Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31392e3234302e302f32302d3234203d3e2032373136.roa
File:                     3230302e31392e3234302e302f32302d3234203d3e2032373136.roa (raw, json)
Hash identifier:          x1C4cbhgjoWWDSo4LEQeY9eUDxblHnuMR3NG9WAW4is=
Subject key identifier:   A6:80:0F:AD:3A:80:72:4B:4E:ED:69:C5:1B:FD:A1:D0:54:9D:18:7D
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       082B4EFA1EE93C13F5A7C92FF0575CE40345EF42
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31392e3234302e302f32302d3234203d3e2032373136.roa
Signing time:             Fri 26 Nov 2021 12:42:08 +0000
ROA not before:           Fri 26 Nov 2021 12:37:08 +0000
ROA not after:            Fri 25 Nov 2022 12:42:08 +0000
asID:                     2716
IP address blocks:        200.19.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2b:4e:fa:1e:e9:3c:13:f5:a7:c9:2f:f0:57:5c:e4:03:45:ef:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Nov 26 12:37:08 2021 GMT
            Not After : Nov 25 12:42:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:d7:c3:fb:6a:ae:6b:98:82:84:e7:67:0f:
                    6c:a2:2e:a0:de:cf:99:a1:af:65:ed:dd:56:4e:7c:
                    dd:be:af:8f:66:f4:ae:f9:91:d7:51:27:3c:a9:a8:
                    8f:a4:2c:15:f4:ba:e9:2c:4e:1b:70:24:c1:b1:e5:
                    07:42:63:6a:ff:4f:35:61:7b:93:37:4c:5f:b6:ce:
                    a8:eb:9f:d3:9b:e5:2a:af:3e:7f:2f:cd:d9:2d:05:
                    ec:78:72:90:e1:c5:82:56:67:51:86:52:00:c7:6f:
                    73:dd:a3:71:2d:80:5f:34:b8:21:0b:06:9c:6a:b7:
                    44:60:41:f2:14:01:78:b5:ff:31:03:8d:fb:6c:0d:
                    8e:3a:16:bb:b9:77:a6:7c:d8:22:13:d7:83:5a:20:
                    45:8c:72:e2:2c:27:92:68:12:61:f6:8a:18:90:ab:
                    22:09:f4:25:9d:93:60:27:1a:f8:b8:d7:c8:06:ec:
                    e3:9c:60:9e:33:ec:ac:e7:c3:2a:ea:17:b1:14:d9:
                    6d:e0:49:2d:2a:86:ab:57:6b:b2:29:2c:ef:82:a9:
                    9d:08:76:f5:60:03:a1:84:bb:9e:29:26:c1:2b:bd:
                    ce:dd:68:88:09:b1:63:65:67:a9:0c:75:fa:f2:68:
                    f0:03:fc:d6:c8:48:7b:75:6f:ca:23:c9:e1:2c:fb:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:80:0F:AD:3A:80:72:4B:4E:ED:69:C5:1B:FD:A1:D0:54:9D:18:7D
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31392e3234302e302f32302d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:f4:67:04:54:4e:05:d5:0c:dd:b1:fa:25:5b:2d:99:3c:
         4a:86:9b:fd:09:f1:0e:d2:4b:fe:39:60:58:79:91:1d:ff:0f:
         d8:48:6a:b9:2c:ff:9f:9a:8c:fb:5c:ba:13:39:48:d2:19:55:
         90:b2:94:b8:38:c6:65:62:f7:db:36:9e:a5:eb:c2:ac:5d:a6:
         0a:bc:41:5d:2f:62:4a:d3:e2:9c:54:74:20:f1:1c:6a:8f:66:
         db:61:ce:a2:6e:7b:94:4b:72:21:0c:ad:d6:b2:4a:dc:bc:e4:
         9c:b3:62:55:c7:45:c2:46:2c:df:e8:2f:e4:d8:65:5b:ee:62:
         e4:4e:c0:39:8c:45:b7:9e:bd:27:ac:e6:50:45:38:d8:4c:1b:
         ac:e1:6a:17:dc:92:39:6f:2b:bd:54:e7:d2:77:50:c3:8e:a7:
         3b:41:ca:d7:ab:73:3e:01:2b:b1:a0:0a:d6:82:b6:a7:ba:37:
         a1:a3:4b:90:4f:15:09:7a:fc:89:1f:90:9a:4a:6e:7c:83:d6:
         54:9e:d0:68:41:96:09:0d:2f:75:f1:2d:2f:56:c2:c3:eb:28:
         bd:8a:24:06:0c:4e:3b:7f:71:51:78:4b:61:a5:09:04:90:26:
         0c:b7:14:64:7c:e8:4e:6f:2e:ca:c3:cf:24:1f:72:f4:ad:ef:
         07:c0:81:45
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUCCtO+h7pPBP1p8kv8Fdc5ANF70IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFQkVCN0MwRTBGNDYzOTAxNTIyNzc0NzM5NEJBREEz
QzZFNzVENTAeFw0yMTExMjYxMjM3MDhaFw0yMjExMjUxMjQyMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJDMUQ3QzNGQjZBQUU2Qjk4
ODI4NEU3NjcwRjZDQTIyRUEwREVDRjk5QTFBRjY1RURERDU2NEU3Q0REQkVBRjhG
NjZGNEFFRjk5MUQ3NTEyNzNDQTlBODhGQTQyQzE1RjRCQUU5MkM0RTFCNzAyNEMx
QjFFNTA3NDI2MzZBRkY0RjM1NjE3QjkzMzc0QzVGQjZDRUE4RUI5RkQzOUJFNTJB
QUYzRTdGMkZDREQ5MkQwNUVDNzg3MjkwRTFDNTgyNTY2NzUxODY1MjAwQzc2Rjcz
RERBMzcxMkQ4MDVGMzRCODIxMEIwNjlDNkFCNzQ0NjA0MUYyMTQwMTc4QjVGRjMx
MDM4REZCNkMwRDhFM0ExNkJCQjk3N0E2N0NEODIyMTNENzgzNUEyMDQ1OEM3MkUy
MkMyNzkyNjgxMjYxRjY4QTE4OTBBQjIyMDlGNDI1OUQ5MzYwMjcxQUY4QjhEN0M4
MDZFQ0UzOUM2MDlFMzNFQ0FDRTdDMzJBRUExN0IxMTREOTZERTA0OTJEMkE4NkFC
NTc2QkIyMjkyQ0VGODJBOTlEMDg3NkY1NjAwM0ExODRCQjlFMjkyNkMxMkJCRENF
REQ2ODg4MDlCMTYzNjU2N0E5MEM3NUZBRjI2OEYwMDNGQ0Q2Qzg0ODdCNzU2RkNB
MjNDOUUxMkNGQjBDNEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwsHXw/tqrmuYgoTnZw9soi6g3s+Zoa9l7d1WTnzdvq+PZvSu+ZHX
USc8qaiPpCwV9LrpLE4bcCTBseUHQmNq/081YXuTN0xfts6o65/Tm+Uqrz5/L83Z
LQXseHKQ4cWCVmdRhlIAx29z3aNxLYBfNLghCwacardEYEHyFAF4tf8xA437bA2O
Oha7uXemfNgiE9eDWiBFjHLiLCeSaBJh9ooYkKsiCfQlnZNgJxr4uNfIBuzjnGCe
M+ys58Mq6hexFNlt4EktKoarV2uyKSzvgqmdCHb1YAOhhLueKSbBK73O3WiICbFj
ZWepDHX68mjwA/zWyEh7dW/KI8nhLPsMTQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FKaAD606gHJLTu1pxRv9odBUnRh9MB8GA1UdIwQYMBaAFOzr63wOD0Y5AVIndHOU
uto8bnXVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAvRUNFQkVCN0MwRTBGNDYz
OTAxNTIyNzc0NzM5NEJBREEzQzZFNzVENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQ0VCRUI3QzBFMEY0NjM5MDE1MjI3NzQ3Mzk0QkFEQTNDNkU3
NUQ1LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8wLzMyMzAzMDJlMzEzOTJlMzIzNDMw
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNzMxMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIE/Aw
DQYJKoZIhvcNAQELBQADggEBADt99GcEVE4F1QzdsfolWy2ZPEqGm/0J8Q7SS/45
YFh5kR3/D9hIarks/5+ajPtcuhM5SNIZVZCylLg4xmVi99s2nqXrwqxdpgq8QV0v
YkrT4pxUdCDxHGqPZtthzqJue5RLciEMrdaySty85JyzYlXHRcJGLN/oL+TYZVvu
YuROwDmMRbeevSes5lBFONhMG6zhahfckjlvK71U59J3UMOOpztBytercz4BK7Gg
CtaCtqe6N6GjS5BPFQl6/IkfkJpKbnyD1lSe0GhBlgkNL3XxLS9WwsPrKL2KJAYM
Tjt/cVF4S2GlCQSQJgy3FGR86E5vLsrDzyQfcvSt7wfAgUU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org