Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa
File:                     3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (raw, json)
Hash identifier:          jEFKKiC0zYqxdfmb2eYiakA6zRCncTxl/FTRfRQqjbU=
Subject key identifier:   B5:29:49:AA:43:D3:94:35:EB:63:9B:7D:85:08:22:64:CB:AC:A5:13
Certificate issuer:       /CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
Certificate serial:       1C607904470E4B8EDA559B4307FE2F23975B5A1F
Authority key identifier: 8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa
Signing time:             Fri 19 May 2023 17:20:22 +0000
ROA not before:           Fri 19 May 2023 17:15:22 +0000
ROA not after:            Fri 17 May 2024 17:20:22 +0000
asID:                     271367
IP address blocks:        200.36.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:60:79:04:47:0e:4b:8e:da:55:9b:43:07:fe:2f:23:97:5b:5a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
        Validity
            Not Before: May 19 17:15:22 2023 GMT
            Not After : May 17 17:20:22 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:0c:0a:8a:68:2a:97:80:6e:b6:fa:99:40:
                    76:b3:ba:0e:6b:54:64:45:3f:51:21:c5:af:2c:a6:
                    e3:d8:59:07:f5:d1:68:be:a5:b6:05:7b:b6:4b:85:
                    88:c1:eb:53:cc:05:21:fb:07:3b:d6:42:9a:4c:09:
                    ad:25:89:d7:ee:cf:1d:86:f6:79:84:b1:97:3f:34:
                    f6:2d:19:8b:d5:f7:eb:74:27:fc:98:fe:6c:95:30:
                    80:03:cc:32:7f:61:a0:db:5c:b4:bc:c1:68:a2:07:
                    7c:61:ce:06:43:ae:18:11:56:c7:f3:36:01:9a:ca:
                    b3:29:87:1e:76:22:14:c5:8d:ca:9f:ef:13:38:ae:
                    0a:88:4a:8b:74:0c:77:6b:a9:71:e4:2d:52:37:1e:
                    ef:d3:ae:d1:ce:bd:51:8a:1f:50:db:62:ac:97:0c:
                    d8:54:2e:a6:f3:d3:77:ec:a5:9f:f4:e3:52:bd:fd:
                    19:78:a5:34:ad:db:14:78:67:a0:62:77:8d:12:82:
                    7d:68:51:93:dc:2d:47:64:96:78:12:6f:f2:a2:54:
                    fc:ea:66:2b:c7:e8:77:96:40:95:ac:f7:3b:85:fa:
                    d7:cd:fa:2b:7e:be:e7:62:58:84:51:d0:54:85:ad:
                    a1:0b:50:3a:6c:a9:02:8d:e4:bd:9b:b8:a6:d5:12:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:49:AA:43:D3:94:35:EB:63:9B:7D:85:08:22:64:CB:AC:A5:13
            X509v3 Authority Key Identifier:
                keyid:8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:c6:cc:52:ed:fb:79:a4:58:de:22:39:d8:f0:a1:c1:56:ca:
         71:0e:c1:c9:bf:39:0d:c1:56:96:10:0b:5a:51:de:68:6a:09:
         f5:9e:e9:62:51:69:8a:7a:37:a0:8d:a8:30:83:71:0c:31:c3:
         ac:98:c1:f6:f3:86:0b:a1:fc:d1:2e:99:cc:6e:05:a6:5b:e6:
         4a:72:46:09:56:c2:ef:d8:37:06:b7:58:86:92:f4:0b:d8:f3:
         5f:99:af:19:71:54:b8:f3:1a:7f:a5:b2:05:3e:05:22:48:97:
         0e:0c:ed:f8:b3:94:a4:a6:b9:58:ed:bb:7b:2b:15:aa:b6:25:
         c5:7d:40:31:79:0e:1d:da:60:5b:01:4e:0e:9b:6d:2d:08:a5:
         72:00:a0:aa:ce:9b:62:b6:7c:9d:fa:84:96:9c:83:36:dc:21:
         8f:22:bd:21:2e:38:8e:07:2d:0f:87:52:9c:3c:5b:59:8a:46:
         7e:8a:ef:c9:92:8a:bd:0a:37:68:b5:6b:73:f3:6f:5c:1f:40:
         b5:00:48:52:5a:6d:89:5b:af:71:b0:b5:90:b8:f7:35:b2:62:
         8c:0e:63:68:f6:20:2c:03:a3:95:6f:5e:47:65:f3:59:37:99:
         01:52:17:95:6f:42:b1:d8:2b:b4:24:06:92:fc:8c:39:0c:51:
         2e:7b:2f:e0
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUHGB5BEcOS47aVZtDB/4vI5dbWh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2QTAyNENFNDU5MDRDOUZCMTRGNDZGMEYyNzI1QTc4
MzY0M0MwQTAeFw0yMzA1MTkxNzE1MjJaFw0yNDA1MTcxNzIwMjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzMxNTBDMEE4QTY4MkE5Nzgw
NkVCNkZBOTk0MDc2QjNCQTBFNkI1NDY0NDUzRjUxMjFDNUFGMkNBNkUzRDg1OTA3
RjVEMTY4QkVBNUI2MDU3QkI2NEI4NTg4QzFFQjUzQ0MwNTIxRkIwNzNCRDY0MjlB
NEMwOUFEMjU4OUQ3RUVDRjFEODZGNjc5ODRCMTk3M0YzNEY2MkQxOThCRDVGN0VC
NzQyN0ZDOThGRTZDOTUzMDgwMDNDQzMyN0Y2MUEwREI1Q0I0QkNDMTY4QTIwNzdD
NjFDRTA2NDNBRTE4MTE1NkM3RjMzNjAxOUFDQUIzMjk4NzFFNzYyMjE0QzU4RENB
OUZFRjEzMzhBRTBBODg0QThCNzQwQzc3NkJBOTcxRTQyRDUyMzcxRUVGRDNBRUQx
Q0VCRDUxOEExRjUwREI2MkFDOTcwQ0Q4NTQyRUE2RjNEMzc3RUNBNTlGRjRFMzUy
QkRGRDE5NzhBNTM0QUREQjE0Nzg2N0EwNjI3NzhEMTI4MjdENjg1MTkzREMyRDQ3
NjQ5Njc4MTI2RkYyQTI1NEZDRUE2NjJCQzdFODc3OTY0MDk1QUNGNzNCODVGQUQ3
Q0RGQTJCN0VCRUU3NjI1ODg0NTFEMDU0ODVBREExMEI1MDNBNkNBOTAyOERFNEJE
OUJCOEE2RDUxMkUzQ0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwxUMCopoKpeAbrb6mUB2s7oOa1RkRT9RIcWvLKbj2FkH9dFovqW2
BXu2S4WIwetTzAUh+wc71kKaTAmtJYnX7s8dhvZ5hLGXPzT2LRmL1ffrdCf8mP5s
lTCAA8wyf2Gg21y0vMFoogd8Yc4GQ64YEVbH8zYBmsqzKYcediIUxY3Kn+8TOK4K
iEqLdAx3a6lx5C1SNx7v067Rzr1Rih9Q22KslwzYVC6m89N37KWf9ONSvf0ZeKU0
rdsUeGegYneNEoJ9aFGT3C1HZJZ4Em/yolT86mYrx+h3lkCVrPc7hfrXzforfr7n
YliEUdBUha2hC1A6bKkCjeS9m7im1RLjywIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLUpSapD05Q162ObfYUIImTLrKUTMB8GA1UdIwQYMBaAFIpqAkzkWQTJ+xT0bw8n
JaeDZDwKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRy
QjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzAvOEE2QTAyNENFNDU5MDRD
OUZCMTRGNDZGMEYyNzI1QTc4MzY0M0MwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84QTZBMDI0Q0U0NTkwNEM5RkIxNEY0NkYwRjI3MjVBNzgzNjQz
QzBBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CRllIeTNwQmtZUlF0ckI4TTZq
d0pNYWp5VzRkZnprRW1SWVRzRnR3dXNnci8wLzMyMzAzMDJlMzMzNjJlMzIzMTM2
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzMzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
yCTYMA0GCSqGSIb3DQEBCwUAA4IBAQByxsxS7ft5pFjeIjnY8KHBVspxDsHJvzkN
wVaWEAtaUd5oagn1nuliUWmKejegjagwg3EMMcOsmMH284YLofzRLpnMbgWmW+ZK
ckYJVsLv2DcGt1iGkvQL2PNfma8ZcVS48xp/pbIFPgUiSJcODO34s5SkprlY7bt7
KxWqtiXFfUAxeQ4d2mBbAU4Om20tCKVyAKCqzptitnyd+oSWnIM23CGPIr0hLjiO
By0Ph1KcPFtZikZ+iu/Jkoq9CjdotWtz829cH0C1AEhSWm2JW69xsLWQuPc1smKM
DmNo9iAsA6OVb15HZfNZN5kBUheVb0Kx2Cu0JAaS/Iw5DFEuey/g
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org