Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
File:                     3230302e3133322e322e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          SVVtwSxbE/3EW0EKbF4dCVNRFTZJa23ZXbnsqybd210=
Subject key identifier:   DE:64:A5:91:BE:D0:C1:A1:00:22:1E:A5:41:F4:9F:CA:77:5D:CD:DF
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       4A881E8DF772E26E99928CDD1DFEB7450489DCD3
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
Signing time:             Thu 13 Jul 2023 14:00:00 +0000
ROA not before:           Thu 13 Jul 2023 13:55:00 +0000
ROA not after:            Thu 11 Jul 2024 14:00:00 +0000
asID:                     2716
IP address blocks:        200.132.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:88:1e:8d:f7:72:e2:6e:99:92:8c:dd:1d:fe:b7:45:04:89:dc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul 13 13:55:00 2023 GMT
            Not After : Jul 11 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100C4DB8D45BC29FBE6C8FA2FA7A1788D72BBBB3151DBD751C32614FE5BF83C74DE3D5AB49AFAF3B64F742C25336FD1C862387CBC6F7B66FD7FFDB6F0BC22CF8444FA46D953ACDDCBFCEABAA06E6014C5794291FF8BF16698C1FEB0719540D94BF0B0C6811021EBD24D2EBCF119445C169CED60EF7F3AAFBC7D649567F3ECC8A79F83560B35F7D96C77335F2D18A5E9594B92BB5968B6BEDEF2933CBC5DAFC3E6432CB4F9D26D2663635D5AA1FD7381F91520BEC5B5ACA00E02C4B68CA662EC0C434B9935CF147434981C9A23042180AA6FC5296640FA4F09C4A61261DB6E3B6C10068D4931F383F41E6DDFAC1C5736F92AD39898CB8E9DDB2C572B0881A9C94AEB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:8d:45:bc:29:fb:e6:c8:fa:2f:a7:a1:78:
                    8d:72:bb:bb:31:51:db:d7:51:c3:26:14:fe:5b:f8:
                    3c:74:de:3d:5a:b4:9a:fa:f3:b6:4f:74:2c:25:33:
                    6f:d1:c8:62:38:7c:bc:6f:7b:66:fd:7f:fd:b6:f0:
                    bc:22:cf:84:44:fa:46:d9:53:ac:dd:cb:fc:ea:ba:
                    a0:6e:60:14:c5:79:42:91:ff:8b:f1:66:98:c1:fe:
                    b0:71:95:40:d9:4b:f0:b0:c6:81:10:21:eb:d2:4d:
                    2e:bc:f1:19:44:5c:16:9c:ed:60:ef:7f:3a:af:bc:
                    7d:64:95:67:f3:ec:c8:a7:9f:83:56:0b:35:f7:d9:
                    6c:77:33:5f:2d:18:a5:e9:59:4b:92:bb:59:68:b6:
                    be:de:f2:93:3c:bc:5d:af:c3:e6:43:2c:b4:f9:d2:
                    6d:26:63:63:5d:5a:a1:fd:73:81:f9:15:20:be:c5:
                    b5:ac:a0:0e:02:c4:b6:8c:a6:62:ec:0c:43:4b:99:
                    35:cf:14:74:34:98:1c:9a:23:04:21:80:aa:6f:c5:
                    29:66:40:fa:4f:09:c4:a6:12:61:db:6e:3b:6c:10:
                    06:8d:49:31:f3:83:f4:1e:6d:df:ac:1c:57:36:f9:
                    2a:d3:98:98:cb:8e:9d:db:2c:57:2b:08:81:a9:c9:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:64:A5:91:BE:D0:C1:A1:00:22:1E:A5:41:F4:9F:CA:77:5D:CD:DF
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e322e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:86:b3:08:73:8f:ab:66:e1:ff:50:72:a4:b2:c0:5a:97:b4:
         2b:22:be:e9:77:5e:cb:1f:7a:39:57:94:f6:30:62:5a:6d:11:
         62:57:d2:1a:0b:7a:aa:77:63:f2:74:34:23:d0:f7:57:14:d9:
         fe:55:af:8f:56:86:e9:8c:66:af:d6:30:4d:13:c3:b7:bc:ec:
         93:2d:e4:6c:66:d5:05:c4:d6:90:41:8d:2a:11:95:01:da:3f:
         6c:27:85:8a:a6:42:83:e5:31:35:01:e6:7b:6a:87:0c:85:01:
         a5:03:7a:8e:7e:4b:35:47:de:f8:40:05:41:1a:d7:0a:d5:d6:
         df:8d:6d:34:3b:3d:76:be:62:c2:4c:13:20:33:50:4c:6c:fc:
         3a:60:ef:7a:45:fa:e2:cf:70:44:4e:b6:db:cf:19:91:6b:9a:
         70:4f:21:74:27:b0:3a:de:0e:c4:61:8b:b8:14:b3:f6:0b:09:
         c5:5f:a9:46:f4:13:9b:12:5b:81:a0:a8:ac:a1:3e:51:97:25:
         ed:bc:7d:fc:60:c0:2e:cb:8a:5f:74:06:4d:1a:d5:a4:53:27:
         ff:87:02:1f:cf:e9:d1:6d:31:48:41:2a:74:bb:ec:58:69:2d:
         2e:9c:44:77:21:f4:2b:17:28:1d:21:68:59:72:1a:28:4e:3d:
         e8:f1:b8:71
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUSogejfdy4m6ZkozdHf63RQSJ3NMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFQkVCN0MwRTBGNDYzOTAxNTIyNzc0NzM5NEJBREEz
QzZFNzVENTAeFw0yMzA3MTMxMzU1MDBaFw0yNDA3MTExNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzREQjhENDVCQzI5RkJFNkM4
RkEyRkE3QTE3ODhENzJCQkJCMzE1MURCRDc1MUMzMjYxNEZFNUJGODNDNzRERTNE
NUFCNDlBRkFGM0I2NEY3NDJDMjUzMzZGRDFDODYyMzg3Q0JDNkY3QjY2RkQ3RkZE
QjZGMEJDMjJDRjg0NDRGQTQ2RDk1M0FDRERDQkZDRUFCQUEwNkU2MDE0QzU3OTQy
OTFGRjhCRjE2Njk4QzFGRUIwNzE5NTQwRDk0QkYwQjBDNjgxMTAyMUVCRDI0RDJF
QkNGMTE5NDQ1QzE2OUNFRDYwRUY3RjNBQUZCQzdENjQ5NTY3RjNFQ0M4QTc5Rjgz
NTYwQjM1RjdEOTZDNzczMzVGMkQxOEE1RTk1OTRCOTJCQjU5NjhCNkJFREVGMjkz
M0NCQzVEQUZDM0U2NDMyQ0I0RjlEMjZEMjY2MzYzNUQ1QUExRkQ3MzgxRjkxNTIw
QkVDNUI1QUNBMDBFMDJDNEI2OENBNjYyRUMwQzQzNEI5OTM1Q0YxNDc0MzQ5ODFD
OUEyMzA0MjE4MEFBNkZDNTI5NjY0MEZBNEYwOUM0QTYxMjYxREI2RTNCNkMxMDA2
OEQ0OTMxRjM4M0Y0MUU2RERGQUMxQzU3MzZGOTJBRDM5ODk4Q0I4RTlEREIyQzU3
MkIwODgxQTlDOTRBRUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxNuNRbwp++bI+i+noXiNcru7MVHb11HDJhT+W/g8dN49WrSa+vO2
T3QsJTNv0chiOHy8b3tm/X/9tvC8Is+ERPpG2VOs3cv86rqgbmAUxXlCkf+L8WaY
wf6wcZVA2UvwsMaBECHr0k0uvPEZRFwWnO1g7386r7x9ZJVn8+zIp5+DVgs199ls
dzNfLRil6VlLkrtZaLa+3vKTPLxdr8PmQyy0+dJtJmNjXVqh/XOB+RUgvsW1rKAO
AsS2jKZi7AxDS5k1zxR0NJgcmiMEIYCqb8UpZkD6TwnEphJh2247bBAGjUkx84P0
Hm3frBxXNvkq05iYy46d2yxXKwiBqclK6wIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FN5kpZG+0MGhACIepUH0n8p3Xc3fMB8GA1UdIwQYMBaAFOzr63wOD0Y5AVIndHOU
uto8bnXVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAvRUNFQkVCN0MwRTBGNDYz
OTAxNTIyNzc0NzM5NEJBREEzQzZFNzVENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQ0VCRUI3QzBFMEY0NjM5MDE1MjI3NzQ3Mzk0QkFEQTNDNkU3
NUQ1LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8wLzMyMzAzMDJlMzEzMzMyMmUzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyIQCMA0G
CSqGSIb3DQEBCwUAA4IBAQCihrMIc4+rZuH/UHKkssBal7QrIr7pd17LH3o5V5T2
MGJabRFiV9IaC3qqd2PydDQj0PdXFNn+Va+PVobpjGav1jBNE8O3vOyTLeRsZtUF
xNaQQY0qEZUB2j9sJ4WKpkKD5TE1AeZ7aocMhQGlA3qOfks1R974QAVBGtcK1dbf
jW00Oz12vmLCTBMgM1BMbPw6YO96Rfriz3BETrbbzxmRa5pwTyF0J7A63g7EYYu4
FLP2CwnFX6lG9BObEluBoKisoT5RlyXtvH38YMAuy4pfdAZNGtWkUyf/hwIfz+nR
bTFIQSp0u+xYaS0unER3IfQrFygdIWhZchooTj3o8bhx
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org