Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3135322e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3135322e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          3VK2pdXTGzzNBIbxDqDZPnwnSZi7sujiT5PtmNsfGhU=
Subject key identifier:   41:AE:4B:3B:28:35:4F:1E:5E:7D:AE:9A:D4:DD:99:FE:EC:DC:37:E1
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       046BAD7C71D5205ACD37E2473F18722F5910EC35
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3135322e302f32332d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:33:09 +0000
ROA not before:           Wed 10 Jan 2024 17:28:09 +0000
ROA not after:            Wed 08 Jan 2025 17:33:09 +0000
asID:                     265303
IP address blocks:        201.87.152.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6b:ad:7c:71:d5:20:5a:cd:37:e2:47:3f:18:72:2f:59:10:ec:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:28:09 2024 GMT
            Not After : Jan  8 17:33:09 2025 GMT
        Subject: CN=41AE4B3B28354F1E5E7DAE9AD4DD99FEECDC37E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:25:38:38:83:70:73:a4:d3:e6:8e:e2:46:24:
                    70:72:3b:60:0f:75:ee:ed:65:95:54:02:54:0f:8c:
                    09:0a:85:fa:2e:33:be:5a:13:42:26:19:64:54:bc:
                    e4:8e:55:76:47:a1:4d:b6:1a:1b:47:3c:02:d5:d0:
                    5f:b4:f4:74:0a:66:a2:c3:30:72:bb:0c:39:94:28:
                    37:30:d8:5c:b7:17:bf:96:a3:07:c4:54:58:10:f5:
                    b8:0f:d6:93:08:4f:c6:df:f7:d5:26:e5:3c:ff:24:
                    9c:e8:7f:ed:f0:57:1e:f2:fd:9f:ed:19:52:ff:50:
                    d0:95:45:59:aa:3d:9f:1e:06:6b:6f:77:16:3b:68:
                    36:58:0c:53:1c:59:05:64:5f:e1:7e:c0:1d:cc:70:
                    b2:1f:2e:5b:b2:a1:94:32:f3:83:67:2c:1d:30:e6:
                    fd:16:b1:1a:7c:4d:a2:73:89:6a:3d:58:c3:c7:f9:
                    0d:56:0e:2e:8b:67:86:24:2a:70:e6:1b:89:d0:a2:
                    e3:c3:3f:82:47:57:ea:e9:dd:91:30:48:78:91:c7:
                    34:99:90:1f:19:dd:48:08:b1:39:22:5c:3b:7b:23:
                    58:51:27:a0:90:c7:95:33:4c:59:0c:ca:3e:1e:76:
                    6d:78:da:af:32:f8:98:62:a4:57:0c:91:9c:36:f3:
                    b0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:4B:3B:28:35:4F:1E:5E:7D:AE:9A:D4:DD:99:FE:EC:DC:37:E1
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3135322e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:c0:b1:a6:bb:33:39:d1:94:f5:15:ab:c8:6a:32:a1:a2:0a:
         68:ac:07:20:48:19:76:22:f2:ef:bf:50:84:4d:c2:dc:46:31:
         c3:27:35:5e:67:84:0a:8c:ab:41:b3:41:02:54:ae:0d:c2:fb:
         92:23:88:23:9f:90:a9:9f:9e:6e:47:01:e4:36:73:db:c0:d8:
         e5:1d:c8:f4:86:b0:29:7e:c0:b2:38:b4:0f:4e:7d:f1:dc:cf:
         9f:68:d9:45:1e:f1:f5:97:fb:66:c1:81:88:be:7e:98:33:03:
         c7:b0:2e:e0:35:cd:c1:89:60:76:36:75:91:bb:21:03:aa:53:
         b7:bf:dc:34:00:47:9a:96:9a:63:d2:87:e0:d4:8d:c3:67:74:
         5e:c0:bc:41:9c:80:03:71:14:b3:65:36:f7:18:89:73:e8:11:
         3d:f7:d9:99:46:e0:0a:b4:91:ac:8d:db:7d:1c:2c:8f:1c:94:
         b0:02:df:2e:63:f8:2f:2e:b6:c1:38:a9:1e:af:65:ff:a2:f1:
         2f:33:92:50:e5:e7:27:57:1d:da:43:b3:be:34:37:4d:d6:19:
         47:d5:62:35:38:a8:92:fe:b3:36:38:39:fd:45:33:e5:e6:ab:
         9d:5f:f2:06:50:ee:f0:cf:21:33:9f:5d:7d:e4:df:16:af:5c:
         0d:3e:97:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBGutfHHVIFrNN+JHPxhyL1kQ7DUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzNjQzNDE1RDREQ0Q0Q0QwREQ0RTQxMUQxQTI2MUZG
NDdBNUJERTAeFw0yNDAxMTAxNzI4MDlaFw0yNTAxMDgxNzMzMDlaMDMxMTAvBgNV
BAMTKDQxQUU0QjNCMjgzNTRGMUU1RTdEQUU5QUQ0REQ5OUZFRUNEQzM3RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtJTg4g3BzpNPmjuJGJHByO2AP
de7tZZVUAlQPjAkKhfouM75aE0ImGWRUvOSOVXZHoU22GhtHPALV0F+09HQKZqLD
MHK7DDmUKDcw2Fy3F7+WowfEVFgQ9bgP1pMIT8bf99Um5Tz/JJzof+3wVx7y/Z/t
GVL/UNCVRVmqPZ8eBmtvdxY7aDZYDFMcWQVkX+F+wB3McLIfLluyoZQy84NnLB0w
5v0WsRp8TaJziWo9WMPH+Q1WDi6LZ4YkKnDmG4nQouPDP4JHV+rp3ZEwSHiRxzSZ
kB8Z3UgIsTkiXDt7I1hRJ6CQx5UzTFkMyj4edm142q8y+JhipFcMkZw287BBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQa5LOyg1Tx5efa6a1N2Z/uzcN+EwHwYDVR0j
BBgwFoAURDZDQV1NzUzQ3U5BHRomH/R6W94wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW43RnZEM1F4UExFWHM4SHBnV1V1cEhxQmhQVnNKR0tIOEdFa1JwVnB0
N1gvMC80NDM2NDM0MTVENERDRDRDRDBERDRFNDExRDFBMjYxRkY0N0E1QkRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0MzY0MzQxNUQ0RENENENE
MERENEU0MTFEMUEyNjFGRjQ3QTVCREUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzluN0Z2RDNReFBMRVhzOEhwZ1dVdXBIcUJoUFZzSkdLSDhHRWtScFZwdDdYLzAv
MzIzMDMxMmUzODM3MmUzMTM1MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJV5gwDQYJKoZIhvcNAQELBQADggEBAKXAsaa7
MznRlPUVq8hqMqGiCmisByBIGXYi8u+/UIRNwtxGMcMnNV5nhAqMq0GzQQJUrg3C
+5IjiCOfkKmfnm5HAeQ2c9vA2OUdyPSGsCl+wLI4tA9OffHcz59o2UUe8fWX+2bB
gYi+fpgzA8ewLuA1zcGJYHY2dZG7IQOqU7e/3DQAR5qWmmPSh+DUjcNndF7AvEGc
gANxFLNlNvcYiXPoET332ZlG4Aq0kayN230cLI8clLAC3y5j+C8utsE4qR6vZf+i
8S8zklDl5ydXHdpDs740N03WGUfVYjU4qJL+szY4Of1FM+Xmq51f8gZQ7vDPITOf
XX3k3xavXA0+l6k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org