Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dJrCpv4aXMu6ptpv5dCigQ8q5UCn6VHyhisj8sZTeyM/0/3230302e3231352e3233382e302f32342d3234203d3e20323731333230.roa
File:                     3230302e3231352e3233382e302f32342d3234203d3e20323731333230.roa (raw, json)
Hash identifier:          BB5z4YP2UC8fqreOCbo/Yii1odblVpIKnMliVxs7G+E=
Subject key identifier:   D6:05:4B:F2:0F:64:0F:1D:08:75:20:82:10:42:69:EF:CF:4C:AC:7F
Certificate issuer:       /CN=80293C28203F073B3ADDD7E0BC421A5C76E1CEEE
Certificate serial:       30DA8931867244D08A96876CBD3FF563B4805A55
Authority key identifier: 80:29:3C:28:20:3F:07:3B:3A:DD:D7:E0:BC:42:1A:5C:76:E1:CE:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80293C28203F073B3ADDD7E0BC421A5C76E1CEEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dJrCpv4aXMu6ptpv5dCigQ8q5UCn6VHyhisj8sZTeyM/0/3230302e3231352e3233382e302f32342d3234203d3e20323731333230.roa
Signing time:             Fri 02 Sep 2022 00:12:57 +0000
ROA not before:           Fri 02 Sep 2022 00:07:57 +0000
ROA not after:            Fri 01 Sep 2023 00:12:57 +0000
asID:                     271320
IP address blocks:        200.215.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:da:89:31:86:72:44:d0:8a:96:87:6c:bd:3f:f5:63:b4:80:5a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80293C28203F073B3ADDD7E0BC421A5C76E1CEEE
        Validity
            Not Before: Sep  2 00:07:57 2022 GMT
            Not After : Sep  1 00:12:57 2023 GMT
        Subject: CN=D6054BF20F640F1D08752082104269EFCF4CAC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:c2:60:0c:44:59:f2:78:a3:03:67:61:fd:
                    27:ed:49:66:ea:96:1b:65:08:ea:b0:a0:a2:a6:03:
                    e6:ad:82:32:6d:5e:90:05:c6:c9:14:c6:c2:5c:c3:
                    69:3b:79:a9:dd:d6:fa:df:ef:b7:a0:5e:c1:f4:de:
                    5f:93:1c:29:c9:d6:b0:78:04:01:75:7c:26:45:03:
                    9f:c9:d7:cf:37:3f:32:43:f0:11:92:d2:46:08:6b:
                    84:4e:50:27:5a:4f:8b:9a:c5:04:ba:dd:1b:8a:10:
                    61:15:6a:29:b0:f0:0f:64:50:cc:b3:2e:85:ea:91:
                    85:86:7f:fb:e9:13:2b:be:7a:55:9e:7c:54:f8:b1:
                    f8:03:0c:1b:ca:88:24:c1:83:37:15:a4:eb:93:c7:
                    65:73:18:5b:9d:25:fd:92:ba:9e:93:fc:82:3b:a9:
                    f9:4a:b9:72:cb:7e:b0:80:a3:a7:f7:ed:32:45:ef:
                    e5:65:2e:e7:ae:52:12:d3:38:00:e1:5b:d5:92:f5:
                    95:22:ff:8b:44:44:9f:03:8c:6e:14:f4:ab:37:19:
                    91:e4:7d:0c:16:f6:6c:a5:f1:9c:04:f2:42:4c:f0:
                    ca:aa:c5:8e:83:1e:d7:23:56:cf:21:87:1d:9f:ed:
                    2c:39:d8:60:f2:a4:32:11:cc:70:ac:e3:38:90:2d:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:05:4B:F2:0F:64:0F:1D:08:75:20:82:10:42:69:EF:CF:4C:AC:7F
            X509v3 Authority Key Identifier:
