Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa
File:                     3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa (raw, json)
Hash identifier:          mvngLEIQtc8crQhHKNrWYpiaXXkPcdTcv4vNeOfkXao=
Subject key identifier:   E4:77:CD:C0:C6:14:C5:C7:C5:33:2C:C8:C2:CD:24:FF:A9:A6:A3:5D
Certificate issuer:       /CN=E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD
Certificate serial:       0D0A8ACE2D273DB997EA55CC167CCCF92F417DF2
Authority key identifier: E1:2A:4D:AF:B4:E8:BE:DC:6B:15:AD:55:AA:C7:A0:38:A4:28:75:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa
Signing time:             Thu 24 Aug 2023 19:00:00 +0000
ROA not before:           Thu 24 Aug 2023 18:55:00 +0000
ROA not after:            Thu 22 Aug 2024 19:00:00 +0000
asID:                     271285
IP address blocks:        200.80.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0a:8a:ce:2d:27:3d:b9:97:ea:55:cc:16:7c:cc:f9:2f:41:7d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD
        Validity
            Not Before: Aug 24 18:55:00 2023 GMT
            Not After : Aug 22 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6a:be:10:e0:58:7e:98:c3:c2:f6:30:00:3a:
                    b6:45:a8:ff:03:95:68:7d:22:b1:f4:5b:b4:13:b5:
                    88:78:09:56:e7:ea:7b:a1:79:a6:c9:2b:7d:51:f6:
                    c8:13:b7:fa:a6:74:56:6a:eb:0a:2f:1b:1d:57:03:
                    aa:20:f0:0d:bd:80:74:63:7d:88:af:0b:06:17:d5:
                    99:ce:d0:26:d6:52:84:75:38:38:24:18:95:c6:63:
                    39:c8:8f:64:6e:9a:27:60:8a:ac:68:7f:06:3d:b6:
                    0d:03:26:03:62:23:b2:bc:70:fd:47:1f:49:8f:0b:
                    5f:d4:da:fb:df:8e:58:77:cc:08:eb:c9:ed:e5:83:
                    1e:7e:ae:61:2d:ae:cb:77:cd:0d:4e:e9:9c:56:79:
                    f5:9f:d5:cc:b4:42:1f:2a:fd:44:56:94:b8:ab:93:
                    4e:b9:55:fd:c2:f0:6e:38:3c:38:50:3c:4d:68:06:
                    7b:7f:4b:34:b5:5e:bc:23:a6:cf:c9:ea:47:7b:63:
                    e9:0b:8c:17:de:fc:ae:8a:ec:85:15:41:88:8a:31:
                    5d:8f:35:7d:48:59:09:2b:c7:59:5d:55:6a:90:7a:
                    14:28:8e:aa:e2:f4:bf:f3:31:e7:45:de:a5:47:a4:
                    0c:1d:f8:03:0f:1d:4c:d6:41:94:43:31:d3:55:2c:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:77:CD:C0:C6:14:C5:C7:C5:33:2C:C8:C2:CD:24:FF:A9:A6:A3:5D
            X509v3 Authority Key Identifier:
                keyid:E1:2A:4D:AF:B4:E8:BE:DC:6B:15:AD:55:AA:C7:A0:38:A4:28:75:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:b6:75:96:5e:3e:9a:ed:27:59:e1:c8:84:0f:03:2c:f6:d1:
         e7:51:e8:da:c2:f1:6a:f2:88:97:4a:c6:b3:53:1b:1b:22:bc:
         a1:c9:46:85:41:8e:04:86:c3:f5:c8:32:8a:cd:73:7e:07:9e:
         34:2b:1a:f4:cc:f9:47:61:83:fb:ce:af:89:17:a8:5d:fa:53:
         82:8c:bc:10:08:31:a6:65:6a:0e:e2:62:66:1a:77:36:92:4c:
         38:37:d5:23:e7:55:eb:d4:78:1f:f7:25:68:cf:7e:08:77:ec:
         92:af:9e:87:c4:d2:1f:22:1d:b2:fc:99:96:68:bb:e8:8f:1a:
         56:2a:02:20:54:ba:5c:4e:57:a7:08:ee:5e:c5:fd:47:3a:42:
         03:c5:67:40:fb:8d:71:6a:df:20:3d:51:4e:a8:ca:f0:21:6c:
         c4:d0:4d:98:e4:96:76:06:36:59:e0:68:73:45:c7:e8:3a:81:
         03:30:4d:b6:e7:b7:b8:76:6c:ef:c4:a7:ec:f2:cd:3c:1b:89:
         a9:4c:95:5e:5a:1c:b3:04:96:13:9d:42:67:8c:ed:73:60:84:
         ee:36:fe:c3:42:95:c5:33:08:ba:0b:c2:ad:32:cf:40:ad:08:
         23:72:87:f1:a3:4a:bf:2d:be:7e:f4:39:81:19:ff:51:fd:6a:
         fa:23:93:0b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDQqKzi0nPbmX6lXMFnzM+S9BffIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEyQTREQUZCNEU4QkVEQzZCMTVBRDU1QUFDN0EwMzhB
NDI4NzVDRDAeFw0yMzA4MjQxODU1MDBaFw0yNDA4MjIxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUM2QUJFMTBFMDU4N0U5OEMz
QzJGNjMwMDAzQUI2NDVBOEZGMDM5NTY4N0QyMkIxRjQ1QkI0MTNCNTg4NzgwOTU2
RTdFQTdCQTE3OUE2QzkyQjdENTFGNkM4MTNCN0ZBQTY3NDU2NkFFQjBBMkYxQjFE
NTcwM0FBMjBGMDBEQkQ4MDc0NjM3RDg4QUYwQjA2MTdENTk5Q0VEMDI2RDY1Mjg0
NzUzODM4MjQxODk1QzY2MzM5Qzg4RjY0NkU5QTI3NjA4QUFDNjg3RjA2M0RCNjBE
MDMyNjAzNjIyM0IyQkM3MEZENDcxRjQ5OEYwQjVGRDREQUZCREY4RTU4NzdDQzA4
RUJDOUVERTU4MzFFN0VBRTYxMkRBRUNCNzdDRDBENEVFOTlDNTY3OUY1OUZENUND
QjQ0MjFGMkFGRDQ0NTY5NEI4QUI5MzRFQjk1NUZEQzJGMDZFMzgzQzM4NTAzQzRE
NjgwNjdCN0Y0QjM0QjU1RUJDMjNBNkNGQzlFQTQ3N0I2M0U5MEI4QzE3REVGQ0FF
OEFFQzg1MTU0MTg4OEEzMTVEOEYzNTdENDg1OTA5MkJDNzU5NUQ1NTZBOTA3QTE0
Mjg4RUFBRTJGNEJGRjMzMUU3NDVERUE1NDdBNDBDMURGODAzMEYxRDRDRDY0MTk0
NDMzMUQzNTUyQzM0RDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7Gq+EOBYfpjDwvYwADq2Raj/A5VofSKx9Fu0E7WIeAlW5+p7oXmm
ySt9UfbIE7f6pnRWausKLxsdVwOqIPANvYB0Y32IrwsGF9WZztAm1lKEdTg4JBiV
xmM5yI9kbponYIqsaH8GPbYNAyYDYiOyvHD9Rx9Jjwtf1Nr7345Yd8wI68nt5YMe
fq5hLa7Ld80NTumcVnn1n9XMtEIfKv1EVpS4q5NOuVX9wvBuODw4UDxNaAZ7f0s0
tV68I6bPyepHe2PpC4wX3vyuiuyFFUGIijFdjzV9SFkJK8dZXVVqkHoUKI6q4vS/
8zHnRd6lR6QMHfgDDx1M1kGUQzHTVSw01QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOR3zcDGFMXHxTMsyMLNJP+ppqNdMB8GA1UdIwQYMBaAFOEqTa+06L7caxWtVarH
oDikKHXNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVyUG54WktZaFJxTGl4
eTZIYUN3MVBuRm5OQ0hIRHZxYXM3N056YlJhakpTLzAvRTEyQTREQUZCNEU4QkVE
QzZCMTVBRDU1QUFDN0EwMzhBNDI4NzVDRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMTJBNERBRkI0RThCRURDNkIxNUFENTVBQUM3QTAzOEE0Mjg3
NUNELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81clBueFpLWWhScUxpeHk2SGFD
dzFQbkZuTkNISER2cWFzNzdOemJSYWpKUy8wLzMyMzAzMDJlMzgzMDJlMzEzMDM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzIzODM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
yFBoMA0GCSqGSIb3DQEBCwUAA4IBAQA/tnWWXj6a7SdZ4ciEDwMs9tHnUejawvFq
8oiXSsazUxsbIryhyUaFQY4EhsP1yDKKzXN+B540Kxr0zPlHYYP7zq+JF6hd+lOC
jLwQCDGmZWoO4mJmGnc2kkw4N9Uj51Xr1Hgf9yVoz34Id+ySr56HxNIfIh2y/JmW
aLvojxpWKgIgVLpcTlenCO5exf1HOkIDxWdA+41xat8gPVFOqMrwIWzE0E2Y5JZ2
BjZZ4GhzRcfoOoEDME2257e4dmzvxKfs8s08G4mpTJVeWhyzBJYTnUJnjO1zYITu
Nv7DQpXFMwi6C8KtMs9ArQgjcofxo0q/Lb5+9DmBGf9R/Wr6I5ML
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org