Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          sFYQMu1Km3M2qWVBmbVBuodSO9BpgnygHjAX/hXSiJ4=
Subject key identifier:   CB:B5:8A:B7:E9:60:34:59:BD:24:B4:A6:AB:22:B4:FB:5E:3D:3B:38
Certificate issuer:       /CN=D5AC9B9277A1EBF21D85A281540155F60527A721
Certificate serial:       1031E7426AB2C18D4DA3C69BCFB9EC4BEA2EC92B
Authority key identifier: D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
Signing time:             Tue 12 Dec 2023 16:25:06 +0000
ROA not before:           Tue 12 Dec 2023 16:20:06 +0000
ROA not after:            Tue 10 Dec 2024 16:25:06 +0000
asID:                     61776
IP address blocks:        200.196.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:31:e7:42:6a:b2:c1:8d:4d:a3:c6:9b:cf:b9:ec:4b:ea:2e:c9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5AC9B9277A1EBF21D85A281540155F60527A721
        Validity
            Not Before: Dec 12 16:20:06 2023 GMT
            Not After : Dec 10 16:25:06 2024 GMT
        Subject: CN=CBB58AB7E9603459BD24B4A6AB22B4FB5E3D3B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:46:b4:6a:be:ea:a6:03:1b:b1:ea:2f:f6:44:
                    48:29:2d:04:37:9e:f5:a0:a5:e6:db:19:fb:ad:cc:
                    99:d5:fa:ab:5a:b7:f9:b1:8a:f3:05:c4:46:09:22:
                    4d:d0:37:cb:42:d9:82:36:bf:28:b1:72:2a:a7:46:
                    34:8d:d2:13:09:46:b7:60:b9:c2:5c:24:5a:29:94:
                    d5:e6:64:93:6c:a9:94:ba:fb:3b:cc:be:c7:50:b9:
                    db:32:fb:0b:13:c7:d1:02:68:23:4b:c2:71:0d:39:
                    91:14:5a:50:09:1b:8b:47:9c:8e:52:bb:4d:45:2a:
                    91:30:20:ae:19:f8:a0:16:e8:23:64:86:89:10:d6:
                    60:8c:15:30:f0:17:28:d9:e7:81:41:19:7b:af:91:
                    b9:0e:fb:8b:63:27:90:94:00:6a:e0:11:0b:f2:64:
                    7d:87:05:9e:15:01:37:ec:26:df:1e:33:07:f6:66:
                    25:28:5c:ef:c5:f4:67:48:63:38:f1:e0:f9:8e:3f:
                    5e:e6:29:4b:e9:5c:99:98:08:f8:11:6d:96:9f:ec:
                    39:fe:23:d4:57:53:03:7d:14:bd:d1:8d:e9:7d:e9:
                    c8:5a:a1:c2:f5:bd:b2:52:ad:e1:c4:74:0c:72:77:
                    f7:31:32:78:2c:26:c5:d2:30:b9:46:10:a3:ae:13:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B5:8A:B7:E9:60:34:59:BD:24:B4:A6:AB:22:B4:FB:5E:3D:3B:38
            X509v3 Authority Key Identifier:
                keyid:D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/D5AC9B9277A1EBF21D85A281540155F60527A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:41:b4:83:c8:2a:96:87:30:5b:ce:e5:30:be:db:79:6d:6e:
         3b:40:9c:29:03:65:dc:d2:f8:6c:ea:63:02:79:d7:3e:a0:fe:
         61:27:2e:9e:54:72:cb:29:b5:8e:fe:72:7f:66:bb:47:dc:52:
         f0:2a:27:73:8a:5b:06:25:04:28:75:16:b8:89:14:6a:22:62:
         05:93:60:c3:db:05:da:76:59:ac:8f:87:14:01:42:4a:d6:ce:
         96:98:64:6a:06:2e:26:1f:07:16:8f:12:ca:65:0a:a1:88:0d:
         ff:c0:c9:7c:b6:d3:ae:9a:d1:96:be:ed:a8:c0:c8:f9:ec:3c:
         e4:48:1c:09:35:33:fc:1a:13:61:df:c7:a7:12:7d:40:06:d9:
         69:5c:29:f9:8f:22:08:b2:31:0f:ea:2e:f3:7a:d2:c7:77:d5:
         03:d4:d2:f0:ee:3b:f8:32:22:1f:f8:87:96:80:d7:ba:16:32:
         88:c8:c2:5b:95:74:c6:05:ef:47:2d:6f:b9:c9:dd:6d:5a:1c:
         99:09:e3:16:86:49:28:ce:95:e7:ba:3e:2b:a0:ba:9b:0a:a4:
         9b:5d:57:b8:e5:0e:85:9f:1c:c1:fd:b5:62:fe:fe:c6:d0:84:
         eb:c1:1c:f1:8e:37:f2:a1:a4:95:73:05:8b:56:2c:9c:d8:11:
         d5:b6:ed:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEDHnQmqywY1No8abz7nsS+ouySswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBQzlCOTI3N0ExRUJGMjFEODVBMjgxNTQwMTU1RjYw
NTI3QTcyMTAeFw0yMzEyMTIxNjIwMDZaFw0yNDEyMTAxNjI1MDZaMDMxMTAvBgNV
BAMTKENCQjU4QUI3RTk2MDM0NTlCRDI0QjRBNkFCMjJCNEZCNUUzRDNCMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvRrRqvuqmAxux6i/2REgpLQQ3
nvWgpebbGfutzJnV+qtat/mxivMFxEYJIk3QN8tC2YI2vyixciqnRjSN0hMJRrdg
ucJcJFoplNXmZJNsqZS6+zvMvsdQudsy+wsTx9ECaCNLwnENOZEUWlAJG4tHnI5S
u01FKpEwIK4Z+KAW6CNkhokQ1mCMFTDwFyjZ54FBGXuvkbkO+4tjJ5CUAGrgEQvy
ZH2HBZ4VATfsJt8eMwf2ZiUoXO/F9GdIYzjx4PmOP17mKUvpXJmYCPgRbZaf7Dn+
I9RXUwN9FL3Rjel96chaocL1vbJSreHEdAxyd/cxMngsJsXSMLlGEKOuE34zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUy7WKt+lgNFm9JLSmqyK0+149OzgwHwYDVR0j
BBgwFoAU1aybkneh6/IdhaKBVAFV9gUnpyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMC9ENUFDOUI5Mjc3QTFFQkYyMUQ4NUEyODE1NDAxNTVGNjA1MjdBNzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1QUM5QjkyNzdBMUVCRjIx
RDg1QTI4MTU0MDE1NUY2MDUyN0E3MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzAv
MzIzMDMwMmUzMTM5MzYyZTMxMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIxIkwDQYJKoZIhvcNAQELBQADggEBAIpBtIPI
KpaHMFvO5TC+23ltbjtAnCkDZdzS+GzqYwJ51z6g/mEnLp5UcssptY7+cn9mu0fc
UvAqJ3OKWwYlBCh1FriJFGoiYgWTYMPbBdp2WayPhxQBQkrWzpaYZGoGLiYfBxaP
EsplCqGIDf/AyXy2066a0Za+7ajAyPnsPORIHAk1M/waE2Hfx6cSfUAG2WlcKfmP
IgiyMQ/qLvN60sd31QPU0vDuO/gyIh/4h5aA17oWMojIwluVdMYF70ctb7nJ3W1a
HJkJ4xaGSSjOlee6PiugupsKpJtdV7jlDoWfHMH9tWL+/sbQhOvBHPGON/KhpJVz
BYtWLJzYEdW27eo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org