Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3234342e302f32332d3233203d3e203131343332.roa
File:                     3230302e3137302e3234342e302f32332d3233203d3e203131343332.roa (raw, json)
Hash identifier:          AUKPfGzEJ1DZ49zxiDAFnskPIr+Woc7yv7S39zWtvJQ=
Subject key identifier:   4E:34:4A:AE:6E:2D:91:DA:C6:C0:69:50:BE:F4:F6:F9:4C:07:F7:8F
Certificate issuer:       /CN=600A870A2E7681E4BADA881DED55BA5CEDD02570
Certificate serial:       467FD5F972FEAA9AC91F76EDDB6BDCBEE9EDD591
Authority key identifier: 60:0A:87:0A:2E:76:81:E4:BA:DA:88:1D:ED:55:BA:5C:ED:D0:25:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3234342e302f32332d3233203d3e203131343332.roa
Signing time:             Fri 22 Apr 2022 23:20:47 +0000
ROA not before:           Fri 22 Apr 2022 23:15:47 +0000
ROA not after:            Fri 21 Apr 2023 23:20:47 +0000
asID:                     11432
IP address blocks:        200.170.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7f:d5:f9:72:fe:aa:9a:c9:1f:76:ed:db:6b:dc:be:e9:ed:d5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600A870A2E7681E4BADA881DED55BA5CEDD02570
        Validity
            Not Before: Apr 22 23:15:47 2022 GMT
            Not After : Apr 21 23:20:47 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:60:3d:4e:44:28:60:01:38:10:05:92:52:
                    49:32:be:c0:ca:5b:c8:d0:a7:72:17:13:6f:c0:8b:
                    4f:05:f9:5e:b8:f5:92:a0:c3:eb:55:0d:1f:b4:20:
                    7f:a3:d2:6d:65:82:ce:3a:08:84:ba:c9:b1:2d:e7:
                    41:e2:e6:6c:ed:ed:10:f3:b5:6c:6a:2e:16:4f:c3:
                    ee:70:c3:97:cf:f0:3f:53:1d:7c:93:4c:98:b4:a7:
                    c5:44:87:e2:25:fb:8c:cf:f0:87:cd:47:7c:c7:e0:
                    40:dc:c6:49:f2:a9:8a:81:7d:26:b4:75:72:62:c6:
                    c1:e7:89:3b:fd:48:31:bc:58:2f:a2:68:ff:79:77:
                    81:8a:3c:31:8d:f1:c9:2d:54:58:48:9f:ad:ea:c1:
                    92:8f:7d:d9:74:73:16:69:09:ef:71:ba:93:36:6d:
                    37:f7:9f:d6:a4:61:05:d9:97:96:6a:57:4d:21:5d:
                    d1:d0:d7:29:1d:04:a4:5c:84:ac:6c:e5:93:21:71:
                    1e:b0:fd:ea:dd:d4:20:06:63:f8:9a:d8:9e:77:b1:
                    50:35:04:82:29:d3:50:83:7a:a6:52:92:27:4b:d8:
                    2c:a1:3a:7c:22:47:db:a5:43:e2:aa:fd:ea:ff:18:
                    1a:fc:63:64:f7:7f:16:76:9b:74:d1:38:ad:89:b5:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:34:4A:AE:6E:2D:91:DA:C6:C0:69:50:BE:F4:F6:F9:4C:07:F7:8F
            X509v3 Authority Key Identifier:
                keyid:60:0A:87:0A:2E:76:81:E4:BA:DA:88:1D:ED:55:BA:5C:ED:D0:25:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3234342e302f32332d3233203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:c6:64:3c:56:c1:ce:a8:7a:21:97:15:70:24:05:d8:61:
         11:93:51:e9:85:1d:1a:88:33:87:8e:77:45:92:f0:ac:d7:cf:
         ad:0f:2f:2f:e3:ed:74:91:53:f4:df:f2:95:5a:d1:70:64:b9:
         78:63:15:22:ee:5c:4c:ce:10:64:a5:ea:ef:39:08:ae:2b:67:
         b4:88:15:45:7d:ec:c7:e9:f1:dd:e7:22:1c:33:9f:4b:75:18:
