Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e3136302e302f32302d3230203d3e2032373136.roa
File:                     3230302e31372e3136302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          UxQ+poxxqz6qlUNhlVvVOy+LKzbn2UAas47lNynw3Uc=
Subject key identifier:   0D:48:20:C5:36:01:1D:AE:D7:C8:82:3B:25:0D:F3:CC:48:A4:1B:43
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       27DA08F3C830665B8BA7D3DE348682302D49ED66
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e3136302e302f32302d3230203d3e2032373136.roa
Signing time:             Fri 07 Jul 2023 15:00:01 +0000
ROA not before:           Fri 07 Jul 2023 14:55:01 +0000
ROA not after:            Fri 05 Jul 2024 15:00:01 +0000
asID:                     2716
IP address blocks:        200.17.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:da:08:f3:c8:30:66:5b:8b:a7:d3:de:34:86:82:30:2d:49:ed:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jul  7 14:55:01 2023 GMT
            Not After : Jul  5 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:ec:74:76:d2:21:36:cd:e7:7c:7e:8b:63:
                    cb:83:a4:40:d3:56:96:56:c9:17:a8:ae:64:9e:ce:
                    99:51:ed:f6:de:ca:72:42:e7:da:fe:41:65:13:76:
                    aa:5a:69:29:8b:83:51:ab:b9:b6:26:77:e7:a4:17:
                    44:48:ca:6a:39:97:e9:76:8b:42:b0:7f:3f:b4:9a:
                    aa:ea:09:b2:7f:bf:44:0f:7a:81:fc:a2:64:d0:da:
                    a9:86:5e:7e:c7:65:7b:51:8b:8a:3d:f5:ae:b8:87:
                    09:3c:19:cc:88:e4:90:a6:ea:f9:a6:73:e7:9b:66:
                    63:91:49:f8:78:94:b8:4c:66:55:c3:d5:4f:1a:92:
                    3b:4a:5f:43:45:df:7c:2d:51:df:c6:14:52:6a:07:
                    91:de:5b:dd:80:9f:ed:59:a6:b4:4e:76:15:68:67:
                    02:b5:50:23:9f:ad:55:01:a1:d5:ac:4f:fa:25:24:
                    38:63:e6:13:97:3d:8e:6a:7e:4a:44:8d:54:2d:54:
                    4a:29:d9:51:12:8b:13:0c:0b:5c:a4:38:93:9f:25:
                    70:c1:51:ed:b5:71:30:f4:eb:2f:63:6b:e5:93:26:
                    72:16:65:a1:df:03:cc:cc:69:4d:d5:e9:09:cf:b8:
                    ac:78:55:b2:ee:2d:80:02:33:97:83:0f:7a:2c:55:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:48:20:C5:36:01:1D:AE:D7:C8:82:3B:25:0D:F3:CC:48:A4:1B:43
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e3136302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:d7:a3:97:06:80:a8:4f:ea:08:1d:e1:0a:4c:7d:1e:95:
         ef:7d:63:44:7c:e9:6b:8a:12:e0:58:b0:21:80:e6:6d:15:cf:
         7e:d3:11:e1:bf:ee:4e:be:53:d8:29:91:5d:46:7d:a0:37:38:
         8c:bc:2d:87:14:8a:23:52:77:4a:31:2e:b0:bf:e6:34:a0:e8:
         49:76:43:ae:c1:16:5e:35:6c:70:96:9d:eb:25:34:6f:4e:6d:
         80:11:a6:39:de:bc:a8:86:82:61:18:a2:c4:b8:dc:3e:e7:58:
         47:c7:06:85:57:f5:44:8e:f3:c7:de:e3:84:12:59:24:cc:ad:
         e4:f3:05:06:38:96:9f:7e:ce:d3:52:24:e0:14:9d:dd:9a:97:
         b2:63:9a:40:58:5a:be:7a:d8:81:69:8c:c4:4e:05:90:f6:d1:
         2d:a4:c4:f2:1f:da:b3:88:8c:2c:6c:bc:9d:21:d3:b9:85:c0:
         ac:2e:60:33:13:8a:d5:05:15:3d:3f:90:75:6e:27:36:cd:4d:
         b8:40:8f:36:a3:e9:c1:46:0e:55:58:9f:6d:cb:d1:c8:59:2e:
         0b:63:06:9e:3f:27:f7:db:94:1d:82:18:60:ca:14:9e:93:40:
         11:a8:7c:73:73:5e:59:88:94:ff:80:2a:ef:b2:d1:e4:6d:23:
         23:1a:5c:f7
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUJ9oI88gwZluLp9PeNIaCMC1J7WYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFQkVCN0MwRTBGNDYzOTAxNTIyNzc0NzM5NEJBREEz
QzZFNzVENTAeFw0yMzA3MDcxNDU1MDFaFw0yNDA3MDUxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjRDNUVDNzQ3NkQyMjEzNkNE
RTc3QzdFOEI2M0NCODNBNDQwRDM1Njk2NTZDOTE3QThBRTY0OUVDRTk5NTFFREY2
REVDQTcyNDJFN0RBRkU0MTY1MTM3NkFBNUE2OTI5OEI4MzUxQUJCOUI2MjY3N0U3
QTQxNzQ0NDhDQTZBMzk5N0U5NzY4QjQyQjA3RjNGQjQ5QUFBRUEwOUIyN0ZCRjQ0
MEY3QTgxRkNBMjY0RDBEQUE5ODY1RTdFQzc2NTdCNTE4QjhBM0RGNUFFQjg4NzA5
M0MxOUNDODhFNDkwQTZFQUY5QTY3M0U3OUI2NjYzOTE0OUY4Nzg5NEI4NEM2NjU1
QzNENTRGMUE5MjNCNEE1RjQzNDVERjdDMkQ1MURGQzYxNDUyNkEwNzkxREU1QkRE
ODA5RkVENTlBNkI0NEU3NjE1Njg2NzAyQjU1MDIzOUZBRDU1MDFBMUQ1QUM0RkZB
MjUyNDM4NjNFNjEzOTczRDhFNkE3RTRBNDQ4RDU0MkQ1NDRBMjlEOTUxMTI4QjEz
MEMwQjVDQTQzODkzOUYyNTcwQzE1MUVEQjU3MTMwRjRFQjJGNjM2QkU1OTMyNjcy
MTY2NUExREYwM0NDQ0M2OTRERDVFOTA5Q0ZCOEFDNzg1NUIyRUUyRDgwMDIzMzk3
ODMwRjdBMkM1NTYzODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtMXsdHbSITbN53x+i2PLg6RA01aWVskXqK5kns6ZUe323spyQufa
/kFlE3aqWmkpi4NRq7m2JnfnpBdESMpqOZfpdotCsH8/tJqq6gmyf79ED3qB/KJk
0Nqphl5+x2V7UYuKPfWuuIcJPBnMiOSQpur5pnPnm2ZjkUn4eJS4TGZVw9VPGpI7
Sl9DRd98LVHfxhRSageR3lvdgJ/tWaa0TnYVaGcCtVAjn61VAaHVrE/6JSQ4Y+YT
lz2Oan5KRI1ULVRKKdlREosTDAtcpDiTnyVwwVHttXEw9OsvY2vlkyZyFmWh3wPM
zGlN1ekJz7iseFWy7i2AAjOXgw96LFVjgQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FA1IIMU2AR2u18iCOyUN88xIpBtDMB8GA1UdIwQYMBaAFOzr63wOD0Y5AVIndHOU
uto8bnXVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAvRUNFQkVCN0MwRTBGNDYz
OTAxNTIyNzc0NzM5NEJBREEzQzZFNzVENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQ0VCRUI3QzBFMEY0NjM5MDE1MjI3NzQ3Mzk0QkFEQTNDNkU3
NUQ1LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8wLzMyMzAzMDJlMzEzNzJlMzEzNjMw
MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNzMxMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIEaAw
DQYJKoZIhvcNAQELBQADggEBACOo16OXBoCoT+oIHeEKTH0ele99Y0R86WuKEuBY
sCGA5m0Vz37TEeG/7k6+U9gpkV1GfaA3OIy8LYcUiiNSd0oxLrC/5jSg6El2Q67B
Fl41bHCWneslNG9ObYARpjnevKiGgmEYosS43D7nWEfHBoVX9USO88fe44QSWSTM
reTzBQY4lp9+ztNSJOAUnd2al7JjmkBYWr562IFpjMROBZD20S2kxPIf2rOIjCxs
vJ0h07mFwKwuYDMTitUFFT0/kHVuJzbNTbhAjzaj6cFGDlVYn23L0chZLgtjBp4/
J/fblB2CGGDKFJ6TQBGofHNzXlmIlP+AKu+y0eRtIyMaXPc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org