Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130342e302f32322d3234203d3e20323730363834.roa
File:                     3230302e3138372e3130342e302f32322d3234203d3e20323730363834.roa (raw, json)
Hash identifier:          yoVe3DUY7svH/OHmVnF3uBKXx7I4udurl59VRfnVzvU=
Subject key identifier:   C6:1B:CF:BE:8F:03:32:DD:40:64:20:6C:20:8D:8B:3F:A0:F9:9B:E3
Certificate issuer:       /CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
Certificate serial:       3EFECB3FCF6A0E5B8D365C30D3DB5BEEB7BD4F16
Authority key identifier: 52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130342e302f32322d3234203d3e20323730363834.roa
Signing time:             Sat 03 Feb 2024 23:32:56 +0000
ROA not before:           Sat 03 Feb 2024 23:27:56 +0000
ROA not after:            Sat 01 Feb 2025 23:32:56 +0000
asID:                     270684
IP address blocks:        200.187.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fe:cb:3f:cf:6a:0e:5b:8d:36:5c:30:d3:db:5b:ee:b7:bd:4f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Validity
            Not Before: Feb  3 23:27:56 2024 GMT
            Not After : Feb  1 23:32:56 2025 GMT
        Subject: CN=C61BCFBE8F0332DD4064206C208D8B3FA0F99BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:3b:e4:4d:9b:1f:ec:22:44:6b:72:c9:5a:
                    99:49:5a:3b:c6:9e:15:a2:df:c1:c8:e5:07:9c:c7:
                    2d:60:f5:64:74:b3:4e:d9:c8:a2:87:e1:bc:57:f2:
                    07:4a:a8:bb:2c:27:b8:31:d4:35:1d:bc:09:0e:26:
                    a4:fb:61:2a:51:45:bd:77:d0:fb:18:a9:05:06:b5:
                    e6:0b:4d:9d:42:d5:98:cd:a3:19:f7:81:cc:4c:30:
                    4f:d3:33:e5:da:a1:05:7f:77:25:12:e2:6f:a2:f7:
                    b0:16:2b:25:d9:82:68:40:38:a4:99:7d:73:33:1c:
                    08:47:1d:80:3d:2c:9b:4d:4e:73:3e:a2:37:9f:d9:
                    af:9f:48:6e:b7:e3:38:32:e6:be:8d:50:d9:9b:6b:
                    a3:d5:2f:ab:65:27:7c:2b:26:20:ec:4f:ac:20:c2:
                    e3:da:ce:a0:ba:6c:50:03:a1:61:1b:5d:08:92:15:
                    51:c0:7c:6a:71:d0:27:7f:0d:cc:dc:18:fd:e5:6b:
                    7a:73:ae:78:37:7a:49:68:00:38:9b:7f:cc:a2:27:
                    eb:3f:21:13:1c:16:23:9f:26:4d:57:82:3d:8d:ab:
                    6b:dd:e3:d1:aa:6f:b9:3d:f8:fb:0c:51:0b:66:de:
                    01:c3:4a:36:1e:92:8d:ca:73:8a:66:53:1a:7a:8d:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1B:CF:BE:8F:03:32:DD:40:64:20:6C:20:8D:8B:3F:A0:F9:9B:E3
            X509v3 Authority Key Identifier:
                keyid:52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/3230302e3138372e3130342e302f32322d3234203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:59:11:43:62:65:03:ec:19:f8:8b:16:b2:6a:f6:de:6c:9d:
         b1:1d:1f:6f:92:31:fb:e8:ee:6d:e5:d4:8d:b5:be:fd:25:d2:
         c1:22:f4:20:c6:27:7b:be:c4:b8:68:ab:35:7e:63:6e:7c:2b:
         9a:40:78:dd:26:a0:cc:c7:7a:3b:31:5f:36:c9:bd:95:f8:b8:
         ea:5f:db:90:ce:1f:05:ee:d9:32:51:9c:d2:d7:61:a3:a9:81:
         6b:09:9b:15:52:0a:23:61:c5:15:d6:13:2c:ad:28:d8:90:4e:
         5c:71:f4:33:d8:41:f1:6b:0c:8e:48:c0:49:e5:52:25:f7:ef:
         3f:b5:cd:2f:31:42:c7:40:04:92:ff:53:0b:1c:68:4a:b5:49:
         14:1e:ab:80:f2:ef:21:e8:fb:20:11:05:44:e6:68:19:22:05:
         52:56:08:31:fe:e0:d5:02:e5:a9:2f:f1:34:60:28:e0:1d:65:
         21:ac:45:36:94:e5:6c:60:74:dc:b3:af:2b:91:09:83:74:a5:
         cd:6d:4f:43:54:a5:a7:22:30:18:f4:33:0d:5b:3a:d4:4c:e8:
         c4:72:b8:3a:b6:02:b7:5a:21:74:9b:16:5d:35:9f:11:76:c9:
         b0:f0:30:52:e5:ca:a0:fe:e3:a8:19:28:c3:b3:59:f0:8e:70:
         d6:7a:e9:fd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPv7LP89qDluNNlww09tb7re9TxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJBQzdCRUZCRkQ0RTU3MjY3ODczMjkxQUE5QTc0RTc5
RTgyQjMxQjAeFw0yNDAyMDMyMzI3NTZaFw0yNTAyMDEyMzMyNTZaMDMxMTAvBgNV
BAMTKEM2MUJDRkJFOEYwMzMyREQ0MDY0MjA2QzIwOEQ4QjNGQTBGOTlCRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KjvkTZsf7CJEa3LJWplJWjvG
nhWi38HI5Qecxy1g9WR0s07ZyKKH4bxX8gdKqLssJ7gx1DUdvAkOJqT7YSpRRb13
0PsYqQUGteYLTZ1C1ZjNoxn3gcxMME/TM+XaoQV/dyUS4m+i97AWKyXZgmhAOKSZ
fXMzHAhHHYA9LJtNTnM+ojef2a+fSG634zgy5r6NUNmba6PVL6tlJ3wrJiDsT6wg
wuPazqC6bFADoWEbXQiSFVHAfGpx0Cd/DczcGP3la3pzrng3ekloADibf8yiJ+s/
IRMcFiOfJk1Xgj2Nq2vd49Gqb7k9+PsMUQtm3gHDSjYeko3Kc4pmUxp6jZs3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxhvPvo8DMt1AZCBsII2LP6D5m+MwHwYDVR0j
BBgwFoAUUqx777/U5XJnhzKRqpp0556CsxswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlhcTR1VFFLUXpMZHV5eHRSdXFucGZUMlF3QndOMmM1b2NMUXBZQnpp
NnYvMC81MkFDN0JFRkJGRDRFNTcyNjc4NzMyOTFBQTlBNzRFNzlFODJCMzFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyQUM3QkVGQkZENEU1NzI2
Nzg3MzI5MUFBOUE3NEU3OUU4MkIzMUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZYXE0dVRRS1F6TGR1eXh0UnVxbnBmVDJRd0J3TjJjNW9jTFFwWUJ6aTZ2LzAv
MzIzMDMwMmUzMTM4MzcyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsi7aDANBgkqhkiG9w0BAQsFAAOCAQEAd1kR
Q2JlA+wZ+IsWsmr23mydsR0fb5Ix++jubeXUjbW+/SXSwSL0IMYne77EuGirNX5j
bnwrmkB43SagzMd6OzFfNsm9lfi46l/bkM4fBe7ZMlGc0tdho6mBawmbFVIKI2HF
FdYTLK0o2JBOXHH0M9hB8WsMjkjASeVSJffvP7XNLzFCx0AEkv9TCxxoSrVJFB6r
gPLvIej7IBEFROZoGSIFUlYIMf7g1QLlqS/xNGAo4B1lIaxFNpTlbGB03LOvK5EJ
g3SlzW1PQ1SlpyIwGPQzDVs61EzoxHK4OrYCt1ohdJsWXTWfEXbJsPAwUuXKoP7j
qBkow7NZ8I5w1nrp/Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org