Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130372e302f32342d3234203d3e20323732363435.roa
File:                     3230312e3231362e3130372e302f32342d3234203d3e20323732363435.roa (raw, json)
Hash identifier:          Cb2IoDOPV3b5i8/nabVwyv1d7bWqOAs3FyOGHMJzXMc=
Subject key identifier:   09:83:33:18:DA:67:A6:EC:A9:63:75:35:93:0B:C7:27:97:E2:A7:D5
Certificate issuer:       /CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
Certificate serial:       5421406D01B927BC40263A14066793FEE7C22026
Authority key identifier: 3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130372e302f32342d3234203d3e20323732363435.roa
Signing time:             Wed 20 Mar 2024 23:22:19 +0000
ROA not before:           Wed 20 Mar 2024 23:17:19 +0000
ROA not after:            Wed 19 Mar 2025 23:22:19 +0000
asID:                     272645
IP address blocks:        201.216.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:21:40:6d:01:b9:27:bc:40:26:3a:14:06:67:93:fe:e7:c2:20:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Validity
            Not Before: Mar 20 23:17:19 2024 GMT
            Not After : Mar 19 23:22:19 2025 GMT
        Subject: CN=09833318DA67A6ECA9637535930BC72797E2A7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:29:94:f9:b0:fb:87:cf:7d:ac:ac:e1:de:
                    ae:b1:24:31:4c:cd:a9:dc:69:e7:33:a1:ae:15:0f:
                    2b:e7:58:27:b0:91:ac:ea:34:99:87:7c:7b:5f:6b:
                    de:73:5e:b5:9a:ac:08:27:f2:4e:65:85:d9:05:d3:
                    c1:f8:74:d8:08:e8:74:b4:7b:08:21:73:d4:cd:7e:
                    5e:9a:01:1c:f8:e5:03:45:a1:46:04:63:7a:88:88:
                    b3:8c:af:33:c4:a4:93:27:e6:4f:cb:55:63:09:bd:
                    8c:67:e9:7f:8b:7b:53:96:f8:1a:22:07:1e:5e:43:
                    6e:4d:44:31:c0:e1:08:84:b6:0b:2d:32:52:ef:0a:
                    bd:cb:58:ce:79:77:72:5b:f0:a0:fa:1c:9f:7d:c4:
                    e3:10:41:26:2c:52:a4:42:26:bb:15:80:14:5e:5f:
                    24:4e:51:f1:48:88:9e:3f:2e:2a:0b:46:12:36:3c:
                    97:b1:23:fe:9c:78:45:ab:24:8c:0a:a9:fd:64:53:
                    e0:d4:5a:5a:52:dd:c9:23:8e:2f:16:7e:06:15:d6:
                    59:b2:8d:73:61:6d:25:a9:94:0b:9c:29:b7:a3:0c:
                    4d:c7:91:0e:61:b4:8c:15:ff:eb:a7:6d:45:e6:73:
                    0f:fd:d5:a6:d6:0d:56:1a:99:f1:96:f6:f4:40:6d:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:83:33:18:DA:67:A6:EC:A9:63:75:35:93:0B:C7:27:97:E2:A7:D5
            X509v3 Authority Key Identifier:
                keyid:3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130372e302f32342d3234203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:af:91:7d:6f:b1:67:13:ad:d3:77:01:90:85:a7:aa:04:
         d4:97:f3:74:23:d1:01:da:f9:44:7f:9a:e0:44:31:6a:e6:c5:
         21:b3:66:0b:37:a0:ee:61:31:4f:55:68:b3:05:40:56:c5:4e:
         5e:a3:0f:71:54:7b:75:08:ca:03:82:d1:dd:ec:e0:4e:db:74:
         1c:4a:cf:58:13:b3:05:17:02:47:a6:04:16:d2:ba:fc:5b:d1:
         cc:c0:dc:71:ee:c9:a4:e4:76:fd:dd:c7:24:37:3b:b1:dd:f3:
         39:22:c6:fe:22:ef:53:b3:d2:3b:b4:57:e6:a4:9a:4e:a5:3e:
         9f:da:88:3f:41:3c:a5:dc:e1:f3:53:78:28:52:be:ef:dc:cc:
         e1:e5:9e:31:3e:28:7b:e1:92:d1:a3:ca:a0:4b:89:97:07:72:
         d6:45:5b:ff:3e:3b:a1:fa:32:17:bb:c5:1c:91:eb:4b:80:4c:
         55:55:86:8a:70:69:73:12:05:13:df:0c:6d:95:48:87:05:c1:
         be:37:cf:ce:fe:9b:08:45:ea:fc:95:1e:e2:b9:e6:ec:5f:b9:
         1e:fa:27:1a:b7:2b:d1:6e:b9:de:11:de:25:ad:d3:d1:4e:0f:
         46:5b:b5:d9:2e:68:99:8b:96:84:4a:36:b9:6e:c3:5f:eb:78:
         17:da:9a:c4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVCFAbQG5J7xAJjoUBmeT/ufCICYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MyMzlEREJDQkVBQjNBQ0QwMzE0RjAwQkUwOUQ4N0Ez
NTQwODIyRjAeFw0yNDAzMjAyMzE3MTlaFw0yNTAzMTkyMzIyMTlaMDMxMTAvBgNV
BAMTKDA5ODMzMzE4REE2N0E2RUNBOTYzNzUzNTkzMEJDNzI3OTdFMkE3RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmSmU+bD7h899rKzh3q6xJDFM
zancaeczoa4VDyvnWCewkazqNJmHfHtfa95zXrWarAgn8k5lhdkF08H4dNgI6HS0
ewghc9TNfl6aARz45QNFoUYEY3qIiLOMrzPEpJMn5k/LVWMJvYxn6X+Le1OW+Boi
Bx5eQ25NRDHA4QiEtgstMlLvCr3LWM55d3Jb8KD6HJ99xOMQQSYsUqRCJrsVgBRe
XyROUfFIiJ4/LioLRhI2PJexI/6ceEWrJIwKqf1kU+DUWlpS3ckjji8WfgYV1lmy
jXNhbSWplAucKbejDE3HkQ5htIwV/+unbUXmcw/91abWDVYamfGW9vRAbe8xAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCYMzGNpnpuypY3U1kwvHJ5fip9UwHwYDVR0j
BBgwFoAUPCOd28vqs6zQMU8AvgnYejVAgi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWl6UFdReGRRaXlUdmFmN3lKcWh6NWZYRlNwVVJTd2l1QlRCMXdza0ha
NEIvMC8zQzIzOUREQkNCRUFCM0FDRDAzMTRGMDBCRTA5RDg3QTM1NDA4MjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDMjM5RERCQ0JFQUIzQUNE
MDMxNEYwMEJFMDlEODdBMzU0MDgyMkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpelBXUXhkUWl5VHZhZjd5SnFoejVmWEZTcFVSU3dpdUJUQjF3c2tIWjRCLzAv
MzIzMDMxMmUzMjMxMzYyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMjM2MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnYazANBgkqhkiG9w0BAQsFAAOCAQEALAWv
kX1vsWcTrdN3AZCFp6oE1JfzdCPRAdr5RH+a4EQxaubFIbNmCzeg7mExT1VoswVA
VsVOXqMPcVR7dQjKA4LR3ezgTtt0HErPWBOzBRcCR6YEFtK6/FvRzMDcce7JpOR2
/d3HJDc7sd3zOSLG/iLvU7PSO7RX5qSaTqU+n9qIP0E8pdzh81N4KFK+79zM4eWe
MT4oe+GS0aPKoEuJlwdy1kVb/z47ofoyF7vFHJHrS4BMVVWGinBpcxIFE98MbZVI
hwXBvjfPzv6bCEXq/JUe4rnm7F+5HvonGrcr0W653hHeJa3T0U4PRlu12S5omYuW
hEo2uW7DX+t4F9qaxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org