Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa
File:                     3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa (raw, json)
Hash identifier:          Iw1BH/T/1+4Al3cDrTUOEqzzIUrIHYPPFjyRYljN3L0=
Subject key identifier:   86:6D:34:B6:F5:6D:4B:11:E7:1A:E8:FC:7B:30:7F:90:45:31:79:E4
Certificate issuer:       /CN=36443F5CDDD51B3F9CAFEB77478A46B1D280915C
Certificate serial:       73B30FCCB441F4797FBD568927CB05326FFA492E
Authority key identifier: 36:44:3F:5C:DD:D5:1B:3F:9C:AF:EB:77:47:8A:46:B1:D2:80:91:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa
Signing time:             Thu 04 Apr 2024 21:30:13 +0000
ROA not before:           Thu 04 Apr 2024 21:25:13 +0000
ROA not after:            Thu 03 Apr 2025 21:30:13 +0000
asID:                     270756
IP address blocks:        200.39.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b3:0f:cc:b4:41:f4:79:7f:bd:56:89:27:cb:05:32:6f:fa:49:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36443F5CDDD51B3F9CAFEB77478A46B1D280915C
        Validity
            Not Before: Apr  4 21:25:13 2024 GMT
            Not After : Apr  3 21:30:13 2025 GMT
        Subject: CN=866D34B6F56D4B11E71AE8FC7B307F90453179E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6b:24:57:ef:df:3f:4f:24:9c:e6:7b:92:c4:
                    dd:99:7e:f4:1e:4d:28:39:71:75:e6:df:13:52:8a:
                    8e:ae:4a:ba:47:7e:c6:f7:ab:9b:ac:0c:f7:26:83:
                    07:09:5c:eb:ee:50:cb:88:f6:75:75:95:0e:c4:2b:
                    af:26:85:4b:f3:e4:03:c9:e9:c0:48:ba:12:0b:ad:
                    37:4d:fb:12:7f:f4:ae:4b:4f:9d:8f:2a:a6:bf:0c:
                    5b:7b:51:9f:83:11:84:39:79:4f:a2:5c:0d:37:d6:
                    b5:14:4e:06:8f:61:41:d6:31:ca:6d:da:0f:95:99:
                    20:eb:84:89:50:d4:82:f2:bd:d8:6d:00:74:31:be:
                    2c:df:b9:0d:46:f2:ca:71:4f:9d:95:7f:37:03:e7:
                    f7:75:d6:d4:db:dc:dd:85:0a:9e:4e:07:d0:7e:3b:
                    52:8e:1a:80:83:45:3f:df:90:1c:a0:a7:0e:99:a0:
                    48:2d:fd:7b:62:b1:71:cf:6d:cf:09:40:c4:bf:6d:
                    cd:18:67:1c:2a:d8:b5:86:c3:62:2e:e0:4f:a5:25:
                    fa:af:4f:98:c0:e1:ca:2f:40:db:43:b3:e9:dd:f3:
                    7f:ec:71:2f:be:0b:2c:d8:6d:61:d8:2d:3d:82:d8:
                    07:39:bd:9c:6f:0e:fa:81:ea:dc:d9:3b:41:d4:3d:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6D:34:B6:F5:6D:4B:11:E7:1A:E8:FC:7B:30:7F:90:45:31:79:E4
            X509v3 Authority Key Identifier:
                keyid:36:44:3F:5C:DD:D5:1B:3F:9C:AF:EB:77:47:8A:46:B1:D2:80:91:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:ff:0e:18:23:b5:0d:74:5a:1b:d9:f9:4b:70:0d:e0:1e:28:
