Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
File:                     3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (raw, json)
Hash identifier:          SA38mxXS1wI07qipr4J4LuFL0azDHKi1xweTKLyfyvE=
Subject key identifier:   C4:6F:30:3F:86:C9:E9:BB:A3:37:EF:89:1C:81:5C:7D:DB:A4:33:A3
Certificate issuer:       /CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
Certificate serial:       1B097EC48D9E8573B2874354E12D39A3E1D79621
Authority key identifier: 70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
Signing time:             Wed 31 Jan 2024 15:50:01 +0000
ROA not before:           Wed 31 Jan 2024 15:45:01 +0000
ROA not after:            Wed 29 Jan 2025 15:50:01 +0000
asID:                     11432
IP address blocks:        200.194.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:09:7e:c4:8d:9e:85:73:b2:87:43:54:e1:2d:39:a3:e1:d7:96:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
        Validity
            Not Before: Jan 31 15:45:01 2024 GMT
            Not After : Jan 29 15:50:01 2025 GMT
        Subject: CN=C46F303F86C9E9BBA337EF891C815C7DDBA433A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:61:43:0b:24:97:54:f1:de:41:01:94:a2:
                    33:86:c1:0a:2d:bd:6b:81:c8:1f:f4:d5:77:c6:46:
                    67:8d:31:7b:fd:6f:06:ad:3a:14:29:e6:91:0f:28:
                    59:fa:a3:8c:8f:ce:d6:4f:ba:bc:28:76:f1:ba:a0:
                    64:ee:ec:91:2d:e3:58:71:9d:52:0f:0c:d4:d7:3a:
                    7d:8c:7b:c5:86:3a:d0:20:1e:e6:84:be:56:40:80:
                    15:81:87:7e:38:46:f0:18:33:f8:c3:b5:49:f9:9b:
                    16:20:c9:10:31:40:9a:61:38:ac:ac:ab:b2:9f:cf:
                    ba:e1:09:5e:57:c6:a0:f0:27:0f:1e:c5:40:29:86:
                    9c:c8:f5:6c:fb:f8:4f:59:29:ec:6e:14:de:7f:99:
                    90:52:87:f6:eb:df:5c:ca:a0:23:23:7d:c0:04:76:
                    ae:03:77:28:29:a2:4c:b2:a1:38:a4:6b:08:e3:95:
                    69:52:bf:89:6c:2b:12:8d:77:82:f8:3c:6f:da:d6:
                    28:2e:cc:82:53:6d:fb:a2:3a:2e:88:68:1b:38:a8:
                    4b:a8:53:27:11:81:3c:57:db:4a:95:da:25:ce:c0:
                    c7:18:9f:de:15:11:8a:ab:f9:27:ca:9d:f4:0c:18:
                    da:33:fe:bd:53:f9:33:0c:36:ed:0a:76:d7:65:08:
                    5d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:30:3F:86:C9:E9:BB:A3:37:EF:89:1C:81:5C:7D:DB:A4:33:A3
            X509v3 Authority Key Identifier:
                keyid:70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:da:be:0c:19:19:6b:3d:b3:bf:44:1b:2e:fb:72:2f:69:c0:
         17:9e:56:eb:b3:95:cf:1b:d4:6d:fd:07:dc:e7:4d:57:17:b9:
         fa:6b:be:54:e5:fb:4c:17:50:d8:47:b6:94:c2:cc:96:1f:f9:
         9f:90:cd:bc:5f:8f:e0:b0:f0:1a:6f:c8:1f:e5:be:f0:47:08:
         68:46:45:e9:b5:3a:f8:9c:05:b3:89:21:73:14:5b:9b:34:ce:
         38:09:28:8f:49:68:e0:f4:12:17:8d:42:2f:dd:7e:f4:0e:ee:
         17:41:b6:a9:91:e0:e4:4f:6a:ea:56:97:e8:6a:ee:5b:a7:46:
         bb:0a:09:fe:89:57:01:5a:3b:7a:81:b3:21:9e:6b:f1:48:8a:
         f1:32:20:7b:68:00:d6:f9:8d:0b:9c:fb:87:3d:40:94:df:23:
         3e:4d:cd:22:a3:d9:7f:73:f5:7c:a6:bf:75:6a:ce:ce:99:d9:
         1a:ce:ad:01:75:62:38:52:f6:ff:46:69:55:fa:59:d9:de:38:
         2e:61:3c:30:40:5f:22:5a:de:95:3c:96:6d:20:ff:57:5b:17:
         67:ee:c7:c3:d5:09:47:24:2c:33:fe:49:68:d1:02:0c:2c:d0:
         2d:e7:bf:f5:91:aa:b6:b9:a3:22:8d:5b:be:a1:31:af:90:58:
         30:65:c0:15
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGwl+xI2ehXOyh0NU4S05o+HXliEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBEQTcyNDJFMTQ4QzJCMUJCRUU4QUEyMjJDQUYzRkVC
M0JDREEwNzAeFw0yNDAxMzExNTQ1MDFaFw0yNTAxMjkxNTUwMDFaMDMxMTAvBgNV
BAMTKEM0NkYzMDNGODZDOUU5QkJBMzM3RUY4OTFDODE1QzdEREJBNDMzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAg2FDCySXVPHeQQGUojOGwQot
vWuByB/01XfGRmeNMXv9bwatOhQp5pEPKFn6o4yPztZPurwodvG6oGTu7JEt41hx
nVIPDNTXOn2Me8WGOtAgHuaEvlZAgBWBh344RvAYM/jDtUn5mxYgyRAxQJphOKys
q7Kfz7rhCV5XxqDwJw8exUAphpzI9Wz7+E9ZKexuFN5/mZBSh/br31zKoCMjfcAE
dq4DdygpokyyoTikawjjlWlSv4lsKxKNd4L4PG/a1iguzIJTbfuiOi6IaBs4qEuo
UycRgTxX20qV2iXOwMcYn94VEYqr+SfKnfQMGNoz/r1T+TMMNu0KdtdlCF1JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxG8wP4bJ6bujN++JHIFcfdukM6MwHwYDVR0j
BBgwFoAUcNpyQuFIwrG77oqiIsrz/rO82gcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC83MERBNzI0MkUxNDhDMkIxQkJFRThBQTIyMkNBRjNGRUIzQkNEQTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwREE3MjQyRTE0OEMyQjFC
QkVFOEFBMjIyQ0FGM0ZFQjNCQ0RBMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAv
MzIzMDMwMmUzMTM5MzQyZTMyMzQzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMx
MzEzNDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPIwvgwDQYJKoZIhvcNAQELBQADggEBAC/avgwZ
GWs9s79EGy77ci9pwBeeVuuzlc8b1G39B9znTVcXufprvlTl+0wXUNhHtpTCzJYf
+Z+Qzbxfj+Cw8BpvyB/lvvBHCGhGRem1OvicBbOJIXMUW5s0zjgJKI9JaOD0EheN
Qi/dfvQO7hdBtqmR4ORPaupWl+hq7lunRrsKCf6JVwFaO3qBsyGea/FIivEyIHto
ANb5jQuc+4c9QJTfIz5NzSKj2X9z9Xymv3Vqzs6Z2RrOrQF1YjhS9v9GaVX6Wdne
OC5hPDBAXyJa3pU8lm0g/1dbF2fux8PVCUckLDP+SWjRAgws0C3nv/WRqra5oyKN
W76hMa+QWDBlwBU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org