Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32312d3234203d3e20323633323633.roa
File:                     3230302e33332e3132382e302f32312d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          eVWTnI+d00bgqImI4UYuvQfXkYt2qm0zFhfehQICUj8=
Subject key identifier:   21:20:7B:07:BE:01:78:4A:68:EB:ED:59:C8:25:BE:BC:39:F8:57:48
Certificate issuer:       /CN=11CF1DAA865E94BF55A7973E9151246D838C3946
Certificate serial:       552A8798368ACA6BB921C8B90375BC56E5498EA3
Authority key identifier: 11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CF1DAA865E94BF55A7973E9151246D838C3946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32312d3234203d3e20323633323633.roa
Signing time:             Tue 02 Aug 2022 14:13:15 +0000
ROA not before:           Tue 02 Aug 2022 14:08:15 +0000
ROA not after:            Tue 01 Aug 2023 14:13:15 +0000
asID:                     263263
IP address blocks:        200.33.128.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2a:87:98:36:8a:ca:6b:b9:21:c8:b9:03:75:bc:56:e5:49:8e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CF1DAA865E94BF55A7973E9151246D838C3946
        Validity
            Not Before: Aug  2 14:08:15 2022 GMT
            Not After : Aug  1 14:13:15 2023 GMT
        Subject: CN=21207B07BE01784A68EBED59C825BEBC39F85748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:a6:e2:f9:43:73:b5:b9:e7:25:b3:3d:c6:
                    6c:12:b0:8e:bc:b7:e9:48:09:b3:46:1f:d5:e9:9e:
                    ec:aa:2b:fa:75:ac:93:64:15:42:7f:a7:46:a8:b2:
                    12:8f:e1:55:26:c1:21:19:ba:30:17:4c:74:fb:97:
                    f3:a6:01:f2:fa:c9:9d:43:da:0f:f4:84:e3:9a:ca:
                    69:92:45:9a:cd:0b:c1:a3:bd:5c:f3:1b:cc:a4:26:
                    84:f3:ec:7d:40:df:9c:0d:f7:e8:c7:05:07:c3:10:
                    ad:04:a9:74:bd:c9:45:3b:d7:bb:44:8c:c7:f0:39:
                    76:1a:5f:d3:e7:0e:06:55:68:cf:11:0b:0a:91:74:
                    a0:dc:27:65:69:26:97:6b:b7:83:fc:06:f6:2f:99:
                    ad:0d:49:7f:4c:5a:18:81:30:54:8a:9b:c8:14:5f:
                    fd:b0:35:9f:74:f5:7f:c5:75:d5:dd:db:c6:e8:c1:
                    b9:6b:b0:65:f8:c1:f4:4b:fa:67:ca:be:bc:9f:03:
                    f0:47:2c:23:df:d4:b9:c9:a8:e9:26:b0:df:2f:e0:
                    9a:d0:a7:e1:28:74:81:3d:58:5d:76:0b:bb:74:f9:
                    0c:26:23:c1:5d:a5:fd:58:c7:b9:ac:26:58:07:c5:
                    a9:d9:c6:44:35:3b:14:bb:85:b4:7d:6b:85:f8:17:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:20:7B:07:BE:01:78:4A:68:EB:ED:59:C8:25:BE:BC:39:F8:57:48
            X509v3 Authority Key Identifier:
                keyid:11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/11CF1DAA865E94BF55A7973E9151246D838C3946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11CF1DAA865E94BF55A7973E9151246D838C3946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32312d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:74:8b:4c:f4:62:14:38:ce:9a:72:b4:d3:65:ae:e6:27:b6:
         fb:38:ea:72:77:4f:a2:72:83:08:0f:03:74:c3:43:0c:d1:38:
         22:eb:c0:83:e6:06:91:01:4e:92:32:5d:1a:51:ea:08:01:51:
         10:76:f8:e8:80:09:d4:1f:99:b3:17:93:17:b9:1b:b6:47:e5:
         dc:17:04:af:5e:25:dd:3b:d9:8b:ec:5e:ff:80:69:dc:71:8c:
         ab:a0:1b:b6:53:c0:03:7a:65:fd:41:1e:95:48:b3:60:97:fb:
         ab:04:cb:24:7a:a2:f6:12:30:43:03:5e:a6:05:2b:d2:bb:08:
         f4:4c:43:2a:e7:db:99:21:ed:ac:35:a7:29:6a:2d:59:ec:ca:
         3c:46:35:94:7f:f1:5a:39:a6:76:5c:ae:51:8f:ec:4a:fd:3f:
         d7:ec:7e:19:04:68:fa:08:e3:9b:45:3b:36:b5:9c:5f:85:c6:
         93:bb:59:27:c9:b5:7c:96:9f:7e:8b:57:3f:a8:c0:c9:a5:1f:
         bc:e3:4d:68:d1:4f:33:eb:ae:86:4f:84:96:4e:8f:e3:8b:7f:
         1c:82:36:08:58:b8:7a:aa:2b:47:b7:cd:75:29:c6:e8:14:ab:
         17:fd:b8:2b:35:49:02:a4:43:c7:e9:6e:b2:17:cd:d8:6a:7a:
         a8:6c:70:57
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVSqHmDaKymu5Ici5A3W8VuVJjqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDRjFEQUE4NjVFOTRCRjU1QTc5NzNFOTE1MTI0NkQ4
MzhDMzk0NjAeFw0yMjA4MDIxNDA4MTVaFw0yMzA4MDExNDEzMTVaMDMxMTAvBgNV
BAMTKDIxMjA3QjA3QkUwMTc4NEE2OEVCRUQ1OUM4MjVCRUJDMzlGODU3NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfKbi+UNztbnnJbM9xmwSsI68
t+lICbNGH9XpnuyqK/p1rJNkFUJ/p0aoshKP4VUmwSEZujAXTHT7l/OmAfL6yZ1D
2g/0hOOaymmSRZrNC8GjvVzzG8ykJoTz7H1A35wN9+jHBQfDEK0EqXS9yUU717tE
jMfwOXYaX9PnDgZVaM8RCwqRdKDcJ2VpJpdrt4P8BvYvma0NSX9MWhiBMFSKm8gU
X/2wNZ909X/FddXd28bowblrsGX4wfRL+mfKvryfA/BHLCPf1LnJqOkmsN8v4JrQ
p+EodIE9WF12C7t0+QwmI8Fdpf1Yx7msJlgHxanZxkQ1OxS7hbR9a4X4F9MFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUISB7B74BeEpo6+1ZyCW+vDn4V0gwHwYDVR0j
BBgwFoAUEc8dqoZelL9Vp5c+kVEkbYOMOUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMC8xMUNGMURBQTg2NUU5NEJGNTVBNzk3M0U5MTUxMjQ2RDgzOEMzOTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExQ0YxREFBODY1RTk0QkY1
NUE3OTczRTkxNTEyNDZEODM4QzM5NDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzAv
MzIzMDMwMmUzMzMzMmUzMTMyMzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPIIYAwDQYJKoZIhvcNAQELBQADggEBAA50i0z0
YhQ4zppytNNlruYntvs46nJ3T6JygwgPA3TDQwzROCLrwIPmBpEBTpIyXRpR6ggB
URB2+OiACdQfmbMXkxe5G7ZH5dwXBK9eJd072YvsXv+AadxxjKugG7ZTwAN6Zf1B
HpVIs2CX+6sEyyR6ovYSMEMDXqYFK9K7CPRMQyrn25kh7aw1pylqLVnsyjxGNZR/
8Vo5pnZcrlGP7Er9P9fsfhkEaPoI45tFOza1nF+FxpO7WSfJtXyWn36LVz+owMml
H7zjTWjRTzPrroZPhJZOj+OLfxyCNghYuHqqK0e3zXUpxugUqxf9uCs1SQKkQ8fp
brIXzdhqeqhscFc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:14 2023 by rpki-client on console-ams.rpki-client.org