Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138382e302f32332d3233203d3e20323731363431.roa
File:                     3230302e3139342e3138382e302f32332d3233203d3e20323731363431.roa (raw, json)
Hash identifier:          bd0L68EdwDdEWpSSLvgohjQloKUv5gE/CMnwy2EDrJ4=
Subject key identifier:   35:93:E2:C3:EF:D5:CE:EF:5F:F7:0D:81:22:8F:7E:8D:DD:D1:F9:FF
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       441607DE4C72E5F8BFB9EFA306A3A87367F34B0B
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138382e302f32332d3233203d3e20323731363431.roa
Signing time:             Fri 31 May 2024 15:23:09 +0000
ROA not before:           Fri 31 May 2024 15:18:09 +0000
ROA not after:            Fri 30 May 2025 15:23:09 +0000
asID:                     271641
IP address blocks:        200.194.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:16:07:de:4c:72:e5:f8:bf:b9:ef:a3:06:a3:a8:73:67:f3:4b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: May 31 15:18:09 2024 GMT
            Not After : May 30 15:23:09 2025 GMT
        Subject: CN=3593E2C3EFD5CEEF5FF70D81228F7E8DDDD1F9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:e4:79:e6:63:d4:16:eb:9b:f0:66:6f:17:
                    31:2c:70:8f:ff:d3:a1:07:46:8c:56:31:0c:d3:4f:
                    10:dd:46:7a:12:83:e6:92:5e:2e:a9:22:14:dc:06:
                    1e:91:84:6b:83:91:a1:48:2c:3a:98:79:6e:7e:a9:
                    4d:8d:58:ab:90:0b:b3:88:01:16:5a:5c:91:76:8f:
                    85:69:da:02:f9:52:51:ef:7e:e4:8f:1f:f5:69:c8:
                    8a:4d:65:83:3a:f3:24:45:33:ae:8b:16:45:8b:0d:
                    31:68:3d:e2:65:f7:af:12:18:03:da:e4:23:25:4f:
                    54:6f:6d:5f:46:45:fc:ef:02:52:0d:87:e3:5a:58:
                    7b:eb:47:71:72:6f:b6:cb:cb:3d:1c:cd:8e:3c:ff:
                    e0:7c:6e:a4:9d:08:d9:67:1c:d0:97:2a:2e:7f:e2:
                    b6:bf:6b:39:79:f9:4e:47:15:9b:da:7a:d7:15:21:
                    b9:2d:55:96:06:79:b8:05:22:a3:78:08:6a:ce:d4:
                    cc:84:a6:59:a8:00:15:c9:63:eb:7c:51:37:b9:94:
                    c4:5a:8d:f6:53:bc:19:5c:28:c1:7f:aa:a2:d5:65:
                    7f:c4:a2:4c:73:7c:f9:e8:7e:b2:4a:93:36:55:00:
                    9b:cc:e9:b8:15:1e:4c:c6:d9:49:54:1e:bc:82:b1:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:93:E2:C3:EF:D5:CE:EF:5F:F7:0D:81:22:8F:7E:8D:DD:D1:F9:FF
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138382e302f32332d3233203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:fe:04:ba:02:a7:c3:e4:a9:dc:24:24:83:96:ad:03:66:ea:
         69:a8:7c:8c:6d:04:e1:83:89:85:e1:b7:49:88:0c:63:77:19:
         60:fb:4d:75:c1:a7:ca:d6:cb:54:81:68:74:5b:72:29:02:c0:
         cb:8c:7b:e8:3a:0a:79:83:04:dd:26:f0:17:43:09:32:0c:ef:
         86:a7:7e:2a:2c:07:14:ce:49:bf:c5:3d:c7:9a:04:f1:03:b5:
         8d:70:cf:d1:da:71:47:03:8b:cb:f6:62:62:23:96:14:be:ec:
         78:18:4a:d3:75:3c:14:0f:e7:26:3f:8e:f2:5d:70:6b:98:e6:
         99:d5:2b:ef:ff:b6:7c:2a:25:b0:f6:6f:6e:ab:57:78:8b:bf:
         e6:bf:e4:0e:d9:89:44:f7:bf:8f:e5:9f:90:0b:dd:c7:e2:f3:
         88:72:bd:aa:a3:22:2c:aa:02:23:c3:bd:87:dd:36:64:e1:fe:
         ba:56:74:e9:53:6b:ea:c4:81:31:17:e9:5c:35:11:67:17:0e:
         8b:37:6f:db:b0:1a:b4:f0:2f:da:9e:04:00:ca:ee:75:01:e4:
         b2:dd:eb:e3:21:b2:40:b2:2e:1f:28:cb:8f:83:d2:13:a8:67:
         a4:92:5f:cc:2a:20:ab:74:c6:79:4a:af:e3:25:39:5e:49:61:
         3a:29:75:b0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURBYH3kxy5fi/ue+jBqOoc2fzSwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5REFGRUZFNUIzQzg3MEY5RTFBOEJEQUU5MjRFMjlF
RjFBOTkxRDAeFw0yNDA1MzExNTE4MDlaFw0yNTA1MzAxNTIzMDlaMDMxMTAvBgNV
BAMTKDM1OTNFMkMzRUZENUNFRUY1RkY3MEQ4MTIyOEY3RThEREREMUY5RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2OR55mPUFuub8GZvFzEscI//
06EHRoxWMQzTTxDdRnoSg+aSXi6pIhTcBh6RhGuDkaFILDqYeW5+qU2NWKuQC7OI
ARZaXJF2j4Vp2gL5UlHvfuSPH/VpyIpNZYM68yRFM66LFkWLDTFoPeJl968SGAPa
5CMlT1RvbV9GRfzvAlINh+NaWHvrR3Fyb7bLyz0czY48/+B8bqSdCNlnHNCXKi5/
4ra/azl5+U5HFZvaetcVIbktVZYGebgFIqN4CGrO1MyEplmoABXJY+t8UTe5lMRa
jfZTvBlcKMF/qqLVZX/EokxzfPnofrJKkzZVAJvM6bgVHkzG2UlUHryCsW6NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNZPiw+/Vzu9f9w2BIo9+jd3R+f8wHwYDVR0j
BBgwFoAU052v7+WzyHD54ai9rpJOKe8amR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1J0aHlNTkNGd29yY0hXQ3ZFd3o1QUZ1aUVqd1J6YnJEOURqbVNmZWZa
NVMvMS9EMzlEQUZFRkU1QjNDODcwRjlFMUE4QkRBRTkyNEUyOUVGMUE5OTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzOURBRkVGRTVCM0M4NzBG
OUUxQThCREFFOTI0RTI5RUYxQTk5MUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdSdGh5TU5DRndvcmNIV0N2RXd6NUFGdWlFandSemJyRDlEam1TZmVmWjVTLzEv
MzIzMDMwMmUzMTM5MzQyZTMxMzgzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcjCvDANBgkqhkiG9w0BAQsFAAOCAQEADv4E
ugKnw+Sp3CQkg5atA2bqaah8jG0E4YOJheG3SYgMY3cZYPtNdcGnytbLVIFodFty
KQLAy4x76DoKeYME3SbwF0MJMgzvhqd+KiwHFM5Jv8U9x5oE8QO1jXDP0dpxRwOL
y/ZiYiOWFL7seBhK03U8FA/nJj+O8l1wa5jmmdUr7/+2fColsPZvbqtXeIu/5r/k
DtmJRPe/j+WfkAvdx+LziHK9qqMiLKoCI8O9h902ZOH+ulZ06VNr6sSBMRfpXDUR
ZxcOizdv27AatPAv2p4EAMrudQHkst3r4yGyQLIuHyjLj4PSE6hnpJJfzCogq3TG
eUqv4yU5XklhOil1sA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:53 2025 by rpki-client