Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231382e302f32332d3234203d3e20323731333637.roa
File:                     3230302e33362e3231382e302f32332d3234203d3e20323731333637.roa (raw, json)
Hash identifier:          IcZYhGcS0xJuOyu9hHPSszYpMaDBovFm2D3MH0Zr9aA=
Subject key identifier:   32:4A:C3:82:D1:52:13:D7:5F:99:BD:BA:76:A8:1F:C0:F3:1F:E9:18
Certificate issuer:       /CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
Certificate serial:       47C3F5771A99A52AED660943BD68C0D0DD76DA1C
Authority key identifier: 9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231382e302f32332d3234203d3e20323731333637.roa
Signing time:             Tue 02 Aug 2022 14:25:15 +0000
ROA not before:           Tue 02 Aug 2022 14:20:15 +0000
ROA not after:            Tue 01 Aug 2023 14:25:15 +0000
asID:                     271367
IP address blocks:        200.36.218.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c3:f5:77:1a:99:a5:2a:ed:66:09:43:bd:68:c0:d0:dd:76:da:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
        Validity
            Not Before: Aug  2 14:20:15 2022 GMT
            Not After : Aug  1 14:25:15 2023 GMT
        Subject: CN=3082010A0282010100EADC9A08DC0F890EB925BF09385C39E3FCA3E20DD0F5E170E90244552A524AC004998B218D7660F3D52F3E54C1BADA96968575CA0281B4AD94CCE8C731E673CF7F9121E9FE6ECE776B3D64BD1B18FB6E939E744CFF51AFDA7048DA3E3800D1567294CA8D005DA3AB74DC7010446A21D353DE8C877C2B8F3450D3486EF742DBAC5A4EC06ECB34165AD44B8F952F3F613E29006E6625EC6EB398C1089B8052FBD9F79A1E0515A5AF3CC41619C3EC225E8A5885FF52D57C3E0F874DD75EDDD0668435532157D42EE33846500F30D2CF6866DB0051FE532419FB210C9A9BE4902F3955EE159CAEB42718C497C5A1E7AB0F1EEE0F0232742CA7EE0A37915F0545BBBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dc:9a:08:dc:0f:89:0e:b9:25:bf:09:38:5c:
                    39:e3:fc:a3:e2:0d:d0:f5:e1:70:e9:02:44:55:2a:
                    52:4a:c0:04:99:8b:21:8d:76:60:f3:d5:2f:3e:54:
                    c1:ba:da:96:96:85:75:ca:02:81:b4:ad:94:cc:e8:
                    c7:31:e6:73:cf:7f:91:21:e9:fe:6e:ce:77:6b:3d:
                    64:bd:1b:18:fb:6e:93:9e:74:4c:ff:51:af:da:70:
                    48:da:3e:38:00:d1:56:72:94:ca:8d:00:5d:a3:ab:
                    74:dc:70:10:44:6a:21:d3:53:de:8c:87:7c:2b:8f:
                    34:50:d3:48:6e:f7:42:db:ac:5a:4e:c0:6e:cb:34:
                    16:5a:d4:4b:8f:95:2f:3f:61:3e:29:00:6e:66:25:
                    ec:6e:b3:98:c1:08:9b:80:52:fb:d9:f7:9a:1e:05:
                    15:a5:af:3c:c4:16:19:c3:ec:22:5e:8a:58:85:ff:
                    52:d5:7c:3e:0f:87:4d:d7:5e:dd:d0:66:84:35:53:
                    21:57:d4:2e:e3:38:46:50:0f:30:d2:cf:68:66:db:
                    00:51:fe:53:24:19:fb:21:0c:9a:9b:e4:90:2f:39:
                    55:ee:15:9c:ae:b4:27:18:c4:97:c5:a1:e7:ab:0f:
                    1e:ee:0f:02:32:74:2c:a7:ee:0a:37:91:5f:05:45:
                    bb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4A:C3:82:D1:52:13:D7:5F:99:BD:BA:76:A8:1F:C0:F3:1F:E9:18
            X509v3 Authority Key Identifier:
                keyid:9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231382e302f32332d3234203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:65:50:f5:f8:ab:ba:ba:7d:93:43:7e:bc:ea:39:7b:93:63:
         2b:79:ea:c9:93:40:ba:93:23:58:8c:1d:24:4e:92:12:89:91:
         05:fa:22:f3:ec:c5:8e:96:99:b2:8a:60:69:42:68:bb:6c:67:
         36:da:b1:bd:24:a1:58:bc:90:fb:a8:fe:32:c8:e6:bc:47:be:
         8c:30:36:19:da:7e:60:77:16:85:d2:f1:60:37:db:9a:be:65:
         69:33:0a:93:e9:50:6b:ae:37:5e:33:d8:99:da:be:da:b6:a4:
         cd:f3:fc:ac:19:70:d4:25:c2:a5:17:ee:cd:cf:d2:76:b3:84:
         5a:31:99:75:e7:52:2c:5e:7e:2d:98:dc:48:ef:51:19:84:d1:
         ff:6e:50:47:43:c0:6b:8c:6d:f2:40:f7:60:79:41:60:f9:63:
         01:e8:d9:17:c4:06:88:f7:1c:95:a2:ac:3e:aa:ce:50:7e:03:
         0c:c0:12:7e:c4:db:36:26:a6:b9:2c:c6:c8:8c:b3:0d:cf:ca:
         3c:21:88:b7:62:9e:a4:aa:2a:ef:1b:5e:bf:67:2e:4f:06:2e:
         55:c6:0e:f2:7c:82:bf:17:7e:cc:da:81:ba:50:43:ea:7d:a2:
         43:eb:35:95:de:ed:ab:9a:e7:41:12:d0:75:51:93:80:ae:52:
         4e:12:39:2d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUR8P1dxqZpSrtZglDvWjA0N122hwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNDNTA4QkI5Njg0Qjg4Mzc0MDJFNzFEMkFGNERENjZC
NzdGNkMyNzAeFw0yMjA4MDIxNDIwMTVaFw0yMzA4MDExNDI1MTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUFEQzlBMDhEQzBGODkwRUI5
MjVCRjA5Mzg1QzM5RTNGQ0EzRTIwREQwRjVFMTcwRTkwMjQ0NTUyQTUyNEFDMDA0
OTk4QjIxOEQ3NjYwRjNENTJGM0U1NEMxQkFEQTk2OTY4NTc1Q0EwMjgxQjRBRDk0
Q0NFOEM3MzFFNjczQ0Y3RjkxMjFFOUZFNkVDRTc3NkIzRDY0QkQxQjE4RkI2RTkz
OUU3NDRDRkY1MUFGREE3MDQ4REEzRTM4MDBEMTU2NzI5NENBOEQwMDVEQTNBQjc0
REM3MDEwNDQ2QTIxRDM1M0RFOEM4NzdDMkI4RjM0NTBEMzQ4NkVGNzQyREJBQzVB
NEVDMDZFQ0IzNDE2NUFENDRCOEY5NTJGM0Y2MTNFMjkwMDZFNjYyNUVDNkVCMzk4
QzEwODlCODA1MkZCRDlGNzlBMUUwNTE1QTVBRjNDQzQxNjE5QzNFQzIyNUU4QTU4
ODVGRjUyRDU3QzNFMEY4NzRERDc1RURERDA2Njg0MzU1MzIxNTdENDJFRTMzODQ2
NTAwRjMwRDJDRjY4NjZEQjAwNTFGRTUzMjQxOUZCMjEwQzlBOUJFNDkwMkYzOTU1
RUUxNTlDQUVCNDI3MThDNDk3QzVBMUU3QUIwRjFFRUUwRjAyMzI3NDJDQTdFRTBB
Mzc5MTVGMDU0NUJCQkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6tyaCNwPiQ65Jb8JOFw54/yj4g3Q9eFw6QJEVSpSSsAEmYshjXZg
89UvPlTButqWloV1ygKBtK2UzOjHMeZzz3+RIen+bs53az1kvRsY+26TnnRM/1Gv
2nBI2j44ANFWcpTKjQBdo6t03HAQRGoh01PejId8K480UNNIbvdC26xaTsBuyzQW
WtRLj5UvP2E+KQBuZiXsbrOYwQibgFL72feaHgUVpa88xBYZw+wiXopYhf9S1Xw+
D4dN117d0GaENVMhV9Qu4zhGUA8w0s9oZtsAUf5TJBn7IQyam+SQLzlV7hWcrrQn
GMSXxaHnqw8e7g8CMnQsp+4KN5FfBUW7vQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDJKw4LRUhPXX5m9unaoH8DzH+kYMB8GA1UdIwQYMBaAFJzFCLuWhLiDdALnHSr0
3Wa3f2wnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRy
QjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzAvOUNDNTA4QkI5Njg0Qjg4
Mzc0MDJFNzFEMkFGNERENjZCNzdGNkMyNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85Q0M1MDhCQjk2ODRCODgzNzQwMkU3MUQyQUY0REQ2NkI3N0Y2
QzI3LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CRllIeTNwQmtZUlF0ckI4TTZq
d0pNYWp5VzRkZnprRW1SWVRzRnR3dXNnci8wLzMyMzAzMDJlMzMzNjJlMzIzMTM4
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMxMzMzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
yCTaMA0GCSqGSIb3DQEBCwUAA4IBAQC6ZVD1+Ku6un2TQ3686jl7k2MreerJk0C6
kyNYjB0kTpISiZEF+iLz7MWOlpmyimBpQmi7bGc22rG9JKFYvJD7qP4yyOa8R76M
MDYZ2n5gdxaF0vFgN9uavmVpMwqT6VBrrjdeM9iZ2r7atqTN8/ysGXDUJcKlF+7N
z9J2s4RaMZl151IsXn4tmNxI71EZhNH/blBHQ8BrjG3yQPdgeUFg+WMB6NkXxAaI
9xyVoqw+qs5QfgMMwBJ+xNs2Jqa5LMbIjLMNz8o8IYi3Yp6kqirvG16/Zy5PBi5V
xg7yfIK/F37M2oG6UEPqfaJD6zWV3u2rmudBEtB1UZOArlJOEjkt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org