Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/3230302e37312e37322e302f32322d3234203d3e20323636323136.roa
File:                     3230302e37312e37322e302f32322d3234203d3e20323636323136.roa (raw, json)
Hash identifier:          IGiD87DCdolgFDAdd38F+3GcX5KTeWfxYMEKhgpEiXU=
Subject key identifier:   10:09:8E:81:6D:3F:3E:46:53:FC:FC:D5:22:E2:12:D4:84:27:19:30
Certificate issuer:       /CN=7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1
Certificate serial:       6F06E7B2238B5E774113F73E2EF17D79D036AA4A
Authority key identifier: 7F:D9:3E:2C:B5:E8:55:00:D9:02:F1:5C:B4:1F:89:2D:C4:D6:D7:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/3230302e37312e37322e302f32322d3234203d3e20323636323136.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     266216
IP address blocks:        200.71.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:06:e7:b2:23:8b:5e:77:41:13:f7:3e:2e:f1:7d:79:d0:36:aa:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject: CN=10098E816D3F3E4653FCFCD522E212D484271930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:28:1c:71:45:b2:b2:26:14:6c:55:46:06:bc:
                    28:69:f1:f0:72:05:2d:52:64:40:a3:17:53:9b:0b:
                    71:7e:24:e2:fb:7a:24:fc:72:37:b2:ae:f1:62:c8:
                    9a:78:70:c9:c5:3c:b6:5e:da:8f:2a:31:29:a0:37:
                    55:3f:b6:66:e5:59:3d:15:a7:b6:e5:f0:77:e4:df:
                    e2:ac:ba:2d:ea:de:89:21:80:4a:fb:58:6d:28:1b:
                    76:a1:b6:14:66:8f:4e:e2:c1:e4:9a:d5:ff:e8:1e:
                    9a:2f:cb:e5:13:e6:c1:cf:8c:28:07:cd:48:b0:7b:
                    64:2c:22:f2:3e:83:8b:27:22:d4:44:8b:75:da:79:
                    e3:7f:6b:36:1a:fa:b1:da:87:4e:d3:f8:75:6d:7b:
                    86:a3:9e:fb:8a:c4:48:97:f7:1f:74:84:e4:bf:41:
                    fb:fc:33:ee:77:c3:bc:8b:f6:28:7b:53:8b:65:be:
                    59:0f:1d:02:19:37:6b:87:60:a1:f8:63:93:80:e9:
                    57:59:ac:08:b4:8a:b5:a8:ce:fc:c7:55:3f:52:6a:
                    be:97:d8:84:1e:49:54:1f:2c:17:98:a0:ee:2f:ac:
                    d0:69:32:ac:d0:ab:1e:b1:78:4a:72:88:81:61:96:
                    2c:b5:31:8e:25:c8:97:51:54:c4:7d:52:12:09:63:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:09:8E:81:6D:3F:3E:46:53:FC:FC:D5:22:E2:12:D4:84:27:19:30
            X509v3 Authority Key Identifier:
                keyid:7F:D9:3E:2C:B5:E8:55:00:D9:02:F1:5C:B4:1F:89:2D:C4:D6:D7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/3230302e37312e37322e302f32322d3234203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:85:ff:fc:31:13:74:44:b9:68:23:2a:ce:49:c2:4b:4c:40:
