fd:69:6a:bd:4d:2d:42:
                    97:ef:a9:0d:ea:8c:2d:84:81:f1:00:dc:7e:40:c7:
                    43:c9:f7:95:20:96:e7:a7:70:20:d2:db:c6:9e:2e:
                    8a:cc:ad:46:fa:d0:a8:07:64:1b:31:d5:d5:ab:5b:
                    80:6d:91:25:c4:db:37:81:24:6d:44:4c:66:62:05:
                    e2:7f:0a:c4:4a:b1:e4:14:ae:76:ed:a6:73:b7:5b:
                    b4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2B:89:F9:98:E0:1B:10:1E:6A:C9:8E:5C:94:24:E9:C9:24:1E:40
            X509v3 Authority Key Identifier:
                keyid:40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.240.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:1f:a5:cc:d0:8b:7a:f5:63:cb:8c:f4:7f:b1:ca:96:28:9a:
         28:b7:32:22:a5:5c:bd:47:dc:4a:ff:ea:20:5f:a2:aa:08:e4:
         1e:35:02:a7:66:19:4b:1d:ea:95:52:a5:a4:6b:c3:c9:bf:12:
         af:06:ef:65:83:e5:96:f4:82:b3:4b:48:8e:f6:a6:f3:ae:ee:
         a3:ce:2f:c0:8b:2c:84:99:2a:b5:ae:19:ad:bb:f3:16:b7:93:
         4d:d9:96:d1:52:a1:f3:74:f5:86:d5:ff:db:d0:37:ed:1a:fd:
         a0:af:c2:bc:4f:77:64:61:38:b0:59:46:5e:02:20:3e:00:f2:
         00:c1:d7:5b:49:84:6a:10:14:0e:6c:d9:60:18:ea:e3:54:a6:
         14:dc:16:88:b7:c5:46:fe:df:d6:6c:6f:74:f7:05:fc:d9:f1:
         08:ca:e6:bf:97:95:f7:0b:50:e8:c0:9e:93:8a:3b:c2:36:cf:
         45:ff:5d:03:ba:33:26:1d:99:0f:9a:22:88:48:5f:56:21:48:
         fa:e3:5b:ef:80:7c:da:59:1a:f6:d6:8b:83:a7:41:f6:3f:c3:
         20:6f:72:78:7f:2f:18:09:fd:d2:54:8c:84:19:0d:b4:57:37:
         6d:7a:50:07:2f:ad:89:17:20:a1:c2:92:5f:18:70:92:c9:88:
         8a:da:54:fd
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUc9B+jVu60gAuu4egDjTrf7h+MEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBFNzI4ODYzN0ZCOEE5NkZCQkI5MzA4QjIxQzlGOThF
MjU0RjhGNDAeFw0yMzEwMDQxMzU1MDFaFw0yNDEwMDQxNDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjU2MzYzMDVFREY4RkRENDk5
N0ZFNkZENjBBNzVCMTZBNDYzRDc4MzdEMTc4RDBDOTQzMEQ0Mjc5OEJFMEJDMDUy
Q0ZFQUQ5NERBQzc0MUU3NDE4ODc1RDdDNDM5NTg4MjgyMkZFRDI0OTg0MUIzMjcx
MjJCNzQ0NTkwQTVCQjMxMjNDRTczMTQ4RDAzNkYxNURGRDQ4QjIxQjU1MkExM0JF
MzExQjE3MzA1MEIwNjUxQ0UwMzFENEVBMTU3MENBQTIzMzM1NDJGRDUzQUIxNTFG
NEE0OTNEQUQ1QkNEMUNFNzY1MDBGOTIzNjUwQUFDMDQxRTg0RjJCOTdFNzc0ODE5
ODM0OTY2MTEzNjgwQTNDMkYyMzJDOUY2NzNCNDFGNEEwMTZERjEwNDM4NDE2QTky
NkEyMjkzODRCOTc4NEQzQTNFNDlEOUQyNzU5MURGQURDQUM2OThGRDY5NkFCRDRE
MkQ0Mjk3RUZBOTBERUE4QzJEODQ4MUYxMDBEQzdFNDBDNzQzQzlGNzk1MjA5NkU3
QTc3MDIwRDJEQkM2OUUyRThBQ0NBRDQ2RkFEMEE4MDc2NDFCMzFENUQ1QUI1Qjgw
NkQ5MTI1QzREQjM3ODEyNDZENDQ0QzY2NjIwNUUyN0YwQUM0NEFCMUU0MTRBRTc2
RURBNjczQjc1QkI0NkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtWNjBe34/dSZf+b9YKdbFqRj14N9F40MlDDUJ5i+C8BSz+rZTax0
HnQYh118Q5WIKCL+0kmEGzJxIrdEWQpbsxI85zFI0DbxXf1IshtVKhO+MRsXMFCw
ZRzgMdTqFXDKojM1Qv1TqxUfSkk9rVvNHOdlAPkjZQqsBB6E8rl+d0gZg0lmETaA
o8LyMsn2c7QfSgFt8QQ4QWqSaiKThLl4TTo+SdnSdZHfrcrGmP1par1NLUKX76kN
6owthIHxANx+QMdDyfeVIJbnp3Ag0tvGni6KzK1G+tCoB2QbMdXVq1uAbZElxNs3
gSRtRExmYgXifwrESrHkFK527aZzt1u0bQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOcrifmY4BsQHmrJjlyUJOnJJB5AMB8GA1UdIwQYMBaAFEDnKIY3+4qW+7uTCLIc
n5jiVPj0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNyY2c0cTExRTdXQVFL
cVRyTWVBOFFrYlc5bU5MdTdad3h6dmlDakxuZkZ2LzAvNDBFNzI4ODYzN0ZCOEE5
NkZCQkI5MzA4QjIxQzlGOThFMjU0RjhGNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80MEU3Mjg4NjM3RkI4QTk2RkJCQjkzMDhCMjFDOUY5OEUyNTRG
OEY0LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zcmNnNHExMUU3V0FRS3FUck1l
QThRa2JXOW1OTHU3Wnd4enZpQ2pMbmZGdi8wLzMyMzAzMDJlMzIzNDMwMmUzMjMy
MzQyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM4MzIzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF
yPDgMA0GCSqGSIb3DQEBCwUAA4IBAQCJH6XM0It69WPLjPR/scqWKJootzIipVy9
R9xK/+ogX6KqCOQeNQKnZhlLHeqVUqWka8PJvxKvBu9lg+WW9IKzS0iO9qbzru6j
zi/AiyyEmSq1rhmtu/MWt5NN2ZbRUqHzdPWG1f/b0DftGv2gr8K8T3dkYTiwWUZe
AiA+APIAwddbSYRqEBQObNlgGOrjVKYU3BaIt8VG/t/WbG909wX82fEIyua/l5X3
C1DowJ6TijvCNs9F/10DujMmHZkPmiKISF9WIUj641vvgHzaWRr21ouDp0H2P8Mg
b3J4fy8YCf3SVIyEGQ20VzdtelAHL62JFyChwpJfGHCSyYiK2lT9
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org