Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/3230302e3232392e3234372e302f32342d3234203d3e203532363331.roa
File:                     3230302e3232392e3234372e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          EEqlzDlgyonb+2SY6oZRfzRsUjxBSe7vxpMU4+KC5B4=
Subject key identifier:   DC:E1:9A:56:41:2B:56:41:3C:73:1F:57:07:E4:60:5A:2B:F9:0F:3A
Certificate issuer:       /CN=59BFA2FF28275A2F301C7FB1117398C02B8E40A3
Certificate serial:       0FA381ADA2CF5389EBA9A2488F319173CE3ADA76
Authority key identifier: 59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/3230302e3232392e3234372e302f32342d3234203d3e203532363331.roa
Signing time:             Thu 23 Nov 2023 14:23:14 +0000
ROA not before:           Thu 23 Nov 2023 14:18:14 +0000
ROA not after:            Thu 21 Nov 2024 14:23:14 +0000
asID:                     52631
IP address blocks:        200.229.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a3:81:ad:a2:cf:53:89:eb:a9:a2:48:8f:31:91:73:ce:3a:da:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59BFA2FF28275A2F301C7FB1117398C02B8E40A3
        Validity
            Not Before: Nov 23 14:18:14 2023 GMT
            Not After : Nov 21 14:23:14 2024 GMT
        Subject: CN=DCE19A56412B56413C731F5707E4605A2BF90F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:e2:9d:42:b9:8b:35:a9:ed:c0:c3:79:53:
                    4d:55:35:ef:91:95:3d:fa:a2:27:c6:3a:13:dc:52:
                    35:02:ae:87:28:14:5a:6e:c8:f6:a2:2a:ce:12:61:
                    c5:74:6a:bf:b1:32:e1:e4:5a:bc:84:d1:2d:a2:d9:
                    eb:a3:70:e2:45:be:69:db:c4:a4:f7:ba:86:c0:e5:
                    b1:79:6b:e2:0c:c1:95:9b:f4:0e:ee:23:fb:8e:b4:
                    60:03:56:f9:fd:4d:4f:68:43:ec:a4:ff:a4:ae:d8:
                    f8:20:cd:ea:dc:fe:46:9d:be:d4:7d:8d:b2:85:4b:
                    76:f3:e3:a9:5d:80:2f:1b:e1:a8:9d:db:79:8b:59:
                    30:fc:b7:d8:f6:6a:fe:cf:d1:b3:8a:e9:da:4e:1d:
                    29:2f:9a:cf:a3:55:6b:ed:94:7d:19:7f:03:3d:ed:
                    a4:17:6e:80:94:7e:d4:08:fe:4a:72:58:af:fe:95:
                    fb:6a:9b:f2:ab:40:3c:3b:90:11:21:6c:20:00:94:
                    b2:33:6f:30:77:e3:ab:bb:66:e2:bb:7a:df:7f:ff:
                    23:08:cc:2e:cf:d9:5d:61:8b:bb:8f:91:f5:89:3a:
                    84:1b:60:3d:0a:ef:7e:36:a8:05:94:8b:53:1b:75:
                    22:8f:c1:e2:be:9a:1f:7a:10:12:e2:fb:12:bf:1f:
                    9b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:9A:56:41:2B:56:41:3C:73:1F:57:07:E4:60:5A:2B:F9:0F:3A
            X509v3 Authority Key Identifier:
                keyid:59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/3230302e3232392e3234372e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:02:6e:d7:97:78:aa:81:ae:77:06:d3:22:cb:ef:c9:01:
         59:79:1f:e3:31:91:7b:89:8f:59:0a:54:72:81:bf:04:d0:02:
         85:58:2a:e8:24:c2:a1:31:54:ac:48:f6:4d:1a:55:a1:2d:8c:
         c3:df:0b:2a:61:e4:b6:93:4d:8d:10:01:fd:a7:b1:81:69:0c:
         ff:82:f3:26:3b:46:e6:ff:55:40:84:72:2c:84:f4:3f:7e:c1:
         03:45:e5:35:2c:18:a9:7d:50:b3:93:d9:fa:bd:9d:79:fa:fb:
         af:37:ce:46:77:68:c9:53:ab:b9:b7:e0:08:79:ff:fd:99:10:
         0c:79:a6:19:56:cc:ee:99:88:60:7b:3f:39:b6:9f:43:38:3e:
         b3:ed:42:3e:f8:e2:09:73:47:7f:14:52:7a:57:7c:e3:7c:f0:
         ca:4f:86:f0:06:97:13:d8:d4:04:9c:01:d0:02:f2:43:72:0d:
         7e:af:f1:6a:58:a4:34:3d:77:1e:a1:83:d0:d6:91:87:d6:f6:
         59:82:d2:72:aa:3f:d0:f2:f0:f6:e4:27:a6:a8:cb:93:ee:ec:
         f7:62:b9:ca:98:56:bb:0f:78:74:ec:fd:20:25:02:7b:49:9e:
         3c:7c:53:8d:f7:40:9e:28:c7:a1:16:4d:54:4a:74:4b:99:55:
         db:88:24:c7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD6OBraLPU4nrqaJIjzGRc8462nYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCRkEyRkYyODI3NUEyRjMwMUM3RkIxMTE3Mzk4QzAy
QjhFNDBBMzAeFw0yMzExMjMxNDE4MTRaFw0yNDExMjExNDIzMTRaMDMxMTAvBgNV
BAMTKERDRTE5QTU2NDEyQjU2NDEzQzczMUY1NzA3RTQ2MDVBMkJGOTBGM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDheuKdQrmLNantwMN5U01VNe+R
lT36oifGOhPcUjUCrocoFFpuyPaiKs4SYcV0ar+xMuHkWryE0S2i2eujcOJFvmnb
xKT3uobA5bF5a+IMwZWb9A7uI/uOtGADVvn9TU9oQ+yk/6Su2Pggzerc/kadvtR9
jbKFS3bz46ldgC8b4aid23mLWTD8t9j2av7P0bOK6dpOHSkvms+jVWvtlH0ZfwM9
7aQXboCUftQI/kpyWK/+lftqm/KrQDw7kBEhbCAAlLIzbzB346u7ZuK7et9//yMI
zC7P2V1hi7uPkfWJOoQbYD0K7342qAWUi1MbdSKPweK+mh96EBLi+xK/H5upAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3OGaVkErVkE8cx9XB+RgWiv5DzowHwYDVR0j
BBgwFoAUWb+i/ygnWi8wHH+xEXOYwCuOQKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkpQUnppdFBlaWZFZUtHNXdpSkNlNnhFSk5VSnhyQTR5SnhXdHpyY2pO
RnAvMC81OUJGQTJGRjI4Mjc1QTJGMzAxQzdGQjExMTczOThDMDJCOEU0MEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5QkZBMkZGMjgyNzVBMkYz
MDFDN0ZCMTExNzM5OEMwMkI4RTQwQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JKUFJ6aXRQZWlmRWVLRzV3aUpDZTZ4RUpOVUp4ckE0eUp4V3R6cmNqTkZwLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNjMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI5fcwDQYJKoZIhvcNAQELBQADggEBAGH9Am7X
l3iqga53BtMiy+/JAVl5H+MxkXuJj1kKVHKBvwTQAoVYKugkwqExVKxI9k0aVaEt
jMPfCyph5LaTTY0QAf2nsYFpDP+C8yY7Rub/VUCEciyE9D9+wQNF5TUsGKl9ULOT
2fq9nXn6+683zkZ3aMlTq7m34Ah5//2ZEAx5phlWzO6ZiGB7Pzm2n0M4PrPtQj74
4glzR38UUnpXfON88MpPhvAGlxPY1AScAdAC8kNyDX6v8WpYpDQ9dx6hg9DWkYfW
9lmC0nKqP9Dy8PbkJ6aoy5Pu7PdiucqYVrsPeHTs/SAlAntJnjx8U433QJ4ox6EW
TVRKdEuZVduIJMc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org