Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/3230302e37312e36342e302f32332d3233203d3e20323636313931.roa
File:                     3230302e37312e36342e302f32332d3233203d3e20323636313931.roa (raw, json)
Hash identifier:          9PWKTmTWbCYufg7Q7Ew1Q39DkkgJ4TZNx6W3T0zTxdQ=
Subject key identifier:   53:8C:B1:F9:33:27:55:23:C6:68:92:8B:AF:C2:B9:D1:00:3D:58:30
Certificate issuer:       /CN=A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF
Certificate serial:       67D51A0E1EC7D0416B246436072A4E71D8944ABF
Authority key identifier: A1:6B:CE:F6:31:94:7F:5E:E2:C8:F6:80:7E:B5:1C:84:AB:1F:9C:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/3230302e37312e36342e302f32332d3233203d3e20323636313931.roa
Signing time:             Wed 09 Aug 2023 18:00:00 +0000
ROA not before:           Wed 09 Aug 2023 17:55:00 +0000
ROA not after:            Wed 07 Aug 2024 18:00:00 +0000
asID:                     266191
IP address blocks:        200.71.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d5:1a:0e:1e:c7:d0:41:6b:24:64:36:07:2a:4e:71:d8:94:4a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF
        Validity
            Not Before: Aug  9 17:55:00 2023 GMT
            Not After : Aug  7 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:31:ab:02:66:29:55:3d:11:1b:a0:e0:5b:
                    f6:21:75:a0:4c:32:06:95:4a:37:d3:0b:3d:7d:a0:
                    8e:11:d3:b3:0f:7a:2d:3f:33:52:ca:a0:79:5c:88:
                    6b:af:9e:6b:7e:d1:ba:88:9d:dd:b6:cd:26:80:d1:
                    95:f8:50:22:8e:df:f2:d8:bd:0b:a6:7d:8b:4e:75:
                    72:3f:db:5b:b2:94:8d:d0:8a:55:5a:c9:1a:e6:c3:
                    02:0a:95:3f:8a:87:d5:50:06:ad:fb:f3:07:bc:40:
                    d4:b3:3a:de:d4:d7:c0:35:71:49:90:20:6a:ac:7a:
                    1a:38:50:b1:8c:e4:84:55:df:9b:30:6c:11:6d:b2:
                    23:60:02:a8:ad:d2:e2:8e:ab:4d:3a:0c:8e:9a:f8:
                    3c:1f:e9:7a:ee:cd:f5:68:a3:a0:3c:6d:74:86:f4:
                    6d:48:3c:f7:e3:14:f7:d6:00:8b:aa:d5:13:f1:15:
                    3f:7e:07:c3:04:bf:2a:d9:98:03:5b:ce:0d:05:52:
                    37:88:4b:9a:69:c9:a4:77:86:f7:fd:11:56:81:57:
                    19:ae:67:14:40:19:2e:8d:65:92:4d:b6:93:3b:74:
                    02:ef:10:45:59:ac:b0:59:37:5d:29:4e:67:b1:dc:
                    ce:88:db:2a:12:ad:fd:a3:be:6f:0c:8b:e5:d1:f1:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:B1:F9:33:27:55:23:C6:68:92:8B:AF:C2:B9:D1:00:3D:58:30
            X509v3 Authority Key Identifier:
                keyid:A1:6B:CE:F6:31:94:7F:5E:E2:C8:F6:80:7E:B5:1C:84:AB:1F:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/3230302e37312e36342e302f32332d3233203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:44:c1:b4:b8:e4:96:77:eb:b7:35:70:5b:ca:93:0f:81:6e:
         ee:87:0d:f6:e6:c3:d4:b4:26:69:f9:aa:41:26:56:42:a5:e7:
         54:6b:56:b0:e6:b3:fd:2d:fe:7a:fc:a1:87:bc:f2:34:c3:36:
         30:6e:7d:f6:c0:4f:e5:05:ed:58:17:0d:58:f2:56:a0:70:90:
         d7:e6:0b:ce:bb:d2:d0:5c:e4:9b:7e:a5:ae:1c:96:3e:68:26:
