Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34322e302f32342d3234203d3e20323733343132.roa
File:                     3230302e3139362e34322e302f32342d3234203d3e20323733343132.roa (raw, json)
Hash identifier:          GKUImWJnI/lpdtQEpQuRVrZemNuf0I3zk9l3u/p9Y9I=
Subject key identifier:   59:04:8C:89:6D:A7:EE:8A:D6:47:B2:A8:98:86:1D:A9:94:B3:FE:12
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       663222601C648AB850304150B82B7CB23C61EE55
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34322e302f32342d3234203d3e20323733343132.roa
Signing time:             Fri 19 Jan 2024 00:20:02 +0000
ROA not before:           Fri 19 Jan 2024 00:15:02 +0000
ROA not after:            Fri 17 Jan 2025 00:20:02 +0000
asID:                     273412
IP address blocks:        200.196.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:32:22:60:1c:64:8a:b8:50:30:41:50:b8:2b:7c:b2:3c:61:ee:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 19 00:15:02 2024 GMT
            Not After : Jan 17 00:20:02 2025 GMT
        Subject: CN=59048C896DA7EE8AD647B2A898861DA994B3FE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:fc:73:72:78:55:99:4b:f1:97:3c:0a:09:
                    52:6d:44:cb:01:34:dd:ff:b3:8d:4a:80:2b:f2:72:
                    60:c3:9a:15:77:a9:ff:db:3d:3d:3f:70:80:9a:8f:
                    ee:fe:f9:9f:9a:0f:76:12:f6:2a:b5:31:a1:ac:60:
                    d4:2f:58:c1:40:f3:94:8b:4c:90:19:93:8a:d7:64:
                    d9:cb:49:54:ba:f9:2d:9a:eb:86:6b:e9:23:91:9f:
                    af:88:da:3d:67:a4:a8:20:c7:7c:35:c9:8b:bb:29:
                    f1:18:1a:52:a4:9e:f7:19:0e:da:47:9b:c1:b4:44:
                    64:f3:69:1c:34:c0:52:ac:f5:02:9c:ad:5c:38:1d:
                    8d:aa:51:f8:96:7b:20:82:2a:ad:50:04:48:b1:e8:
                    10:d0:88:25:66:a4:0e:3d:75:c8:da:1d:be:f9:1f:
                    c3:90:5e:2d:a2:fb:84:d4:29:72:6c:3a:10:6d:bf:
                    0a:d9:1f:a8:ec:eb:a0:58:82:91:fa:6e:5e:e7:bc:
                    90:a6:a4:8c:14:c2:b3:fa:f3:ff:26:84:ff:0f:d6:
                    48:91:85:3f:f3:4b:36:51:51:2f:9a:46:ea:fe:93:
                    91:78:dd:a2:ae:37:1c:ce:eb:e9:10:e0:f4:54:13:
                    09:71:56:b2:99:39:e8:33:a8:37:3d:04:4a:12:06:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:04:8C:89:6D:A7:EE:8A:D6:47:B2:A8:98:86:1D:A9:94:B3:FE:12
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34322e302f32342d3234203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:d1:c8:f8:cb:aa:13:77:e6:f0:22:7e:4f:6c:b6:4e:36:8b:
