Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3232203d3e20323730383034.roa
File:                     3230302e3231392e36302e302f32322d3232203d3e20323730383034.roa (raw, json)
Hash identifier:          fkHWZndLMaHKxpllACF6L8RQVOl7z7tUeMN4GgIVgII=
Subject key identifier:   9B:56:A6:AD:FA:AF:D1:DC:87:D9:5F:73:8D:04:8C:64:E7:E3:B4:33
Certificate issuer:       /CN=11940404721F06E74ACB28F99297DF2466241940
Certificate serial:       01D0561588D548FF0A35640DFC5F83D40A1CFFA2
Authority key identifier: 11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3232203d3e20323730383034.roa
Signing time:             Wed 27 Jul 2022 14:26:22 +0000
ROA not before:           Wed 27 Jul 2022 14:21:22 +0000
ROA not after:            Thu 27 Jul 2023 14:26:22 +0000
asID:                     270804
IP address blocks:        200.219.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d0:56:15:88:d5:48:ff:0a:35:64:0d:fc:5f:83:d4:0a:1c:ff:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11940404721F06E74ACB28F99297DF2466241940
        Validity
            Not Before: Jul 27 14:21:22 2022 GMT
            Not After : Jul 27 14:26:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:d6:0d:a6:d3:c7:d8:b7:7b:b3:92:77:ee:
                    0e:6b:ce:8d:8e:ad:04:24:c9:69:8f:6d:fa:b2:d9:
                    ad:fe:1e:48:62:48:f2:00:1e:e9:5e:ed:9e:7c:1c:
                    25:44:6a:60:81:22:1a:c6:a7:21:d8:6a:59:fa:86:
                    f7:d9:38:da:ce:12:1e:0a:26:27:59:cb:e1:0b:4c:
                    a3:c2:2d:0c:2e:a8:7c:78:71:ce:b4:2b:78:79:27:
                    b8:71:7f:87:1f:fb:57:4b:c5:f9:eb:9f:e7:1c:67:
                    7c:5d:0b:d8:1e:d8:f8:60:bd:5c:ba:62:79:7e:41:
                    24:1e:5f:d2:4c:83:82:69:8a:0b:24:06:00:79:bb:
                    e5:64:de:bc:91:11:8a:5e:87:ea:93:e1:ff:d8:24:
                    f0:15:af:f4:55:a8:e5:a9:6e:77:74:2f:b0:ab:71:
                    2f:6a:7c:4e:61:c4:c1:74:90:06:a3:ff:8a:19:d8:
                    05:39:2b:d9:a0:5f:57:76:9b:d3:0b:d7:f3:7d:59:
                    8e:ed:46:8c:59:06:64:b6:01:71:eb:80:6c:a4:38:
                    b3:d4:72:e6:81:f8:e6:d3:74:99:be:6a:63:1b:93:
                    b8:c9:76:b3:29:ef:27:d1:71:c3:fe:2d:bb:2a:dc:
                    b9:b5:f9:55:a7:4c:ae:a4:e6:56:ff:0b:0a:de:b6:
                    45:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:56:A6:AD:FA:AF:D1:DC:87:D9:5F:73:8D:04:8C:64:E7:E3:B4:33
            X509v3 Authority Key Identifier:
                keyid:11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11940404721F06E74ACB28F99297DF2466241940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32322d3232203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:e7:ce:8d:53:b3:96:8c:99:ae:29:e0:52:12:c3:f7:4d:cf:
         bc:0c:24:1f:5a:b3:0b:99:21:1e:21:c5:0d:0d:61:1e:91:02:
         45:fb:3f:8f:fe:51:2e:f7:89:bc:54:93:ae:fd:fd:e7:f6:8d:
         5e:0c:03:c3:17:c1:75:e1:e0:05:09:3f:1f:db:9c:ce:18:91:
         5e:ac:1e:1b:77:3c:b6:fd:91:64:a5:f8:c6:aa:10:c2:d4:20:
         cf:69:a7:ce:00:56:df:98:03:0a:19:cc:1a:68:d1:4a:85:b4:
         80:ff:76:d4:2f:b0:5a:e0:2a:c7:70:6d:63:8e:33:af:f4:21:
         25:52:7b:7a:82:d4:6c:70:c5:bf:97:b5:11:83:ef:e0:73:fc:
         09:81:55:25:b6:c4:b1:62:c3:47:10:ed:9a:53:84:c0:89:b6:
         73:f8:a6:cd:3d:ea:04:9a:54:db:10:a5:b0:1b:ce:52:2e:4b:
         70:f6:ed:10:0d:49:72:2b:e7:2e:5f:04:ff:1f:a5:51:c8:aa:
         6f:42:c6:ca:7f:b3:f5:7f:a1:d8:94:e3:d8:96:c6:7d:f8:ac:
         4a:e8:f2:ac:bb:11:40:74:25:2d:9d:26:8b:b5:71:27:b0:61:
         04:3b:4b:85:7d:b6:eb:d3:87:66:14:e5:32:aa:41:38:28:ad:
         99:2d:d9:4a
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUAdBWFYjVSP8KNWQN/F+D1Aoc/6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE5NDA0MDQ3MjFGMDZFNzRBQ0IyOEY5OTI5N0RGMjQ2
NjI0MTk0MDAeFw0yMjA3MjcxNDIxMjJaFw0yMzA3MjcxNDI2MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREExN0Q2MERBNkQzQzdEOEI3
N0JCMzkyNzdFRTBFNkJDRThEOEVBRDA0MjRDOTY5OEY2REZBQjJEOUFERkUxRTQ4
NjI0OEYyMDAxRUU5NUVFRDlFN0MxQzI1NDQ2QTYwODEyMjFBQzZBNzIxRDg2QTU5
RkE4NkY3RDkzOERBQ0UxMjFFMEEyNjI3NTlDQkUxMEI0Q0EzQzIyRDBDMkVBODdD
Nzg3MUNFQjQyQjc4NzkyN0I4NzE3Rjg3MUZGQjU3NEJDNUY5RUI5RkU3MUM2NzdD
NUQwQkQ4MUVEOEY4NjBCRDVDQkE2Mjc5N0U0MTI0MUU1RkQyNEM4MzgyNjk4QTBC
MjQwNjAwNzlCQkU1NjRERUJDOTExMThBNUU4N0VBOTNFMUZGRDgyNEYwMTVBRkY0
NTVBOEU1QTk2RTc3NzQyRkIwQUI3MTJGNkE3QzRFNjFDNEMxNzQ5MDA2QTNGRjhB
MTlEODA1MzkyQkQ5QTA1RjU3NzY5QkQzMEJEN0YzN0Q1OThFRUQ0NjhDNTkwNjY0
QjYwMTcxRUI4MDZDQTQzOEIzRDQ3MkU2ODFGOEU2RDM3NDk5QkU2QTYzMUI5M0I4
Qzk3NkIzMjlFRjI3RDE3MUMzRkUyREJCMkFEQ0I5QjVGOTU1QTc0Q0FFQTRFNjU2
RkYwQjBBREVCNjQ1RDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2hfWDabTx9i3e7OSd+4Oa86Njq0EJMlpj236stmt/h5IYkjyAB7p
Xu2efBwlRGpggSIaxqch2GpZ+ob32TjazhIeCiYnWcvhC0yjwi0MLqh8eHHOtCt4
eSe4cX+HH/tXS8X565/nHGd8XQvYHtj4YL1cumJ5fkEkHl/STIOCaYoLJAYAebvl
ZN68kRGKXofqk+H/2CTwFa/0VajlqW53dC+wq3EvanxOYcTBdJAGo/+KGdgFOSvZ
oF9XdpvTC9fzfVmO7UaMWQZktgFx64BspDiz1HLmgfjm03SZvmpjG5O4yXazKe8n
0XHD/i27Kty5tflVp0yupOZW/wsK3rZF1wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJtWpq36r9Hch9lfc40EjGTn47QzMB8GA1UdIwQYMBaAFBGUBARyHwbnSsso+ZKX
3yRmJBlAMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ExMnFyRVVxaDE5RzFU
bnRlS3RBWGM3UnYzWWRqTHlYcGppcXFtS3lrYUVZLzAvMTE5NDA0MDQ3MjFGMDZF
NzRBQ0IyOEY5OTI5N0RGMjQ2NjI0MTk0MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xMTk0MDQwNDcyMUYwNkU3NEFDQjI4Rjk5Mjk3REYyNDY2MjQx
OTQwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMTJxckVVcWgxOUcxVG50ZUt0
QVhjN1J2M1lkakx5WHBqaXFxbUt5a2FFWS8wLzMyMzAzMDJlMzIzMTM5MmUzNjMw
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMwMzgzMDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
yNs8MA0GCSqGSIb3DQEBCwUAA4IBAQCS586NU7OWjJmuKeBSEsP3Tc+8DCQfWrML
mSEeIcUNDWEekQJF+z+P/lEu94m8VJOu/f3n9o1eDAPDF8F14eAFCT8f25zOGJFe
rB4bdzy2/ZFkpfjGqhDC1CDPaafOAFbfmAMKGcwaaNFKhbSA/3bUL7Ba4CrHcG1j
jjOv9CElUnt6gtRscMW/l7URg+/gc/wJgVUltsSxYsNHEO2aU4TAibZz+KbNPeoE
mlTbEKWwG85SLktw9u0QDUlyK+cuXwT/H6VRyKpvQsbKf7P1f6HYlOPYlsZ9+KxK
6PKsuxFAdCUtnSaLtXEnsGEEO0uFfbbr04dmFOUyqkE4KK2ZLdlK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org