         1e:8f:b9:57:db:6a:f0:3f:a6:09:f0:8c:05:9e:ce:e7:a8:fc:
         19:bd:ed:9c:a1:a0:78:22:ab:77:ed:69:95:42:79:67:63:8b:
         d6:0d:13:8a:79:71:c7:87:8c:d8:c4:66:d0:7e:ee:5a:54:7e:
         9a:76:e5:af:4f:00:d0:66:93:64:d8:36:24:bd:41:34:a5:82:
         0d:03:8a:2b:30:21:c3:c5:41:96:68:4e:84:c1:42:b3:27:a1:
         c4:71:c2:3a:a7:2e:20:fc:14:3c:d0:c0:bd:85:c6:d9:6e:80:
         be:21:83:67:67:90:9b:ae:a1:2e:c6:24:78:39:f3:b2:82:25:
         d7:5f:b7:f7:62:e1:a9:5d:27:b1:dd:c9:18:34:c2:78:98:30:
         df:a7:a5:d6:2b:e2:8c:5a:17:be:fc:6f:54:ea:e8:67:6d:ec:
         57:fc:74:7f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIURn/V+XL+qprJH3bt22vcvunt1ZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwQTg3MEEyRTc2ODFFNEJBREE4ODFERUQ1NUJBNUNF
REQwMjU3MDAeFw0yMjA0MjIyMzE1NDdaFw0yMzA0MjEyMzIwNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjlCMjYwM0Q0RTQ0Mjg2MDAx
MzgxMDA1OTI1MjQ5MzJCRUMwQ0E1QkM4RDBBNzcyMTcxMzZGQzA4QjRGMDVGOTVF
QjhGNTkyQTBDM0VCNTUwRDFGQjQyMDdGQTNEMjZENjU4MkNFM0EwODg0QkFDOUIx
MkRFNzQxRTJFNjZDRURFRDEwRjNCNTZDNkEyRTE2NEZDM0VFNzBDMzk3Q0ZGMDNG
NTMxRDdDOTM0Qzk4QjRBN0M1NDQ4N0UyMjVGQjhDQ0ZGMDg3Q0Q0NzdDQzdFMDQw
RENDNjQ5RjJBOThBODE3RDI2QjQ3NTcyNjJDNkMxRTc4OTNCRkQ0ODMxQkM1ODJG
QTI2OEZGNzk3NzgxOEEzQzMxOERGMUM5MkQ1NDU4NDg5RkFERUFDMTkyOEY3REQ5
NzQ3MzE2NjkwOUVGNzFCQTkzMzY2RDM3Rjc5RkQ2QTQ2MTA1RDk5Nzk2NkE1NzRE
MjE1REQxRDBENzI5MUQwNEE0NUM4NEFDNkNFNTkzMjE3MTFFQjBGREVBRERENDIw
MDY2M0Y4OUFEODlFNzdCMTUwMzUwNDgyMjlEMzUwODM3QUE2NTI5MjI3NEJEODJD
QTEzQTdDMjI0N0RCQTU0M0UyQUFGREVBRkYxODFBRkM2MzY0Rjc3RjE2NzY5Qjc0
RDEzOEFEODlCNUI1NzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAubJgPU5EKGABOBAFklJJMr7AylvI0KdyFxNvwItPBfleuPWSoMPr
VQ0ftCB/o9JtZYLOOgiEusmxLedB4uZs7e0Q87Vsai4WT8PucMOXz/A/Ux18k0yY
tKfFRIfiJfuMz/CHzUd8x+BA3MZJ8qmKgX0mtHVyYsbB54k7/UgxvFgvomj/eXeB
ijwxjfHJLVRYSJ+t6sGSj33ZdHMWaQnvcbqTNm0395/WpGEF2ZeWaldNIV3R0Ncp
HQSkXISsbOWTIXEesP3q3dQgBmP4mtied7FQNQSCKdNQg3qmUpInS9gsoTp8Ikfb
pUPiqv3q/xga/GNk938Wdpt00TitibW1cQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FE40Sq5uLZHaxsBpUL709vlMB/ePMB8GA1UdIwQYMBaAFGAKhwoudoHkutqIHe1V
ulzt0CVwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ4R2hzUVB4aWJUejRa
SlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAvNjAwQTg3MEEyRTc2ODFF
NEJBREE4ODFERUQ1NUJBNUNFREQwMjU3MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82MDBBODcwQTJFNzY4MUU0QkFEQTg4MURFRDU1QkE1Q0VERDAy
NTcwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82eEdoc1FQeGliVHo0WkpWTUJQ
akRNd1J0TUE4TGZ2YlB2azV6cVpNZFBqUy8wLzMyMzAzMDJlMzEzNzMwMmUzMjM0
MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTMxMzQzMzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
yKr0MA0GCSqGSIb3DQEBCwUAA4IBAQBeKMZkPFbBzqh6IZcVcCQF2GERk1HphR0a
iDOHjndFkvCs18+tDy8v4+10kVP03/KVWtFwZLl4YxUi7lxMzhBkpervOQiuK2e0
iBVFfezH6fHd5yIcM59LdRgej7lX22rwP6YJ8IwFns7nqPwZve2coaB4Iqt37WmV
QnlnY4vWDROKeXHHh4zYxGbQfu5aVH6aduWvTwDQZpNk2DYkvUE0pYINA4orMCHD
xUGWaE6EwUKzJ6HEccI6py4g/BQ80MC9hcbZboC+IYNnZ5CbrqEuxiR4OfOygiXX
X7f3YuGpXSex3ckYNMJ4mDDfp6XWK+KMWhe+/G9U6uhnbexX/HR/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org