                keyid:80:29:3C:28:20:3F:07:3B:3A:DD:D7:E0:BC:42:1A:5C:76:E1:CE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dJrCpv4aXMu6ptpv5dCigQ8q5UCn6VHyhisj8sZTeyM/0/80293C28203F073B3ADDD7E0BC421A5C76E1CEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80293C28203F073B3ADDD7E0BC421A5C76E1CEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dJrCpv4aXMu6ptpv5dCigQ8q5UCn6VHyhisj8sZTeyM/0/3230302e3231352e3233382e302f32342d3234203d3e20323731333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:7e:b7:36:8d:9b:3f:5d:bc:7a:f2:61:c7:68:15:10:88:
         ff:71:6b:13:9c:ae:4a:ba:59:de:58:f7:63:f3:5a:5f:4b:bd:
         a7:6f:1d:5a:16:9c:cb:f2:7c:82:86:0a:ac:53:3d:6d:2f:09:
         12:63:2e:a8:45:d3:d7:92:7b:a4:46:ec:67:70:e9:cd:e1:74:
         33:99:e9:bf:43:df:97:45:8d:52:7a:57:2c:0f:4a:a2:3f:65:
         22:23:b8:79:30:58:bb:e4:7f:62:63:f1:fd:f5:8b:45:1e:39:
         f8:3d:a4:60:43:5e:17:5b:e1:a2:46:fc:63:46:cc:35:40:fa:
         bc:0a:50:19:77:31:14:95:0a:13:aa:cf:cf:46:6a:0e:6b:6a:
         4d:75:7c:d7:4d:14:7f:e5:66:c9:fc:d2:9e:48:87:93:2b:ba:
         47:a7:47:94:f1:08:a5:9c:d9:a4:cf:58:a7:41:de:da:f5:eb:
         18:91:d4:62:20:c9:54:31:34:99:9d:77:88:e1:fe:76:9b:67:
         3f:dd:98:cc:0c:c5:8f:37:f3:cf:8d:bd:eb:53:51:85:27:15:
         b7:d7:6e:72:71:a8:2a:ef:49:61:89:56:c1:3b:a2:d1:13:3d:
         0b:ad:ea:5a:74:5f:d3:02:15:39:a8:26:43:a7:fe:68:04:45:
         72:22:c8:43
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMNqJMYZyRNCKlodsvT/1Y7SAWlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAyOTNDMjgyMDNGMDczQjNBREREN0UwQkM0MjFBNUM3
NkUxQ0VFRTAeFw0yMjA5MDIwMDA3NTdaFw0yMzA5MDEwMDEyNTdaMDMxMTAvBgNV
BAMTKEQ2MDU0QkYyMEY2NDBGMUQwODc1MjA4MjEwNDI2OUVGQ0Y0Q0FDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClu8JgDERZ8nijA2dh/SftSWbq
lhtlCOqwoKKmA+atgjJtXpAFxskUxsJcw2k7eand1vrf77egXsH03l+THCnJ1rB4
BAF1fCZFA5/J1883PzJD8BGS0kYIa4ROUCdaT4uaxQS63RuKEGEVaimw8A9kUMyz
LoXqkYWGf/vpEyu+elWefFT4sfgDDBvKiCTBgzcVpOuTx2VzGFudJf2Sup6T/II7
qflKuXLLfrCAo6f37TJF7+VlLueuUhLTOADhW9WS9ZUi/4tERJ8DjG4U9Ks3GZHk
fQwW9myl8ZwE8kJM8MqqxY6DHtcjVs8hhx2f7Sw52GDypDIRzHCs4ziQLQjfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1gVL8g9kDx0IdSCCEEJp789MrH8wHwYDVR0j
BBgwFoAUgCk8KCA/Bzs63dfgvEIaXHbhzu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRKckNwdjRhWE11NnB0cHY1ZENpZ1E4cTVVQ242Vkh5aGlzajhzWlRl
eU0vMC84MDI5M0MyODIwM0YwNzNCM0FEREQ3RTBCQzQyMUE1Qzc2RTFDRUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgwMjkzQzI4MjAzRjA3M0Iz
QURERDdFMEJDNDIxQTVDNzZFMUNFRUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkSnJDcHY0YVhNdTZwdHB2NWRDaWdROHE1VUNuNlZIeWhpc2o4c1pUZXlNLzAv
MzIzMDMwMmUzMjMxMzUyZTMyMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjX7jANBgkqhkiG9w0BAQsFAAOCAQEAhxx+
tzaNmz9dvHryYcdoFRCI/3FrE5yuSrpZ3lj3Y/NaX0u9p28dWhacy/J8goYKrFM9
bS8JEmMuqEXT15J7pEbsZ3DpzeF0M5npv0Pfl0WNUnpXLA9Koj9lIiO4eTBYu+R/
YmPx/fWLRR45+D2kYENeF1vhokb8Y0bMNUD6vApQGXcxFJUKE6rPz0ZqDmtqTXV8
100Uf+VmyfzSnkiHkyu6R6dHlPEIpZzZpM9Yp0He2vXrGJHUYiDJVDE0mZ13iOH+
dptnP92YzAzFjzfzz42961NRhScVt9ducnGoKu9JYYlWwTui0RM9C63qWnRf0wIV
OagmQ6f+aARFciLIQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org