Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231382e302f32342d3234203d3e20323732323632.roa
File:                     3230302e33362e3231382e302f32342d3234203d3e20323732323632.roa (raw, json)
Hash identifier:          q3JN3YrjdExnda5XFSg31vpw1v7gDhvSkgcD8DQe1t8=
Subject key identifier:   7A:8C:5A:55:A2:EE:E9:4B:B8:81:61:25:67:47:36:8C:D5:BD:30:6A
Certificate issuer:       /CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
Certificate serial:       77034BA8E2E379A9DA9B0807E34965AD860B79E0
Authority key identifier: 9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231382e302f32342d3234203d3e20323732323632.roa
Signing time:             Tue 23 Nov 2021 09:29:09 +0000
ROA not before:           Tue 23 Nov 2021 09:24:09 +0000
ROA not after:            Tue 22 Nov 2022 09:29:09 +0000
asID:                     272262
IP address blocks:        200.36.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:03:4b:a8:e2:e3:79:a9:da:9b:08:07:e3:49:65:ad:86:0b:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
        Validity
            Not Before: Nov 23 09:24:09 2021 GMT
            Not After : Nov 22 09:29:09 2022 GMT
        Subject: CN=3082010A02820101009DE3AEE12607859E01E22D09EFB44F8C5C68E73776C3449C3FB15F2AAC78DB9258ADFE4E596EE76ED2E24BD3CE9BC7D9A9649AB70ECA0452A348851E9B790796123B2D681C0D8B63D31064625BC5D9BBAD4300A620FF35EC928E69FA4A1F7DC6FB2C08721BB60B761AF42493CC0661619ADFE49B880B57CE878A3653A7D90A28D3DAEC235C5130E02F30D17AEC74FEE527873228E53FA5D334FDD09CBB08C048355E9D02F3216EE52A648CF6BEA3B5253FC74243451348DED7AB90BF2B791773FB557665A3B42888B30267879732DF9F13E55C7F8CDC4DC87A1E430300EA0E457BAE304AECFDE79EC0AAF841FE42E73E78AC63571C638D0BF91007438DB337EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:ae:e1:26:07:85:9e:01:e2:2d:09:ef:b4:
                    4f:8c:5c:68:e7:37:76:c3:44:9c:3f:b1:5f:2a:ac:
                    78:db:92:58:ad:fe:4e:59:6e:e7:6e:d2:e2:4b:d3:
                    ce:9b:c7:d9:a9:64:9a:b7:0e:ca:04:52:a3:48:85:
                    1e:9b:79:07:96:12:3b:2d:68:1c:0d:8b:63:d3:10:
                    64:62:5b:c5:d9:bb:ad:43:00:a6:20:ff:35:ec:92:
                    8e:69:fa:4a:1f:7d:c6:fb:2c:08:72:1b:b6:0b:76:
                    1a:f4:24:93:cc:06:61:61:9a:df:e4:9b:88:0b:57:
                    ce:87:8a:36:53:a7:d9:0a:28:d3:da:ec:23:5c:51:
                    30:e0:2f:30:d1:7a:ec:74:fe:e5:27:87:32:28:e5:
                    3f:a5:d3:34:fd:d0:9c:bb:08:c0:48:35:5e:9d:02:
                    f3:21:6e:e5:2a:64:8c:f6:be:a3:b5:25:3f:c7:42:
                    43:45:13:48:de:d7:ab:90:bf:2b:79:17:73:fb:55:
                    76:65:a3:b4:28:88:b3:02:67:87:97:32:df:9f:13:
                    e5:5c:7f:8c:dc:4d:c8:7a:1e:43:03:00:ea:0e:45:
                    7b:ae:30:4a:ec:fd:e7:9e:c0:aa:f8:41:fe:42:e7:
                    3e:78:ac:63:57:1c:63:8d:0b:f9:10:07:43:8d:b3:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8C:5A:55:A2:EE:E9:4B:B8:81:61:25:67:47:36:8C:D5:BD:30:6A
            X509v3 Authority Key Identifier:
                keyid:9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231382e302f32342d3234203d3e20323732323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:ce:e7:08:6d:45:ba:db:2d:1b:c7:b0:7f:20:73:25:3e:5a:
         a4:c4:88:51:55:45:b2:73:a2:28:91:84:32:e5:97:a4:f3:9c:
