Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37352e302f32342d3234203d3e20323636323136.roa
File:                     3230302e37312e37352e302f32342d3234203d3e20323636323136.roa (raw, json)
Hash identifier:          QplNFTm856Iuz0UXOLKsL1w1GPjnzx6a9TUL0pvrCz0=
Subject key identifier:   86:1D:91:7A:80:6B:B5:09:5E:BB:DB:AD:6F:97:57:83:34:D1:3B:31
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       05B27001E39CBC082390EFF2C6598D2B18FE1F7C
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37352e302f32342d3234203d3e20323636323136.roa
Signing time:             Mon 19 Jun 2023 20:02:42 +0000
ROA not before:           Mon 19 Jun 2023 19:57:42 +0000
ROA not after:            Mon 17 Jun 2024 20:02:42 +0000
asID:                     266216
IP address blocks:        200.71.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b2:70:01:e3:9c:bc:08:23:90:ef:f2:c6:59:8d:2b:18:fe:1f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Jun 19 19:57:42 2023 GMT
            Not After : Jun 17 20:02:42 2024 GMT
        Subject: CN=861D917A806BB5095EBBDBAD6F97578334D13B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:34:a5:d4:71:76:39:79:30:53:bc:b6:c3:
                    5d:a1:ed:54:bc:1a:90:64:08:16:95:48:ba:c6:28:
                    81:d3:4a:2a:16:a8:9c:2c:3e:bc:07:a1:90:c5:ad:
                    86:d4:e5:bc:e2:a4:dd:17:da:8f:bc:29:82:c3:be:
                    09:ec:44:d1:f8:c2:24:32:2c:b1:17:25:81:93:af:
                    9d:6e:8e:d2:86:86:ed:05:33:96:7f:b6:38:da:11:
                    26:2a:1e:af:ed:de:84:34:49:6a:c1:28:e1:bd:bd:
                    ee:d0:1d:b6:2a:44:47:d0:43:72:0c:d5:e8:c9:1a:
                    e4:fb:a7:fe:bc:2b:0e:1c:0e:bf:e0:d6:d9:64:ff:
                    db:de:7d:16:e7:37:78:ac:b9:0c:a1:7e:f6:bb:aa:
                    e3:ce:30:ce:2f:df:b8:29:d3:be:92:c9:86:f9:67:
                    05:3a:03:86:1a:ef:71:ce:7e:f0:d7:a7:3b:70:54:
                    a9:7d:16:03:93:8e:79:fe:71:c5:7d:d8:ce:4c:de:
                    ff:1b:1e:97:86:13:dd:3f:0b:98:04:05:88:b6:bc:
                    d4:7b:60:0e:c3:37:44:b3:8f:50:13:00:fb:ed:31:
                    a6:bf:1f:d2:b3:bb:e9:59:51:18:3e:23:81:8e:f5:
                    2d:29:88:cd:09:4a:9b:28:4b:88:a7:0e:f6:fc:ea:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1D:91:7A:80:6B:B5:09:5E:BB:DB:AD:6F:97:57:83:34:D1:3B:31
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37352e302f32342d3234203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:3e:28:67:5f:dd:ad:19:b6:2a:ab:8a:98:e5:1f:b2:f9:10:
         30:b8:1f:88:0f:0a:ae:35:f6:52:89:76:7b:d2:28:ce:8e:9f:
         fd:94:29:2d:4a:44:32:2f:61:e0:8b:99:8b:da:c6:ea:9e:f8:
         10:2d:23:f3:b0:fc:45:c9:b9:91:52:e3:d5:31:22:83:8f:00:
         bd:e3:0d:93:d5:a2:37:af:e1:72:e5:09:6c:15:c8:73:57:ed:
         dd:14:b5:00:fa:57:29:a7:ac:bf:ab:ac:69:8f:0e:e8:b4:df:
         06:ef:b7:60:3e:5e:8b:b5:3f:43:b5:dc:02:a7:bf:b1:af:e0:
         0b:06:2e:98:66:69:27:bc:64:c2:55:9d:66:c8:27:7d:4b:80:
         75:aa:cd:6c:43:f0:dc:22:84:32:0a:dc:3a:d3:90:e1:05:10:
         97:c7:9d:9f:e9:af:9f:9c:85:b5:41:1a:32:dc:d7:97:96:6a:
         4e:a8:c7:21:cd:8b:26:7f:6a:44:6e:6b:19:36:aa:c2:8a:a2:
         77:5f:0f:13:d8:54:f6:85:a2:63:47:f9:f2:6d:27:2c:dd:5f:
         c7:73:20:db:e0:49:6b:81:fe:5a:6c:98:a7:2b:f0:e6:2e:e4:
         25:28:d7:b4:17:96:f0:4d:ad:2e:df:c9:f9:98:f7:b7:c3:3f:
         ec:0e:eb:a8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBbJwAeOcvAgjkO/yxlmNKxj+H3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEzQTdCQjgwQ0QzMjYwNENFNDNGRDI3NUZBRjg4N0VC
MzNERjUxMjAeFw0yMzA2MTkxOTU3NDJaFw0yNDA2MTcyMDAyNDJaMDMxMTAvBgNV
BAMTKDg2MUQ5MTdBODA2QkI1MDk1RUJCREJBRDZGOTc1NzgzMzREMTNCMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6DSl1HF2OXkwU7y2w12h7VS8
GpBkCBaVSLrGKIHTSioWqJwsPrwHoZDFrYbU5bzipN0X2o+8KYLDvgnsRNH4wiQy
LLEXJYGTr51ujtKGhu0FM5Z/tjjaESYqHq/t3oQ0SWrBKOG9ve7QHbYqREfQQ3IM
1ejJGuT7p/68Kw4cDr/g1tlk/9vefRbnN3isuQyhfva7quPOMM4v37gp076SyYb5
ZwU6A4Ya73HOfvDXpztwVKl9FgOTjnn+ccV92M5M3v8bHpeGE90/C5gEBYi2vNR7
YA7DN0Szj1ATAPvtMaa/H9Kzu+lZURg+I4GO9S0piM0JSpsoS4inDvb86oLLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhh2ReoBrtQleu9utb5dXgzTROzEwHwYDVR0j
BBgwFoAU6jp7uAzTJgTOQ/0nX6+IfrM99RIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2
clYvMC9FQTNBN0JCODBDRDMyNjA0Q0U0M0ZEMjc1RkFGODg3RUIzM0RGNTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBM0E3QkI4MENEMzI2MDRD
RTQzRkQyNzVGQUY4ODdFQjMzREY1MTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuWGQ3bmc1REFLVjc4dG5IVnh3SkFxRExMTGh3dlluVG83RThTRnZUNnJWLzAv
MzIzMDMwMmUzNzMxMmUzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyEdLMA0GCSqGSIb3DQEBCwUAA4IBAQBCPihnX92t
GbYqq4qY5R+y+RAwuB+IDwquNfZSiXZ70ijOjp/9lCktSkQyL2Hgi5mL2sbqnvgQ
LSPzsPxFybmRUuPVMSKDjwC94w2T1aI3r+Fy5QlsFchzV+3dFLUA+lcpp6y/q6xp
jw7otN8G77dgPl6LtT9DtdwCp7+xr+ALBi6YZmknvGTCVZ1myCd9S4B1qs1sQ/Dc
IoQyCtw605DhBRCXx52f6a+fnIW1QRoy3NeXlmpOqMchzYsmf2pEbmsZNqrCiqJ3
Xw8T2FT2haJjR/nybScs3V/HcyDb4Elrgf5abJinK/DmLuQlKNe0F5bwTa0u38n5
mPe3wz/sDuuo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org