Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32342d3234203d3e20323636323136.roa
File:                     3230302e37312e37322e302f32342d3234203d3e20323636323136.roa (raw, json)
Hash identifier:          9+GRyebTFuW3c2jY8j1GPstq88/MHNClgUDwKFi1Rxs=
Subject key identifier:   6A:1B:B3:18:61:A5:F8:62:2A:6B:8B:6A:C7:0B:C3:CF:DB:E2:B6:25
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       710580FF3E6833AEAF651BE0F3F3D99BFF555E51
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32342d3234203d3e20323636323136.roa
Signing time:             Sat 19 Aug 2023 19:27:04 +0000
ROA not before:           Sat 19 Aug 2023 19:22:04 +0000
ROA not after:            Sat 17 Aug 2024 19:27:04 +0000
asID:                     266216
IP address blocks:        200.71.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:05:80:ff:3e:68:33:ae:af:65:1b:e0:f3:f3:d9:9b:ff:55:5e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Aug 19 19:22:04 2023 GMT
            Not After : Aug 17 19:27:04 2024 GMT
        Subject: CN=6A1BB31861A5F8622A6B8B6AC70BC3CFDBE2B625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:76:29:bd:c2:3d:c0:31:16:4c:2c:37:a5:
                    bc:9b:8e:79:4d:93:8d:a0:4b:1c:93:4e:28:81:87:
                    9c:c5:4e:9b:77:d8:06:b3:72:ae:21:db:09:c9:7f:
                    a4:c9:aa:1f:0c:c3:ad:f4:8a:3c:cf:24:ca:ca:41:
                    dc:3c:24:e9:a6:ca:5c:dd:0d:25:50:3a:f9:1e:91:
                    a3:78:2c:fd:12:70:e9:b9:8f:de:b3:d5:6c:b0:7e:
                    d5:cd:30:99:2d:66:a9:1e:27:b6:52:75:c4:e6:d8:
                    0f:25:69:40:f1:e8:c2:00:7f:20:85:8f:27:d9:4c:
                    74:58:bc:41:37:7c:23:7f:fa:1d:cb:36:6f:92:1b:
                    dc:29:fe:e9:74:46:7c:3e:d5:93:98:c6:c2:23:bf:
                    c0:ab:67:76:de:cf:88:d4:ee:ee:24:dc:fd:ad:b6:
                    8f:5f:14:88:74:4a:57:03:89:c3:3b:0b:7a:7b:ef:
                    ba:09:19:5f:32:32:70:bd:fe:d3:66:8b:7a:48:bc:
                    64:56:83:f2:e7:eb:d4:22:e7:c7:f4:a1:52:ad:bc:
                    03:9e:5f:fa:bb:4e:4f:66:58:22:fa:d5:44:95:5c:
                    f7:95:2f:50:60:3f:6e:11:fe:ec:30:17:2a:d9:5e:
                    ff:31:b6:42:4d:99:7d:09:c0:f1:7e:ec:42:62:1b:
                    7a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1B:B3:18:61:A5:F8:62:2A:6B:8B:6A:C7:0B:C3:CF:DB:E2:B6:25
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32342d3234203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f4:19:08:8a:48:2c:31:a0:3a:bf:ed:5b:67:71:1c:de:d6:
         02:e3:d4:22:cb:a1:36:30:1f:94:f0:dd:31:2a:aa:fc:2a:6b:
         3c:8b:8f:96:03:86:e9:ed:49:69:aa:68:06:7b:85:31:96:52:
         1d:8e:be:17:63:ad:29:ab:7f:05:1d:94:51:36:b4:8f:71:b7:
         7a:fb:fa:d0:7e:7d:3f:cf:c4:cf:b9:48:d5:b2:1f:d4:73:67:
         ca:42:77:fe:06:cb:f0:38:cf:6a:9b:f5:82:57:65:b7:ba:81:
         21:95:d4:1f:cb:3b:a0:e8:64:7a:97:0b:51:02:5b:fa:42:04:
         bf:de:72:b8:ee:77:bd:68:5a:c0:fd:ae:bd:75:c5:7e:00:80:
         7f:40:4f:75:f2:de:70:f0:df:70:d3:29:3e:74:76:57:15:47:
         d7:d2:6f:77:40:a0:26:ba:85:0b:a7:99:66:ba:6d:d9:7b:4f:
         4d:f0:03:48:36:f9:3a:ad:22:52:fc:93:e6:0b:7a:4e:35:33:
         c6:97:66:ab:6a:f1:6c:2b:d5:f4:ea:69:9b:e3:84:99:9e:82:
         61:ff:22:7c:d9:da:22:0d:f1:14:55:b8:ec:cf:46:a0:7e:f7:
         17:88:0e:88:45:4c:43:2e:c3:89:e3:6a:e5:25:da:c8:d7:e3:
         9f:69:00:71
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcQWA/z5oM66vZRvg8/PZm/9VXlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEzQTdCQjgwQ0QzMjYwNENFNDNGRDI3NUZBRjg4N0VC
MzNERjUxMjAeFw0yMzA4MTkxOTIyMDRaFw0yNDA4MTcxOTI3MDRaMDMxMTAvBgNV
BAMTKDZBMUJCMzE4NjFBNUY4NjIyQTZCOEI2QUM3MEJDM0NGREJFMkI2MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqHYpvcI9wDEWTCw3pbybjnlN
k42gSxyTTiiBh5zFTpt32Aazcq4h2wnJf6TJqh8Mw630ijzPJMrKQdw8JOmmylzd
DSVQOvkekaN4LP0ScOm5j96z1WywftXNMJktZqkeJ7ZSdcTm2A8laUDx6MIAfyCF
jyfZTHRYvEE3fCN/+h3LNm+SG9wp/ul0Rnw+1ZOYxsIjv8CrZ3bez4jU7u4k3P2t
to9fFIh0SlcDicM7C3p777oJGV8yMnC9/tNmi3pIvGRWg/Ln69Qi58f0oVKtvAOe
X/q7Tk9mWCL61USVXPeVL1BgP24R/uwwFyrZXv8xtkJNmX0JwPF+7EJiG3qRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUahuzGGGl+GIqa4tqxwvDz9vitiUwHwYDVR0j
BBgwFoAU6jp7uAzTJgTOQ/0nX6+IfrM99RIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2
clYvMC9FQTNBN0JCODBDRDMyNjA0Q0U0M0ZEMjc1RkFGODg3RUIzM0RGNTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBM0E3QkI4MENEMzI2MDRD
RTQzRkQyNzVGQUY4ODdFQjMzREY1MTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuWGQ3bmc1REFLVjc4dG5IVnh3SkFxRExMTGh3dlluVG83RThTRnZUNnJWLzAv
MzIzMDMwMmUzNzMxMmUzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyEdIMA0GCSqGSIb3DQEBCwUAA4IBAQA29BkIikgs
MaA6v+1bZ3Ec3tYC49Qiy6E2MB+U8N0xKqr8Kms8i4+WA4bp7UlpqmgGe4UxllId
jr4XY60pq38FHZRRNrSPcbd6+/rQfn0/z8TPuUjVsh/Uc2fKQnf+BsvwOM9qm/WC
V2W3uoEhldQfyzug6GR6lwtRAlv6QgS/3nK47ne9aFrA/a69dcV+AIB/QE918t5w
8N9w0yk+dHZXFUfX0m93QKAmuoULp5lmum3Ze09N8ANINvk6rSJS/JPmC3pONTPG
l2aravFsK9X06mmb44SZnoJh/yJ82doiDfEUVbjsz0agfvcXiA6IRUxDLsOJ42rl
JdrI1+OfaQBx
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org