         09:75:e5:1d:f9:0b:37:ae:45:ca:11:82:f0:0b:4d:38:94:07:
         30:d5:4f:66:62:41:22:3e:b0:38:0b:49:cf:ef:7a:ec:7f:2b:
         db:3e:72:51:b7:b4:c3:be:9b:a6:bd:f1:9d:29:78:45:94:fc:
         9c:e4:2b:b4:c9:be:c5:80:18:57:e3:7e:35:c8:ca:2c:be:fa:
         ac:b1:cb:87:90:76:11:28:b9:60:40:fc:35:55:55:04:80:5c:
         a7:4a:60:03:62:dd:7c:2b:d5:23:ed:2f:37:3c:28:e1:4d:b7:
         2c:5b:fd:e1:4f:18:70:6e:84:c6:14:8f:36:7a:ed:f8:0e:1a:
         77:00:dc:fa:c5:b3:59:d2:18:e3:a2:c6:ff:e3:bc:cf:5e:0b:
         c3:19:0d:59:2c:f5:84:80:5d:13:f8:5c:0f:26:7a:18:a5:ad:
         93:33:d9:4e:53:f3:7a:fb:b6:61:f4:a0:d4:80:c0:10:d5:f1:
         67:a4:b1:56:39:55:24:a9:c8:10:17:98:de:36:b6:68:03:da:
         d9:09:7f:87:17:25:52:95:69:0c:b1:26:7b:a6:79:7c:48:e6:
         2c:08:8b:26:f2:10:31:34:db:cc:8f:6a:8d:73:51:77:f8:5e:
         04:8d:a9:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc7MPzLRB9Hl/vVaJJ8sFMm/6SS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY0NDNGNUNEREQ1MUIzRjlDQUZFQjc3NDc4QTQ2QjFE
MjgwOTE1QzAeFw0yNDA0MDQyMTI1MTNaFw0yNTA0MDMyMTMwMTNaMDMxMTAvBgNV
BAMTKDg2NkQzNEI2RjU2RDRCMTFFNzFBRThGQzdCMzA3RjkwNDUzMTc5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaayRX798/TySc5nuSxN2ZfvQe
TSg5cXXm3xNSio6uSrpHfsb3q5usDPcmgwcJXOvuUMuI9nV1lQ7EK68mhUvz5APJ
6cBIuhILrTdN+xJ/9K5LT52PKqa/DFt7UZ+DEYQ5eU+iXA031rUUTgaPYUHWMcpt
2g+VmSDrhIlQ1ILyvdhtAHQxvizfuQ1G8spxT52VfzcD5/d11tTb3N2FCp5OB9B+
O1KOGoCDRT/fkBygpw6ZoEgt/XtisXHPbc8JQMS/bc0YZxwq2LWGw2Iu4E+lJfqv
T5jA4covQNtDs+nd83/scS++CyzYbWHYLT2C2Ac5vZxvDvqB6tzZO0HUPa23AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhm00tvVtSxHnGuj8ezB/kEUxeeQwHwYDVR0j
BBgwFoAUNkQ/XN3VGz+cr+t3R4pGsdKAkVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRXVHFHMlBXaEJKcEhvUXd2N1RUYmNla1hHRGJLSFJ2TmhOUGk3d2Zi
MjYvMS8zNjQ0M0Y1Q0RERDUxQjNGOUNBRkVCNzc0NzhBNDZCMUQyODA5MTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2NDQzRjVDRERENTFCM0Y5
Q0FGRUI3NzQ3OEE0NkIxRDI4MDkxNUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUV1RxRzJQV2hCSnBIb1F3djdUVGJjZWtYR0RiS0hSdk5oTlBpN3dmYjI2LzEv
MzIzMDMwMmUzMzM5MmUzMTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIJ4AwDQYJKoZIhvcNAQELBQADggEBAMj/Dhgj
tQ10WhvZ+UtwDeAeKAl15R35CzeuRcoRgvALTTiUBzDVT2ZiQSI+sDgLSc/veux/
K9s+clG3tMO+m6a98Z0peEWU/JzkK7TJvsWAGFfjfjXIyiy++qyxy4eQdhEouWBA
/DVVVQSAXKdKYANi3Xwr1SPtLzc8KOFNtyxb/eFPGHBuhMYUjzZ67fgOGncA3PrF
s1nSGOOixv/jvM9eC8MZDVks9YSAXRP4XA8mehilrZMz2U5T83r7tmH0oNSAwBDV
8WeksVY5VSSpyBAXmN42tmgD2tkJf4cXJVKVaQyxJnumeXxI5iwIiybyEDE028yP
ao1zUXf4XgSNqbw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org