Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38332e302f32342d3234203d3e20323638373434.roa
File:                     3230302e31372e38332e302f32342d3234203d3e20323638373434.roa (raw, json)
Hash identifier:          cB9ZO6knfA+wawqQSJ8g7PvW0pkFcGoa50IZBby6rR4=
Subject key identifier:   2F:90:1C:F0:78:8A:F4:00:9D:E4:6F:5A:F8:DD:E6:D4:21:5C:94:96
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       5D3712F8D1128EDD58B7793144EA1D021361D2B2
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38332e302f32342d3234203d3e20323638373434.roa
Signing time:             Mon 23 Oct 2023 20:47:58 +0000
ROA not before:           Mon 23 Oct 2023 20:42:58 +0000
ROA not after:            Mon 21 Oct 2024 20:47:58 +0000
asID:                     268744
IP address blocks:        200.17.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:37:12:f8:d1:12:8e:dd:58:b7:79:31:44:ea:1d:02:13:61:d2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Oct 23 20:42:58 2023 GMT
            Not After : Oct 21 20:47:58 2024 GMT
        Subject: CN=3082010A0282010100E1C9FE978BDDCEA5641993D26BD6740C127A8D9734EEBE859CE306E9EE9B7CAB737A304F360546BEE4893BE8FAED729D11BC268412C13772448B0D218ED48BD7DD545397ACF0964DB4A0AC60AE0716BD9A0E7B57FC616930156CB1D7B21A9F681205F15CD671ABECF982CC73CED4DCCA53EAF55C5B6C8005C72AA4EF654EB116E46806DBD409D8631D8AFD3E7023516543F0077812C028F98469BAF9B2AEF2533D07502BFE5C0144B1F4248EB72576E3AAC70BB06A45BD1FB16A327DB0493B9E955E17C711B5EE3BE0FB32FF3269B9B43011777B00DE9C6540DCE8A939E89D265E101C4CCDA002A5AC08C68D1320C8AB7D904AB8649DE046677CEA01474F80410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:fe:97:8b:dd:ce:a5:64:19:93:d2:6b:d6:
                    74:0c:12:7a:8d:97:34:ee:be:85:9c:e3:06:e9:ee:
                    9b:7c:ab:73:7a:30:4f:36:05:46:be:e4:89:3b:e8:
                    fa:ed:72:9d:11:bc:26:84:12:c1:37:72:44:8b:0d:
                    21:8e:d4:8b:d7:dd:54:53:97:ac:f0:96:4d:b4:a0:
                    ac:60:ae:07:16:bd:9a:0e:7b:57:fc:61:69:30:15:
                    6c:b1:d7:b2:1a:9f:68:12:05:f1:5c:d6:71:ab:ec:
                    f9:82:cc:73:ce:d4:dc:ca:53:ea:f5:5c:5b:6c:80:
                    05:c7:2a:a4:ef:65:4e:b1:16:e4:68:06:db:d4:09:
                    d8:63:1d:8a:fd:3e:70:23:51:65:43:f0:07:78:12:
                    c0:28:f9:84:69:ba:f9:b2:ae:f2:53:3d:07:50:2b:
                    fe:5c:01:44:b1:f4:24:8e:b7:25:76:e3:aa:c7:0b:
                    b0:6a:45:bd:1f:b1:6a:32:7d:b0:49:3b:9e:95:5e:
                    17:c7:11:b5:ee:3b:e0:fb:32:ff:32:69:b9:b4:30:
                    11:77:7b:00:de:9c:65:40:dc:e8:a9:39:e8:9d:26:
                    5e:10:1c:4c:cd:a0:02:a5:ac:08:c6:8d:13:20:c8:
                    ab:7d:90:4a:b8:64:9d:e0:46:67:7c:ea:01:47:4f:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:90:1C:F0:78:8A:F4:00:9D:E4:6F:5A:F8:DD:E6:D4:21:5C:94:96
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38332e302f32342d3234203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:46:8f:1e:c1:7c:c9:29:5d:4c:da:a0:a1:b3:51:bd:24:
         42:42:96:d5:01:ca:58:19:09:3f:ae:b0:05:d5:db:66:56:28:
