Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3136372e302f32342d3234203d3e20323635333033.roa
File:                     3230302e3135302e3136372e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          9Mk43GT2l+i54LSdCRpgE0/1KhijsHdd2TDyJshZ3jM=
Subject key identifier:   73:B3:91:51:B2:59:B6:08:C8:2E:FE:B3:28:E4:ED:7F:C3:F1:A9:4C
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       6FC8AFFE01C13F88E431249F5DFC7C60CBD4755D
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3136372e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 13:59:20 +0000
ROA not before:           Mon 08 Apr 2024 13:54:20 +0000
ROA not after:            Mon 07 Apr 2025 13:59:20 +0000
asID:                     265303
IP address blocks:        200.150.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:af:fe:01:c1:3f:88:e4:31:24:9f:5d:fc:7c:60:cb:d4:75:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:54:20 2024 GMT
            Not After : Apr  7 13:59:20 2025 GMT
        Subject: CN=73B39151B259B608C82EFEB328E4ED7FC3F1A94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e3:30:ee:e4:0b:64:49:78:5f:f0:be:6a:d1:
                    6c:35:e5:c3:6c:88:8b:9d:bf:e5:32:21:41:a9:e0:
                    25:d1:72:3a:21:c3:83:cc:ff:25:77:4d:a8:3d:f5:
                    bc:99:91:34:f9:de:31:ef:9f:3f:42:f6:2f:0c:5d:
                    d2:39:8a:2b:53:6e:b3:14:20:ac:59:26:cd:03:64:
                    1e:f3:03:11:6d:cd:f2:70:69:1d:0e:db:6b:df:9a:
                    bb:d8:10:4d:ea:ec:76:fc:31:83:ba:d9:40:74:70:
                    c5:e5:fd:af:d8:4c:30:20:65:e4:17:da:af:b1:2c:
                    a9:d3:0d:5b:97:71:85:9e:94:4f:b1:f5:43:39:7a:
                    32:5c:ef:91:e3:bf:4d:b2:ef:64:b6:72:14:0a:ba:
                    56:74:d4:8d:5c:e4:e4:a7:31:b8:42:40:35:63:34:
                    93:cc:82:2e:d9:ce:fc:9d:01:d6:49:60:05:b0:b1:
                    82:e2:e8:29:45:5b:8c:39:c5:26:58:e9:cc:cb:c3:
                    b8:2c:a7:5f:f2:df:1d:78:4f:df:38:42:24:43:a1:
                    82:d1:4f:a9:d9:3e:fc:49:f8:91:4f:25:b6:cc:bb:
                    8b:f5:12:95:3c:a1:33:98:ce:72:88:86:c2:64:64:
                    a1:56:7e:60:83:d4:80:a9:a7:1d:36:52:21:4f:7d:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B3:91:51:B2:59:B6:08:C8:2E:FE:B3:28:E4:ED:7F:C3:F1:A9:4C
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3136372e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:dd:80:d0:5c:f4:b1:f2:ec:69:f0:f7:be:ea:ec:85:44:
         69:54:cc:f2:57:f4:f5:24:a9:44:d2:e0:4d:40:37:2f:a4:ac:
         29:a9:9f:99:9e:91:e3:b4:7a:e4:63:f9:d4:15:06:a9:fd:ee:
         e4:3d:99:c1:ff:95:a3:0f:38:6a:3b:6c:7a:13:77:91:6d:49:
         e9:e4:2b:22:c2:f2:dc:2a:8e:0c:6e:aa:aa:86:2a:1d:ec:04:
         0a:ce:da:ab:e3:e9:2f:eb:b6:ab:6a:0a:71:a7:81:be:f0:b7:
         33:72:66:7b:9b:bc:97:6e:0a:c3:bb:44:63:06:d4:5d:e5:37:
         c4:bb:e2:f5:32:25:2a:2c:fe:0b:33:07:fd:89:f5:3d:b2:05:
         10:c5:c4:cb:b2:a0:56:d6:d0:17:c2:c6:cc:a3:c0:58:cb:5e:
         05:d3:c1:b3:f0:72:a5:60:b5:97:54:b6:bf:15:68:96:08:1b:
         17:cd:db:0c:7c:91:01:11:48:6b:91:34:8c:33:93:50:68:fd:
         d9:e9:68:dd:33:ff:2a:3f:8d:1d:4b:00:2f:94:62:a8:fd:a4:
         4c:2a:65:5b:c8:11:a6:48:08:f3:c5:eb:c6:ed:45:b8:36:a1:
         e2:aa:0f:3a:4e:04:42:e9:b3:51:55:a3:f4:15:04:e8:46:66:
         10:58:74:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUb8iv/gHBP4jkMSSfXfx8YMvUdV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDA0MDgxMzU0MjBaFw0yNTA0MDcxMzU5MjBaMDMxMTAvBgNV
BAMTKDczQjM5MTUxQjI1OUI2MDhDODJFRkVCMzI4RTRFRDdGQzNGMUE5NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4zDu5AtkSXhf8L5q0Ww15cNs
iIudv+UyIUGp4CXRcjohw4PM/yV3Tag99byZkTT53jHvnz9C9i8MXdI5iitTbrMU
IKxZJs0DZB7zAxFtzfJwaR0O22vfmrvYEE3q7Hb8MYO62UB0cMXl/a/YTDAgZeQX
2q+xLKnTDVuXcYWelE+x9UM5ejJc75Hjv02y72S2chQKulZ01I1c5OSnMbhCQDVj
NJPMgi7ZzvydAdZJYAWwsYLi6ClFW4w5xSZY6czLw7gsp1/y3x14T984QiRDoYLR
T6nZPvxJ+JFPJbbMu4v1EpU8oTOYznKIhsJkZKFWfmCD1ICppx02UiFPfayLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUc7ORUbJZtgjILv6zKOTtf8PxqUwwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3M3FZUFNLMkRXV2pDQmFtV2hOQzdyZ3JxaENRUEFqZEdIU2RDWm45VjZvLzAv
MzIzMDMwMmUzMTM1MzAyZTMxMzYzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMiWpzANBgkqhkiG9w0BAQsFAAOCAQEAWGrd
gNBc9LHy7Gnw977q7IVEaVTM8lf09SSpRNLgTUA3L6SsKamfmZ6R47R65GP51BUG
qf3u5D2Zwf+Vow84ajtsehN3kW1J6eQrIsLy3CqODG6qqoYqHewECs7aq+PpL+u2
q2oKcaeBvvC3M3Jme5u8l24Kw7tEYwbUXeU3xLvi9TIlKiz+CzMH/Yn1PbIFEMXE
y7KgVtbQF8LGzKPAWMteBdPBs/BypWC1l1S2vxVolggbF83bDHyRARFIa5E0jDOT
UGj92elo3TP/Kj+NHUsAL5RiqP2kTCplW8gRpkgI88Xrxu1FuDah4qoPOk4EQumz
UVWj9BUE6EZmEFh0pA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org