Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36322e302f32342d3234203d3e20323730383034.roa
File:                     3230302e3231392e36322e302f32342d3234203d3e20323730383034.roa (raw, json)
Hash identifier:          nN0yTxlWKNY41DGCobhME6IWXe4eC2H6IEiFudYi6WI=
Subject key identifier:   A2:4B:9B:FF:66:00:83:01:38:91:92:55:8F:E8:26:55:55:EC:3E:45
Certificate issuer:       /CN=11940404721F06E74ACB28F99297DF2466241940
Certificate serial:       0AB2FA058004EA21FEB2FC407FC80F65B1DB0E10
Authority key identifier: 11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36322e302f32342d3234203d3e20323730383034.roa
Signing time:             Wed 27 Jul 2022 19:26:28 +0000
ROA not before:           Wed 27 Jul 2022 19:21:28 +0000
ROA not after:            Thu 27 Jul 2023 19:26:28 +0000
asID:                     270804
IP address blocks:        200.219.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b2:fa:05:80:04:ea:21:fe:b2:fc:40:7f:c8:0f:65:b1:db:0e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11940404721F06E74ACB28F99297DF2466241940
        Validity
            Not Before: Jul 27 19:21:28 2022 GMT
            Not After : Jul 27 19:26:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:d9:c4:6f:a1:cb:4e:76:05:94:56:bf:b2:
                    dc:68:91:d0:e2:76:22:65:10:c1:bd:5b:5f:78:05:
                    00:50:16:3e:f7:62:84:ab:3c:11:a0:f6:9f:24:3e:
                    7f:4c:0b:b4:23:12:0f:e7:56:4a:23:31:ba:1a:df:
                    cd:7f:b0:86:99:6d:27:bd:dc:bb:42:5e:88:23:f2:
                    18:45:8e:9d:fc:7d:de:f4:af:e5:33:7e:65:c3:47:
                    0c:08:b2:ac:9a:f4:c0:19:bf:2d:d7:5f:a2:bf:8a:
                    b9:69:46:e1:82:4f:53:15:b8:cb:98:6f:5a:a7:cb:
                    98:91:cf:ab:2d:18:28:bc:3a:d1:be:10:d8:23:ee:
                    fa:a9:a8:13:cb:a2:74:a3:b2:d6:43:7c:12:46:bc:
                    fe:57:25:d2:fa:9c:e6:96:8a:2c:01:d1:ea:d5:55:
                    31:40:84:97:d3:97:75:38:90:2e:fe:2b:52:08:c7:
                    b0:e4:dd:c7:6a:25:b8:f2:17:a7:ef:91:4e:2b:fe:
                    b0:51:56:37:4f:d8:c3:d0:38:1a:64:bf:18:7d:a7:
                    43:ff:36:1d:14:46:7e:2f:6b:08:96:87:3f:55:be:
                    d6:63:89:3c:26:9d:bd:24:09:16:ef:b8:fa:1b:66:
                    de:c3:d9:86:a3:97:d3:e1:0d:5a:c3:1f:6a:a1:b6:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4B:9B:FF:66:00:83:01:38:91:92:55:8F:E8:26:55:55:EC:3E:45
            X509v3 Authority Key Identifier:
                keyid:11:94:04:04:72:1F:06:E7:4A:CB:28:F9:92:97:DF:24:66:24:19:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11940404721F06E74ACB28F99297DF2466241940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11940404721F06E74ACB28F99297DF2466241940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36322e302f32342d3234203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:a0:a4:5a:41:20:f7:c1:28:ff:ab:58:ca:a3:63:55:7a:
         2b:66:59:f6:8e:06:93:08:f2:c6:4b:f7:88:8a:48:45:11:6a:
         9a:27:82:d5:c2:17:9f:1a:74:21:79:07:fc:92:98:86:34:1a:
         e0:63:91:88:e1:35:32:3e:45:45:36:ed:13:b6:63:f2:9a:1e:
         36:c0:f0:ea:4a:04:c9:95:25:ec:a8:03:81:3c:c7:cb:f6:a6:
         cf:95:e5:17:fe:b4:d1:bb:df:d8:cc:93:47:7d:fa:ed:9a:0e:
         85:22:fa:9a:3c:84:d8:c2:65:2e:b2:9d:6c:88:73:b5:4f:0c:
         0e:94:f4:74:c6:f6:94:be:8b:5b:9c:b6:8c:0e:4a:d3:2f:ea:
         5a:95:df:44:90:2e:f7:bc:0d:a0:f6:9f:0e:6f:77:a6:6c:45:
         7f:39:e5:c8:70:27:5a:c4:bc:e8:c7:0d:d7:9a:8b:b3:3e:8a:
         47:4b:7a:b4:2a:67:5a:a0:10:8e:45:97:12:e6:69:5a:46:f3:
         49:7f:60:69:9b:09:d9:9f:35:80:f5:54:50:87:23:cd:83:dd:
         a5:dc:64:a3:79:73:8d:d9:b9:6c:83:66:db:53:82:44:8c:3e:
         c4:a0:f7:e2:83:7d:d7:c0:3b:4c:a4:af:f2:da:fb:14:9a:db:
         f4:a3:d9:f6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUCrL6BYAE6iH+svxAf8gPZbHbDhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE5NDA0MDQ3MjFGMDZFNzRBQ0IyOEY5OTI5N0RGMjQ2
NjI0MTk0MDAeFw0yMjA3MjcxOTIxMjhaFw0yMzA3MjcxOTI2MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFCRUQ5QzQ2RkExQ0I0RTc2
MDU5NDU2QkZCMkRDNjg5MUQwRTI3NjIyNjUxMEMxQkQ1QjVGNzgwNTAwNTAxNjNF
Rjc2Mjg0QUIzQzExQTBGNjlGMjQzRTdGNEMwQkI0MjMxMjBGRTc1NjRBMjMzMUJB
MUFERkNEN0ZCMDg2OTk2RDI3QkREQ0JCNDI1RTg4MjNGMjE4NDU4RTlERkM3RERF
RjRBRkU1MzM3RTY1QzM0NzBDMDhCMkFDOUFGNEMwMTlCRjJERDc1RkEyQkY4QUI5
Njk0NkUxODI0RjUzMTVCOENCOTg2RjVBQTdDQjk4OTFDRkFCMkQxODI4QkMzQUQx
QkUxMEQ4MjNFRUZBQTlBODEzQ0JBMjc0QTNCMkQ2NDM3QzEyNDZCQ0ZFNTcyNUQy
RkE5Q0U2OTY4QTJDMDFEMUVBRDU1NTMxNDA4NDk3RDM5Nzc1Mzg5MDJFRkUyQjUy
MDhDN0IwRTREREM3NkEyNUI4RjIxN0E3RUY5MTRFMkJGRUIwNTE1NjM3NEZEOEMz
RDAzODFBNjRCRjE4N0RBNzQzRkYzNjFEMTQ0NjdFMkY2QjA4OTY4NzNGNTVCRUQ2
NjM4OTNDMjY5REJEMjQwOTE2RUZCOEZBMUI2NkRFQzNEOTg2QTM5N0QzRTEwRDVB
QzMxRjZBQTFCNkRDQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAur7ZxG+hy052BZRWv7LcaJHQ4nYiZRDBvVtfeAUAUBY+92KEqzwR
oPafJD5/TAu0IxIP51ZKIzG6Gt/Nf7CGmW0nvdy7Ql6II/IYRY6d/H3e9K/lM35l
w0cMCLKsmvTAGb8t11+iv4q5aUbhgk9TFbjLmG9ap8uYkc+rLRgovDrRvhDYI+76
qagTy6J0o7LWQ3wSRrz+VyXS+pzmloosAdHq1VUxQISX05d1OJAu/itSCMew5N3H
aiW48hen75FOK/6wUVY3T9jD0DgaZL8YfadD/zYdFEZ+L2sIloc/Vb7WY4k8Jp29
JAkW77j6G2bew9mGo5fT4Q1awx9qobbcqQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKJLm/9mAIMBOJGSVY/oJlVV7D5FMB8GA1UdIwQYMBaAFBGUBARyHwbnSsso+ZKX
3yRmJBlAMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ExMnFyRVVxaDE5RzFU
bnRlS3RBWGM3UnYzWWRqTHlYcGppcXFtS3lrYUVZLzAvMTE5NDA0MDQ3MjFGMDZF
NzRBQ0IyOEY5OTI5N0RGMjQ2NjI0MTk0MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xMTk0MDQwNDcyMUYwNkU3NEFDQjI4Rjk5Mjk3REYyNDY2MjQx
OTQwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMTJxckVVcWgxOUcxVG50ZUt0
QVhjN1J2M1lkakx5WHBqaXFxbUt5a2FFWS8wLzMyMzAzMDJlMzIzMTM5MmUzNjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzgzMDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
yNs+MA0GCSqGSIb3DQEBCwUAA4IBAQADxqCkWkEg98Eo/6tYyqNjVXorZln2jgaT
CPLGS/eIikhFEWqaJ4LVwhefGnQheQf8kpiGNBrgY5GI4TUyPkVFNu0TtmPymh42
wPDqSgTJlSXsqAOBPMfL9qbPleUX/rTRu9/YzJNHffrtmg6FIvqaPITYwmUusp1s
iHO1TwwOlPR0xvaUvotbnLaMDkrTL+pald9EkC73vA2g9p8Ob3embEV/OeXIcCda
xLzoxw3XmouzPopHS3q0KmdaoBCORZcS5mlaRvNJf2BpmwnZnzWA9VRQhyPNg92l
3GSjeXON2blsg2bbU4JEjD7EoPfig33XwDtMpK/y2vsUmtv0o9n2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org