         6a:0b:a7:d9:82:4f:eb:cb:c2:e1:98:bb:c3:09:47:e0:9a:6b:
         f3:fd:41:3c:93:01:c7:97:18:a3:35:f6:94:d2:ed:96:65:f2:
         c6:5e:bf:ec:92:f8:ce:84:1a:28:ae:88:11:5a:df:50:31:56:
         c4:43:0b:84:d2:27:2c:26:f9:d0:36:6e:30:12:37:7b:59:d9:
         56:48:84:e0:75:6b:27:83:f2:6d:6a:0e:a1:5b:5f:c4:95:5c:
         8e:26:37:eb:b4:4d:ae:5a:0f:41:85:0c:c4:1c:85:f7:9f:27:
         9d:9d:b9:97:3c:fa:0d:b9:bd:7e:83:01:35:fe:ee:75:ee:1f:
         8e:aa:51:88:6e:4d:28:40:3f:92:1e:c2:85:55:de:8a:18:5c:
         5b:8f:10:72:c5:84:52:0d:5b:94:32:e0:f6:e6:a0:3a:4a:fe:
         2c:dd:82:b4:b0:48:25:75:0c:f6:0b:94:37:b9:f5:21:6e:11:
         45:49:c2:e8:ec:b4:ad:62:d8:f1:29:fc:76:fd:9b:30:7f:0f:
         49:6e:3a:98:8c:2b:19:40:42:b0:d6:4c:cb:c4:27:0f:e9:9c:
         03:44:f3:67:29:18:a7:31:26:37:26:48:be:01:db:ca:e4:e9:
         2f:9a:cf:36
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZjIiYBxkirhQMEFQuCt8sjxh7lUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGNzg0NTVERUI3QzVDQjY3QUMxQTFBNEYzRTVFRkRE
NzYwOUE1RTAeFw0yNDAxMTkwMDE1MDJaFw0yNTAxMTcwMDIwMDJaMDMxMTAvBgNV
BAMTKDU5MDQ4Qzg5NkRBN0VFOEFENjQ3QjJBODk4ODYxREE5OTRCM0ZFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdPxzcnhVmUvxlzwKCVJtRMsB
NN3/s41KgCvycmDDmhV3qf/bPT0/cICaj+7++Z+aD3YS9iq1MaGsYNQvWMFA85SL
TJAZk4rXZNnLSVS6+S2a64Zr6SORn6+I2j1npKggx3w1yYu7KfEYGlKknvcZDtpH
m8G0RGTzaRw0wFKs9QKcrVw4HY2qUfiWeyCCKq1QBEix6BDQiCVmpA49dcjaHb75
H8OQXi2i+4TUKXJsOhBtvwrZH6js66BYgpH6bl7nvJCmpIwUwrP68/8mhP8P1kiR
hT/zSzZRUS+aRur+k5F43aKuNxzO6+kQ4PRUEwlxVrKZOegzqDc9BEoSBvitAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWQSMiW2n7orWR7KomIYdqZSz/hIwHwYDVR0j
BBgwFoAUzveEVd63xctnrBoaTz5e/ddgml4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkI4Z0puZTd2NXcxQ3Y3dGdUZGhiak5kWUt0UjQ0YzVwcUhRM2NIQ1BW
djEvMC9DRUY3ODQ1NURFQjdDNUNCNjdBQzFBMUE0RjNFNUVGREQ3NjA5QTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFRjc4NDU1REVCN0M1Q0I2
N0FDMUExQTRGM0U1RUZERDc2MDlBNUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCOGdKbmU3djV3MUN2N3RnVGRoYmpOZFlLdFI0NGM1cHFIUTNjSENQVnYxLzAv
MzIzMDMwMmUzMTM5MzYyZTM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIxCowDQYJKoZIhvcNAQELBQADggEBAOTRyPjL
qhN35vAifk9stk42i2oLp9mCT+vLwuGYu8MJR+Caa/P9QTyTAceXGKM19pTS7ZZl
8sZev+yS+M6EGiiuiBFa31AxVsRDC4TSJywm+dA2bjASN3tZ2VZIhOB1ayeD8m1q
DqFbX8SVXI4mN+u0Ta5aD0GFDMQchfefJ52duZc8+g25vX6DATX+7nXuH46qUYhu
TShAP5IewoVV3ooYXFuPEHLFhFINW5Qy4PbmoDpK/izdgrSwSCV1DPYLlDe59SFu
EUVJwujstK1i2PEp/Hb9mzB/D0luOpiMKxlAQrDWTMvEJw/pnANE82cpGKcxJjcm
SL4B28rk6S+azzY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org