Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3230302e39342e3234302e302f32322d3232203d3e20323731373234.roa
File:                     3230302e39342e3234302e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          d+yN1bTmXMGJAc7VoLygTVyDS7YuEE1Gi/GZzgbouqg=
Subject key identifier:   3B:30:A0:3C:BA:A6:79:5D:AC:05:9E:AC:3B:67:4F:88:01:4A:AB:EC
Certificate issuer:       /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial:       30F2E4AC3EEB9103E526CC38E61DF91D439A31CA
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3230302e39342e3234302e302f32322d3232203d3e20323731373234.roa
Signing time:             Mon 23 Jan 2023 21:42:47 +0000
ROA not before:           Mon 23 Jan 2023 21:37:47 +0000
ROA not after:            Mon 22 Jan 2024 21:42:47 +0000
asID:                     271724
IP address blocks:        200.94.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f2:e4:ac:3e:eb:91:03:e5:26:cc:38:e6:1d:f9:1d:43:9a:31:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
        Validity
            Not Before: Jan 23 21:37:47 2023 GMT
            Not After : Jan 22 21:42:47 2024 GMT
        Subject: CN=3B30A03CBAA6795DAC059EAC3B674F88014AABEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:1a:d8:34:85:9b:8a:be:20:9d:d6:1c:98:
                    5f:98:2c:07:00:26:24:d7:fa:71:26:96:02:60:bb:
                    31:18:a1:d3:d9:32:bf:01:41:83:24:8e:85:40:0b:
                    95:7b:42:7c:db:a8:bd:f1:64:94:dd:f4:9b:0b:02:
                    fb:76:33:43:a0:0d:58:b8:8e:6a:70:8f:a7:a8:97:
                    3e:80:a3:90:87:d9:7a:07:2d:1f:c5:4b:7b:25:23:
                    56:64:01:89:86:64:36:8a:a3:b7:a4:de:66:72:1e:
                    90:1b:5c:ed:80:39:b9:ef:50:e6:f2:b8:f0:59:b9:
                    73:05:b6:72:07:6d:e6:fb:72:9a:52:3b:f9:be:86:
                    12:1e:aa:a5:c8:20:56:28:53:2f:b0:a7:7d:0d:ef:
                    91:e2:1e:1e:a6:a2:63:c0:61:43:67:17:9e:5c:09:
                    79:db:ff:26:ef:4b:ee:61:72:7c:e7:6d:1c:0e:ce:
                    59:77:07:3a:de:7e:f5:63:4d:a3:43:c6:b4:9c:af:
                    ad:37:0a:f9:f3:92:11:a8:a0:84:aa:ea:97:96:07:
                    a6:e3:9f:4d:1e:b3:81:4c:ce:43:29:21:6a:7b:91:
                    de:e3:e5:24:f6:83:60:51:83:eb:4c:01:88:af:dc:
                    de:a5:23:ac:8d:53:2a:b5:16:de:f5:96:10:71:66:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:30:A0:3C:BA:A6:79:5D:AC:05:9E:AC:3B:67:4F:88:01:4A:AB:EC
            X509v3 Authority Key Identifier:
                keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3230302e39342e3234302e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:da:0d:47:4d:d5:fd:0a:5a:3c:b1:ca:d2:90:0b:41:5f:1f:
         f0:76:3d:e1:65:1f:57:27:35:e6:09:58:c4:95:22:ad:35:75:
         fc:d3:24:29:6d:30:96:c2:b9:5f:3d:4f:c2:98:9f:e8:69:57:
         fd:dd:66:8b:f2:5c:e6:e4:ac:d0:8b:ee:61:d8:66:6a:22:41:
         e6:d0:a7:e1:75:0d:f7:99:c7:3c:87:dd:bc:71:3e:e8:61:e7:
         7a:14:d9:10:61:59:54:49:07:f5:82:45:ef:0e:90:d5:b7:76:
         5f:1c:a0:d3:51:40:3b:7c:4f:e8:08:9b:7a:82:e4:db:e2:0b:
         0b:d0:45:78:d3:b2:f9:0d:dd:64:49:90:79:bc:4b:9c:a5:ce:
         c6:fd:ff:9c:ec:37:ab:fa:a7:9d:32:25:24:cf:aa:87:b7:4f:
         47:c8:cb:2a:5c:fe:a3:fe:ff:77:73:cf:0a:d8:c1:56:09:6a:
         29:2c:c8:a7:e0:8a:30:8a:d9:4a:20:e9:cb:46:7e:25:70:db:
         3d:4d:1d:42:2e:7c:c3:e6:26:84:89:00:7e:8c:3a:7f:bb:f9:
         28:96:25:3a:3c:02:f1:36:8c:fc:76:3f:9a:a4:a6:97:d1:36:
         92:16:12:1c:a3:5f:40:71:bd:09:8b:15:ef:c5:fc:30:13:b5:
         41:85:ca:49
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMPLkrD7rkQPlJsw45h35HUOaMcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE4MzdDMUNGMDg5MUM2MEJCMzcxOEUwOUVFNTU4NkMw
RUJDMzU5NzAeFw0yMzAxMjMyMTM3NDdaFw0yNDAxMjIyMTQyNDdaMDMxMTAvBgNV
BAMTKDNCMzBBMDNDQkFBNjc5NURBQzA1OUVBQzNCNjc0Rjg4MDE0QUFCRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgBrYNIWbir4gndYcmF+YLAcA
JiTX+nEmlgJguzEYodPZMr8BQYMkjoVAC5V7QnzbqL3xZJTd9JsLAvt2M0OgDVi4
jmpwj6eolz6Ao5CH2XoHLR/FS3slI1ZkAYmGZDaKo7ek3mZyHpAbXO2AObnvUOby
uPBZuXMFtnIHbeb7cppSO/m+hhIeqqXIIFYoUy+wp30N75HiHh6momPAYUNnF55c
CXnb/ybvS+5hcnznbRwOzll3BzrefvVjTaNDxrScr603CvnzkhGooISq6peWB6bj
n00es4FMzkMpIWp7kd7j5ST2g2BRg+tMAYiv3N6lI6yNUyq1Ft71lhBxZr91AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOzCgPLqmeV2sBZ6sO2dPiAFKq+wwHwYDVR0j
BBgwFoAUQYN8HPCJHGC7NxjgnuVYbA68NZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVbUs3SlQ2b1RkRW5aRmhISzE4THBucEtZdUhNOHExR2hiVHJNSmI4
cGQvMS80MTgzN0MxQ0YwODkxQzYwQkIzNzE4RTA5RUU1NTg2QzBFQkMzNTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxODM3QzFDRjA4OTFDNjBC
QjM3MThFMDlFRTU1ODZDMEVCQzM1OTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVW1LN0pUNm9UZEVuWkZoSEsxOExwbnBLWXVITThxMUdoYlRyTUpiOHBkLzEv
MzIzMDMwMmUzOTM0MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIXvAwDQYJKoZIhvcNAQELBQADggEBAB3aDUdN
1f0KWjyxytKQC0FfH/B2PeFlH1cnNeYJWMSVIq01dfzTJCltMJbCuV89T8KYn+hp
V/3dZovyXObkrNCL7mHYZmoiQebQp+F1DfeZxzyH3bxxPuhh53oU2RBhWVRJB/WC
Re8OkNW3dl8coNNRQDt8T+gIm3qC5NviCwvQRXjTsvkN3WRJkHm8S5ylzsb9/5zs
N6v6p50yJSTPqoe3T0fIyypc/qP+/3dzzwrYwVYJaiksyKfgijCK2Uog6ctGfiVw
2z1NHUIufMPmJoSJAH6MOn+7+SiWJTo8AvE2jPx2P5qkppfRNpIWEhyjX0BxvQmL
Fe/F/DATtUGFykk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:01 2025 by rpki-client