         f9:c4:ee:6d:52:01:7a:91:43:ff:31:e9:e8:53:58:56:fc:18:
         fc:48:ef:f8:48:df:78:88:72:26:44:4d:6a:cb:2b:a1:47:4a:
         07:55:7b:cf:25:fc:c8:eb:0f:d6:4d:72:0b:9d:1e:12:58:dd:
         f2:7a:6c:98:23:c0:75:a6:0d:97:5f:8c:5a:b8:95:05:26:43:
         7a:f3:79:4c:1d:58:1e:60:68:f6:63:f9:8d:51:f6:bc:91:dd:
         04:d9:18:44:2c:6d:b5:1f:11:97:f5:04:58:82:36:bb:e8:00:
         6d:94:dd:64:5d:8b:d5:df:65:70:6a:ac:48:b6:83:ac:eb:61:
         06:87:4c:a4:f5:db:43:d1:a9:d2:8b:61:7e:3a:8e:6d:f9:8e:
         50:dc:8a:2c:d6:e1:47:09:93:0b:f9:87:b0:4b:bd:ce:8e:ce:
         77:c8:d0:bb:87:42:fa:b2:87:18:2d:b2:98:b1:34:a6:a9:20:
         c8:20:79:99:d3:01:5a:aa:e1:c2:54:f9:25:1c:fa:f1:79:b0:
         0f:d2:13:d7:9a:90:5c:de:99:4b:b5:7e:3a:58:cd:c0:68:9f:
         98:35:5c:34
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUdwNLqOLjeanamwgH40llrYYLeeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNDNTA4QkI5Njg0Qjg4Mzc0MDJFNzFEMkFGNERENjZC
NzdGNkMyNzAeFw0yMTExMjMwOTI0MDlaFw0yMjExMjIwOTI5MDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOURFM0FFRTEyNjA3ODU5RTAx
RTIyRDA5RUZCNDRGOEM1QzY4RTczNzc2QzM0NDlDM0ZCMTVGMkFBQzc4REI5MjU4
QURGRTRFNTk2RUU3NkVEMkUyNEJEM0NFOUJDN0Q5QTk2NDlBQjcwRUNBMDQ1MkEz
NDg4NTFFOUI3OTA3OTYxMjNCMkQ2ODFDMEQ4QjYzRDMxMDY0NjI1QkM1RDlCQkFE
NDMwMEE2MjBGRjM1RUM5MjhFNjlGQTRBMUY3REM2RkIyQzA4NzIxQkI2MEI3NjFB
RjQyNDkzQ0MwNjYxNjE5QURGRTQ5Qjg4MEI1N0NFODc4QTM2NTNBN0Q5MEEyOEQz
REFFQzIzNUM1MTMwRTAyRjMwRDE3QUVDNzRGRUU1Mjc4NzMyMjhFNTNGQTVEMzM0
RkREMDlDQkIwOEMwNDgzNTVFOUQwMkYzMjE2RUU1MkE2NDhDRjZCRUEzQjUyNTNG
Qzc0MjQzNDUxMzQ4REVEN0FCOTBCRjJCNzkxNzczRkI1NTc2NjVBM0I0Mjg4OEIz
MDI2Nzg3OTczMkRGOUYxM0U1NUM3RjhDREM0REM4N0ExRTQzMDMwMEVBMEU0NTdC
QUUzMDRBRUNGREU3OUVDMEFBRjg0MUZFNDJFNzNFNzhBQzYzNTcxQzYzOEQwQkY5
MTAwNzQzOERCMzM3RUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAneOu4SYHhZ4B4i0J77RPjFxo5zd2w0ScP7FfKqx425JYrf5OWW7n
btLiS9POm8fZqWSatw7KBFKjSIUem3kHlhI7LWgcDYtj0xBkYlvF2butQwCmIP81
7JKOafpKH33G+ywIchu2C3Ya9CSTzAZhYZrf5JuIC1fOh4o2U6fZCijT2uwjXFEw
4C8w0XrsdP7lJ4cyKOU/pdM0/dCcuwjASDVenQLzIW7lKmSM9r6jtSU/x0JDRRNI
3terkL8reRdz+1V2ZaO0KIizAmeHlzLfnxPlXH+M3E3Ieh5DAwDqDkV7rjBK7P3n
nsCq+EH+Quc+eKxjVxxjjQv5EAdDjbM36wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHqMWlWi7ulLuIFhJWdHNozVvTBqMB8GA1UdIwQYMBaAFJzFCLuWhLiDdALnHSr0
3Wa3f2wnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRy
QjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzAvOUNDNTA4QkI5Njg0Qjg4
Mzc0MDJFNzFEMkFGNERENjZCNzdGNkMyNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85Q0M1MDhCQjk2ODRCODgzNzQwMkU3MUQyQUY0REQ2NkI3N0Y2
QzI3LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CRllIeTNwQmtZUlF0ckI4TTZq
d0pNYWp5VzRkZnprRW1SWVRzRnR3dXNnci8wLzMyMzAzMDJlMzMzNjJlMzIzMTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzIzNjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
yCTaMA0GCSqGSIb3DQEBCwUAA4IBAQDAzucIbUW62y0bx7B/IHMlPlqkxIhRVUWy
c6IokYQy5Zek85z5xO5tUgF6kUP/MenoU1hW/Bj8SO/4SN94iHImRE1qyyuhR0oH
VXvPJfzI6w/WTXILnR4SWN3yemyYI8B1pg2XX4xauJUFJkN683lMHVgeYGj2Y/mN
Ufa8kd0E2RhELG21HxGX9QRYgja76ABtlN1kXYvV32VwaqxItoOs62EGh0yk9dtD
0anSi2F+Oo5t+Y5Q3Ios1uFHCZML+YewS73Ojs53yNC7h0L6socYLbKYsTSmqSDI
IHmZ0wFaquHCVPklHPrxebAP0hPXmpBc3plLtX46WM3AaJ+YNVw0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org