         26:69:73:b3:de:8a:6d:04:59:b0:09:fe:bd:b5:81:c5:51:d4:
         13:c1:c4:24:df:30:cb:32:90:38:02:57:1f:9f:bd:cf:29:27:
         d1:bf:a6:86:9c:39:9a:33:cb:5d:a5:5a:04:d2:c4:f5:9e:3f:
         26:31:18:62:36:26:70:98:2e:e2:c8:ab:92:f4:7e:b2:c7:06:
         4d:71:68:07:eb:c3:1f:13:94:e8:a8:59:28:77:c0:97:6b:d2:
         dc:e3:d4:c5:cb:8b:67:3e:0b:59:7c:ef:35:8b:48:f4:f0:94:
         bf:83:45:e7:3d:ce:b5:be:8e:fd:3f:07:9e:33:95:0c:af:15:
         92:38:98:84:f4:11:22:52:a7:5d:52:1b:69:7a:ce:52:c2:70:
         7a:bd:e3:5b:c9:aa:3e:4d:d0:f6:8a:09:7e:cb:8b:d3:62:70:
         63:2d:16:fa:74:7f:50:e6:d8:85:ba:ef:7f:49:c6:e0:1b:34:
         cc:2a:ad:d3:2b:98:9b:ea:89:34:1b:75:6b:a5:e6:ae:1f:4e:
         2f:65:ce:37:b2:18:af:b2:da:c6:29:50:01:a7:d9:05:d7:85:
         2e:6a:a0:af:b2:ff:de:2d:18:09:26:ec:2c:82:98:32:ab:7e:
         12:c4:3b:b2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbwbnsiOLXndBE/c+LvF9edA2qkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZEOTNFMkNCNUU4NTUwMEQ5MDJGMTVDQjQxRjg5MkRD
NEQ2RDdGMTAeFw0yNDA0MDMxODI2MjhaFw0yNTA0MDIxODMxMjhaMDMxMTAvBgNV
BAMTKDEwMDk4RTgxNkQzRjNFNDY1M0ZDRkNENTIyRTIxMkQ0ODQyNzE5MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpKBxxRbKyJhRsVUYGvChp8fBy
BS1SZECjF1ObC3F+JOL7eiT8cjeyrvFiyJp4cMnFPLZe2o8qMSmgN1U/tmblWT0V
p7bl8Hfk3+Ksui3q3okhgEr7WG0oG3ahthRmj07iweSa1f/oHpovy+UT5sHPjCgH
zUiwe2QsIvI+g4snItREi3XaeeN/azYa+rHah07T+HVte4ajnvuKxEiX9x90hOS/
Qfv8M+53w7yL9ih7U4tlvlkPHQIZN2uHYKH4Y5OA6VdZrAi0irWozvzHVT9Sar6X
2IQeSVQfLBeYoO4vrNBpMqzQqx6xeEpyiIFhliy1MY4lyJdRVMR9UhIJY+nTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEAmOgW0/PkZT/PzVIuIS1IQnGTAwHwYDVR0j
BBgwFoAUf9k+LLXoVQDZAvFctB+JLcTW1/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2
clYvMS83RkQ5M0UyQ0I1RTg1NTAwRDkwMkYxNUNCNDFGODkyREM0RDZEN0YxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGRDkzRTJDQjVFODU1MDBE
OTAyRjE1Q0I0MUY4OTJEQzRENkQ3RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuWGQ3bmc1REFLVjc4dG5IVnh3SkFxRExMTGh3dlluVG83RThTRnZUNnJWLzEv
MzIzMDMwMmUzNzMxMmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyEdIMA0GCSqGSIb3DQEBCwUAA4IBAQBChf/8MRN0
RLloIyrOScJLTEAmaXOz3optBFmwCf69tYHFUdQTwcQk3zDLMpA4Alcfn73PKSfR
v6aGnDmaM8tdpVoE0sT1nj8mMRhiNiZwmC7iyKuS9H6yxwZNcWgH68MfE5ToqFko
d8CXa9Lc49TFy4tnPgtZfO81i0j08JS/g0XnPc61vo79PweeM5UMrxWSOJiE9BEi
UqddUhtpes5SwnB6veNbyao+TdD2igl+y4vTYnBjLRb6dH9Q5tiFuu9/ScbgGzTM
Kq3TK5ib6ok0G3VrpeauH04vZc43shivstrGKVABp9kF14UuaqCvsv/eLRgJJuws
gpgyq34SxDuy
-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:23 2024 by rpki-client on console-fra.rpki-client.org