Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3230302e3232352e34382e302f32312d3231203d3e203631363130.roa
File:                     3230302e3232352e34382e302f32312d3231203d3e203631363130.roa (raw, json)
Hash identifier:          LOphD4j/ndf/nzutHq/9KdA/Ti0PBfzXw4GIdDVZ/zM=
Subject key identifier:   83:C1:13:E8:08:76:83:31:8D:2E:C1:02:9F:25:DA:11:1A:B5:B5:74
Certificate issuer:       /CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
Certificate serial:       4C9B31EF5084D8A6B1B1F25A1CEA66E1D97546A6
Authority key identifier: D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3230302e3232352e34382e302f32312d3231203d3e203631363130.roa
Signing time:             Fri 21 Jul 2023 18:20:19 +0000
ROA not before:           Fri 21 Jul 2023 18:15:19 +0000
ROA not after:            Fri 19 Jul 2024 18:20:19 +0000
asID:                     61610
IP address blocks:        200.225.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9b:31:ef:50:84:d8:a6:b1:b1:f2:5a:1c:ea:66:e1:d9:75:46:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
        Validity
            Not Before: Jul 21 18:15:19 2023 GMT
            Not After : Jul 19 18:20:19 2024 GMT
        Subject: CN=83C113E8087683318D2EC1029F25DA111AB5B574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e2:94:b0:19:5b:8d:49:fb:f9:fd:39:50:bc:
                    67:f4:19:93:04:84:3e:ac:58:e2:0b:e4:55:4f:d5:
                    e3:0e:fc:d7:96:b2:03:6d:40:69:a2:eb:87:0b:32:
                    7d:0d:87:93:c2:36:92:6b:91:1f:a3:64:61:e8:0f:
                    13:ef:45:3c:2c:7a:dd:ad:83:09:d3:b0:cd:d7:63:
                    4f:64:f6:62:61:a1:6d:93:f5:2e:d5:72:0b:b0:bf:
                    0d:f3:aa:08:30:08:65:f0:d9:1b:0d:0b:34:d8:e9:
                    7b:23:24:02:92:4d:c8:49:9d:42:7f:0f:ae:0f:77:
                    d3:d4:58:4c:be:f5:0f:de:6a:b9:be:d7:42:59:92:
                    c1:55:9c:cd:2d:fc:97:ba:c2:b8:ec:8c:47:25:14:
                    05:4c:dc:48:dc:b7:e0:07:ed:10:bf:44:82:96:31:
                    42:c1:e0:9d:cd:dd:57:44:f8:a8:52:3c:66:77:b0:
                    14:4b:49:e4:c1:8a:99:9e:94:02:7d:8d:f4:86:8a:
                    2c:fb:c0:f1:9f:84:af:e5:25:96:c0:c4:99:20:09:
                    ff:53:b3:80:8b:93:f0:9d:9f:6c:36:79:4d:dc:6d:
                    be:c2:1f:d2:57:9b:4b:bf:c2:d5:51:0b:56:86:7e:
                    fa:96:61:46:5a:6e:f3:f5:ca:c1:5c:4e:9c:b2:bb:
                    68:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C1:13:E8:08:76:83:31:8D:2E:C1:02:9F:25:DA:11:1A:B5:B5:74
            X509v3 Authority Key Identifier:
                keyid:D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3230302e3232352e34382e302f32312d3231203d3e203631363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:81:5a:51:e6:76:df:5c:59:64:46:03:7d:3e:53:16:26:ea:
         a6:d9:dc:5e:43:85:0c:dd:29:0f:25:9a:25:c0:49:43:2d:3f:
         d3:20:d8:07:6a:15:27:fb:ef:01:ae:e3:1c:3e:ea:ec:cb:19:
         83:96:83:c8:32:36:de:a9:18:cd:fe:17:55:24:04:c5:8d:9e:
         e9:3a:35:79:62:47:16:8f:82:db:ac:ee:fa:23:a8:0a:bc:ca:
         04:8b:22:44:c1:6d:5a:4b:78:e8:72:03:e1:df:2c:6e:81:a4:
         56:85:80:94:0c:36:39:68:7c:bf:16:85:ce:f1:57:a0:22:ae:
         d3:7d:58:60:0f:94:1d:32:61:d4:5b:71:26:ea:0a:ac:2c:61:
         98:97:b4:c4:79:3c:3e:6f:d6:26:8a:0c:4e:df:de:2d:3e:bc:
         d2:fb:7e:4c:a7:11:41:49:d1:cc:90:27:fc:6d:8e:11:17:be:
         c7:7c:1e:a2:6a:68:f6:95:eb:c7:ab:12:72:f7:be:a7:7e:d9:
         c8:f0:45:c0:a6:e2:7d:b7:52:6b:04:eb:7e:a5:ce:21:e3:bd:
         d3:66:9f:10:f3:5a:4f:39:d4:3c:99:4f:bf:2b:bd:83:3a:ec:
         a9:fb:15:7c:66:78:4d:5e:d5:eb:aa:0c:3e:a0:e0:27:fb:ab:
         0a:27:59:68
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTJsx71CE2KaxsfJaHOpm4dl1RqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCRDZCQzNENEY3MEVDRDBCOEM5QjgwREE0MDkxRUE3
NENFM0UzNDAeFw0yMzA3MjExODE1MTlaFw0yNDA3MTkxODIwMTlaMDMxMTAvBgNV
BAMTKDgzQzExM0U4MDg3NjgzMzE4RDJFQzEwMjlGMjVEQTExMUFCNUI1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt4pSwGVuNSfv5/TlQvGf0GZME
hD6sWOIL5FVP1eMO/NeWsgNtQGmi64cLMn0Nh5PCNpJrkR+jZGHoDxPvRTwset2t
gwnTsM3XY09k9mJhoW2T9S7Vcguwvw3zqggwCGXw2RsNCzTY6XsjJAKSTchJnUJ/
D64Pd9PUWEy+9Q/earm+10JZksFVnM0t/Je6wrjsjEclFAVM3Ejct+AH7RC/RIKW
MULB4J3N3VdE+KhSPGZ3sBRLSeTBipmelAJ9jfSGiiz7wPGfhK/lJZbAxJkgCf9T
s4CLk/Cdn2w2eU3cbb7CH9JXm0u/wtVRC1aGfvqWYUZabvP1ysFcTpyyu2hjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUg8ET6Ah2gzGNLsECnyXaERq1tXQwHwYDVR0j
BBgwFoAU2L1rw9T3Ds0LjJuA2kCR6nTOPjQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51
RlcvMC9EOEJENkJDM0Q0RjcwRUNEMEI4QzlCODBEQTQwOTFFQTc0Q0UzRTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4QkQ2QkMzRDRGNzBFQ0Qw
QjhDOUI4MERBNDA5MUVBNzRDRTNFMzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1dEFtNW55TEx2U3JVZGdSdDQ0VFBZNXZSOXFUYnl6Rk1SRFVhVFZOdUZXLzAv
MzIzMDMwMmUzMjMyMzUyZTM0MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNjMx
MzYzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyOEwMA0GCSqGSIb3DQEBCwUAA4IBAQCDgVpR5nbf
XFlkRgN9PlMWJuqm2dxeQ4UM3SkPJZolwElDLT/TINgHahUn++8BruMcPursyxmD
loPIMjbeqRjN/hdVJATFjZ7pOjV5YkcWj4LbrO76I6gKvMoEiyJEwW1aS3jocgPh
3yxugaRWhYCUDDY5aHy/FoXO8VegIq7TfVhgD5QdMmHUW3Em6gqsLGGYl7TEeTw+
b9YmigxO394tPrzS+35MpxFBSdHMkCf8bY4RF77HfB6iamj2levHqxJy976nftnI
8EXApuJ9t1JrBOt+pc4h473TZp8Q81pPOdQ8mU+/K72DOuyp+xV8ZnhNXtXrqgw+
oOAn+6sKJ1lo
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org