         93:c7:e2:94:56:1c:f2:81:4c:49:cb:ee:36:91:2a:71:fb:57:
         29:14:16:aa:cc:f9:a7:38:07:81:c8:60:fb:61:4e:1c:40:2d:
         96:00:99:4c:94:3d:37:b7:20:50:f0:ca:3d:d3:29:a7:bc:b8:
         05:05:46:83:ce:0b:6e:c5:a4:a2:64:0e:ae:31:b5:0f:03:61:
         8e:c1:85:96:8d:ec:eb:65:23:a7:50:7c:0e:7d:74:be:0f:dd:
         5f:1e:5f:4d:58:5c:8c:8f:eb:1a:67:fe:f6:a3:a6:79:5f:6b:
         ae:0b:ba:5d:97:be:fa:30:32:bc:a8:b0:ea:0f:b5:7d:0a:b5:
         c7:d8:6a:f7:06:0b:a8:56:ea:c3:d6:f6:bf:29:d6:90:c2:f2:
         df:49:85:8c:7b:e5:ae:de:7c:aa:0f:1d:7b:1a:6e:56:4c:8e:
         13:fa:17:f1:c2:24:69:13:dd:a0:24:8f:9f:65:5c:25:89:17:
         d0:1e:e2:9e:5b:58:c4:08:2b:f4:12:38:93:0c:6d:6f:da:e5:
         b3:fd:11:4c:69:7c:7c:20:4d:f5:e4:42:50:90:6d:59:07:1f:
         3e:8c:51:7e
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUXTcS+NESjt1Yt3kxROodAhNh0rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFQkVCN0MwRTBGNDYzOTAxNTIyNzc0NzM5NEJBREEz
QzZFNzVENTAeFw0yMzEwMjMyMDQyNThaFw0yNDEwMjEyMDQ3NThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTFDOUZFOTc4QkREQ0VBNTY0
MTk5M0QyNkJENjc0MEMxMjdBOEQ5NzM0RUVCRTg1OUNFMzA2RTlFRTlCN0NBQjcz
N0EzMDRGMzYwNTQ2QkVFNDg5M0JFOEZBRUQ3MjlEMTFCQzI2ODQxMkMxMzc3MjQ0
OEIwRDIxOEVENDhCRDdERDU0NTM5N0FDRjA5NjREQjRBMEFDNjBBRTA3MTZCRDlB
MEU3QjU3RkM2MTY5MzAxNTZDQjFEN0IyMUE5RjY4MTIwNUYxNUNENjcxQUJFQ0Y5
ODJDQzczQ0VENERDQ0E1M0VBRjU1QzVCNkM4MDA1QzcyQUE0RUY2NTRFQjExNkU0
NjgwNkRCRDQwOUQ4NjMxRDhBRkQzRTcwMjM1MTY1NDNGMDA3NzgxMkMwMjhGOTg0
NjlCQUY5QjJBRUYyNTMzRDA3NTAyQkZFNUMwMTQ0QjFGNDI0OEVCNzI1NzZFM0FB
QzcwQkIwNkE0NUJEMUZCMTZBMzI3REIwNDkzQjlFOTU1RTE3QzcxMUI1RUUzQkUw
RkIzMkZGMzI2OUI5QjQzMDExNzc3QjAwREU5QzY1NDBEQ0U4QTkzOUU4OUQyNjVF
MTAxQzRDQ0RBMDAyQTVBQzA4QzY4RDEzMjBDOEFCN0Q5MDRBQjg2NDlERTA0NjY3
N0NFQTAxNDc0RjgwNDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4cn+l4vdzqVkGZPSa9Z0DBJ6jZc07r6FnOMG6e6bfKtzejBPNgVG
vuSJO+j67XKdEbwmhBLBN3JEiw0hjtSL191UU5es8JZNtKCsYK4HFr2aDntX/GFp
MBVssdeyGp9oEgXxXNZxq+z5gsxzztTcylPq9VxbbIAFxyqk72VOsRbkaAbb1AnY
Yx2K/T5wI1FlQ/AHeBLAKPmEabr5sq7yUz0HUCv+XAFEsfQkjrclduOqxwuwakW9
H7FqMn2wSTuelV4XxxG17jvg+zL/Mmm5tDARd3sA3pxlQNzoqTnonSZeEBxMzaAC
pawIxo0TIMirfZBKuGSd4EZnfOoBR0+AQQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FC+QHPB4ivQAneRvWvjd5tQhXJSWMB8GA1UdIwQYMBaAFOzr63wOD0Y5AVIndHOU
uto8bnXVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAvRUNFQkVCN0MwRTBGNDYz
OTAxNTIyNzc0NzM5NEJBREEzQzZFNzVENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQ0VCRUI3QzBFMEY0NjM5MDE1MjI3NzQ3Mzk0QkFEQTNDNkU3
NUQ1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8wLzMyMzAzMDJlMzEzNzJlMzgzMzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM3MzQzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgR
UzANBgkqhkiG9w0BAQsFAAOCAQEAbB5Gjx7BfMkpXUzaoKGzUb0kQkKW1QHKWBkJ
P66wBdXbZlYok8filFYc8oFMScvuNpEqcftXKRQWqsz5pzgHgchg+2FOHEAtlgCZ
TJQ9N7cgUPDKPdMpp7y4BQVGg84LbsWkomQOrjG1DwNhjsGFlo3s62Ujp1B8Dn10
vg/dXx5fTVhcjI/rGmf+9qOmeV9rrgu6XZe++jAyvKiw6g+1fQq1x9hq9wYLqFbq
w9b2vynWkMLy30mFjHvlrt58qg8dexpuVkyOE/oX8cIkaRPdoCSPn2VcJYkX0B7i
nltYxAgr9BI4kwxtb9rls/0RTGl8fCBN9eRCUJBtWQcfPoxRfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org