         d9:0e:51:06:5e:2a:7f:11:d9:b0:23:29:c7:9f:9c:18:61:f9:
         df:ec:af:4e:55:c4:b8:b0:69:a4:0c:24:ef:93:a2:3a:f2:06:
         80:81:d3:37:5e:66:f9:a6:a5:82:4a:c2:f3:28:32:6c:84:af:
         77:5b:92:2e:1a:b5:c9:31:d4:a7:17:14:7f:7f:c8:06:7b:e2:
         00:0e:e9:e3:22:60:ed:b3:29:6b:45:dc:4c:08:79:a3:30:13:
         05:ab:38:de:e1:a8:70:43:d8:84:dd:e7:9f:d9:8d:8d:78:4d:
         ea:92:66:03:a7:74:29:fa:05:28:8b:4b:e5:8e:c9:ef:48:48:
         48:5b:13:fb:65:53:72:b0:e3:fe:c0:a4:8c:52:05:de:b7:92:
         14:ae:22:42:40:eb:f2:3a:2c:91:1e:4d:81:8f:6c:6d:28:94:
         d6:3c:0b:b0
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUZ9UaDh7H0EFrJGQ2BypOcdiUSr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2QkNFRjYzMTk0N0Y1RUUyQzhGNjgwN0VCNTFDODRB
QjFGOUNCRjAeFw0yMzA4MDkxNzU1MDBaFw0yNDA4MDcxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE0ODMxQUIwMjY2Mjk1NTNE
MTExQkEwRTA1QkY2MjE3NUEwNEMzMjA2OTU0QTM3RDMwQjNEN0RBMDhFMTFEM0Iz
MEY3QTJEM0YzMzUyQ0FBMDc5NUM4ODZCQUY5RTZCN0VEMUJBODg5REREQjZDRDI2
ODBEMTk1Rjg1MDIyOEVERkYyRDhCRDBCQTY3RDhCNEU3NTcyM0ZEQjVCQjI5NDhE
RDA4QTU1NUFDOTFBRTZDMzAyMEE5NTNGOEE4N0Q1NTAwNkFERkJGMzA3QkM0MEQ0
QjMzQURFRDREN0MwMzU3MTQ5OTAyMDZBQUM3QTFBMzg1MEIxOENFNDg0NTVERjlC
MzA2QzExNkRCMjIzNjAwMkE4QUREMkUyOEVBQjREM0EwQzhFOUFGODNDMUZFOTdB
RUVDREY1NjhBM0EwM0M2RDc0ODZGNDZENDgzQ0Y3RTMxNEY3RDYwMDhCQUFENTEz
RjExNTNGN0UwN0MzMDRCRjJBRDk5ODAzNUJDRTBEMDU1MjM3ODg0QjlBNjlDOUE0
Nzc4NkY3RkQxMTU2ODE1NzE5QUU2NzE0NDAxOTJFOEQ2NTkyNERCNjkzM0I3NDAy
RUYxMDQ1NTlBQ0IwNTkzNzVEMjk0RTY3QjFEQ0NFODhEQjJBMTJBREZEQTNCRTZG
MEM4QkU1RDFGMUFDMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAukgxqwJmKVU9ERug4Fv2IXWgTDIGlUo30ws9faCOEdOzD3otPzNS
yqB5XIhrr55rftG6iJ3dts0mgNGV+FAijt/y2L0Lpn2LTnVyP9tbspSN0IpVWska
5sMCCpU/iofVUAat+/MHvEDUszre1NfANXFJkCBqrHoaOFCxjOSEVd+bMGwRbbIj
YAKordLijqtNOgyOmvg8H+l67s31aKOgPG10hvRtSDz34xT31gCLqtUT8RU/fgfD
BL8q2ZgDW84NBVI3iEuaacmkd4b3/RFWgVcZrmcUQBkujWWSTbaTO3QC7xBFWayw
WTddKU5nsdzOiNsqEq39o75vDIvl0fGsLQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFOMsfkzJ1UjxmiSi6/CudEAPVgwMB8GA1UdIwQYMBaAFKFrzvYxlH9e4sj2gH61
HISrH5y/MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdOeEg2blNCSEdNSnpZ
emQxa05lWDcxb2UzR0h3dE04WjhmSkpWUTZBVldCLzAvQTE2QkNFRjYzMTk0N0Y1
RUUyQzhGNjgwN0VCNTFDODRBQjFGOUNCRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BMTZCQ0VGNjMxOTQ3RjVFRTJDOEY2ODA3RUI1MUM4NEFCMUY5
Q0JGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TnhINm5TQkhHTUp6WXpkMWtO
ZVg3MW9lM0dId3RNOFo4ZkpKVlE2QVZXQi8wLzMyMzAzMDJlMzczMTJlMzYzNDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMxMzkzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAchH
QDANBgkqhkiG9w0BAQsFAAOCAQEAQkTBtLjklnfrtzVwW8qTD4Fu7ocN9ubD1LQm
afmqQSZWQqXnVGtWsOaz/S3+evyhh7zyNMM2MG599sBP5QXtWBcNWPJWoHCQ1+YL
zrvS0Fzkm36lrhyWPmgm2Q5RBl4qfxHZsCMpx5+cGGH53+yvTlXEuLBppAwk75Oi
OvIGgIHTN15m+aalgkrC8ygybISvd1uSLhq1yTHUpxcUf3/IBnviAA7p4yJg7bMp
a0XcTAh5ozATBas43uGocEPYhN3nn9mNjXhN6pJmA6d0KfoFKItL5Y7J70hISFsT
+2VTcrDj/sCkjFIF3reSFK4iQkDr8joskR5NgY9sbSiU1jwLsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org