Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32322d3234203d3e20323730343833.roa
File:                     3230302e37332e3231362e302f32322d3234203d3e20323730343833.roa (raw, json)
Hash identifier:          DoBbYdNkEPgq9r1h8CK+fIHSfN1OpLGuDS0KBGsH3+w=
Subject key identifier:   73:01:29:86:4D:D7:EA:BE:EE:2E:D8:67:0E:00:77:AD:D8:0F:3A:75
Certificate issuer:       /CN=DF6E46A76D5C40E31D62DB9C29DCB0F24E150504
Certificate serial:       24177CF2B411F3A5878040B1F821EC4CD97872FA
Authority key identifier: DF:6E:46:A7:6D:5C:40:E3:1D:62:DB:9C:29:DC:B0:F2:4E:15:05:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32322d3234203d3e20323730343833.roa
Signing time:             Fri 05 May 2023 21:20:28 +0000
ROA not before:           Fri 05 May 2023 21:15:28 +0000
ROA not after:            Fri 03 May 2024 21:20:28 +0000
asID:                     270483
IP address blocks:        200.73.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:17:7c:f2:b4:11:f3:a5:87:80:40:b1:f8:21:ec:4c:d9:78:72:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF6E46A76D5C40E31D62DB9C29DCB0F24E150504
        Validity
            Not Before: May  5 21:15:28 2023 GMT
            Not After : May  3 21:20:28 2024 GMT
        Subject: CN=730129864DD7EABEEE2ED8670E0077ADD80F3A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f9:33:17:bb:aa:b7:88:93:37:03:b4:99:d6:
                    0d:ce:84:6c:63:08:84:27:f5:f8:97:dc:c8:38:b5:
                    6b:cf:fd:0f:51:44:84:f3:99:93:47:ac:96:a3:59:
                    31:1c:63:f3:2f:1c:96:56:00:b0:9a:b7:f3:4a:7a:
                    94:73:a5:9f:60:f4:dd:5b:46:9c:fc:80:49:d2:7a:
                    04:01:04:f8:08:7e:bc:5d:ec:85:ce:29:ff:a3:da:
                    a5:84:a8:5b:00:6a:c8:dd:cb:7b:ac:fa:20:d0:70:
                    fa:05:a7:b6:3f:0f:1b:28:29:17:45:c3:76:02:34:
                    94:29:18:5a:5c:45:5e:ad:7a:a4:02:ca:34:1f:7f:
                    50:9a:43:04:16:c5:81:9a:9b:6d:d5:7b:24:53:84:
                    6b:65:c9:a0:8e:51:24:23:3d:71:7d:3f:2a:10:3c:
                    ed:d3:1e:1b:62:21:80:58:a0:9d:de:2a:f4:7c:27:
                    4f:dd:ba:a0:a9:40:9b:45:db:74:3a:9f:11:ac:7d:
                    8d:64:8b:1e:a9:f0:dd:91:18:40:03:09:28:e4:d4:
                    5e:36:99:13:1f:06:9e:00:13:8d:54:2f:4e:2c:e4:
                    bc:ae:83:42:1b:4d:cd:ba:13:52:db:74:bd:69:a3:
                    9b:d5:0c:ce:7e:e0:93:6f:8e:0e:a9:4f:85:fd:de:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:01:29:86:4D:D7:EA:BE:EE:2E:D8:67:0E:00:77:AD:D8:0F:3A:75
            X509v3 Authority Key Identifier:
                keyid:DF:6E:46:A7:6D:5C:40:E3:1D:62:DB:9C:29:DC:B0:F2:4E:15:05:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32322d3234203d3e20323730343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:48:95:42:27:2b:d2:f9:8c:fd:cb:e7:63:be:49:eb:a6:74:
         eb:90:de:b7:5e:4c:20:f0:5d:8b:b4:4d:50:c2:63:d0:51:55:
         8d:6b:32:48:aa:44:4e:49:fa:9b:ee:f5:95:39:fb:45:5e:1f:
         39:d1:28:93:3a:d6:f3:39:cf:9d:eb:15:94:80:1d:1d:9c:86:
         06:ae:ff:c9:19:b7:9c:46:71:ae:b9:f4:74:f5:04:7b:d1:c2:
         79:48:93:35:aa:f9:3a:cd:5b:df:5c:5f:18:c6:0f:3e:9c:6c:
         13:dd:89:17:14:3b:d1:c0:41:27:15:01:b3:75:67:23:30:94:
         c9:55:b5:ff:56:9e:b0:54:d6:ae:a2:7d:90:62:d0:b2:92:a4:
         d7:96:11:ac:14:55:ca:e0:4f:87:31:52:73:c7:7c:e0:42:93:
         86:66:af:c3:e1:97:ec:af:d5:e6:4e:d0:1c:35:0c:d0:f8:98:
         22:21:2c:39:4f:34:23:08:76:89:47:33:ab:d7:f5:c7:54:db:
         70:e8:2e:81:84:fc:fd:8d:f0:f0:e9:06:8a:f8:26:c4:8f:54:
         5e:34:e0:d4:8a:28:fd:8e:81:d2:bc:f6:8d:ac:46:2f:d2:a6:
         b4:f3:b7:e7:93:27:0a:ef:30:92:8c:0e:5e:d2:7d:05:aa:6b:
         01:72:90:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJBd88rQR86WHgECx+CHsTNl4cvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY2RTQ2QTc2RDVDNDBFMzFENjJEQjlDMjlEQ0IwRjI0
RTE1MDUwNDAeFw0yMzA1MDUyMTE1MjhaFw0yNDA1MDMyMTIwMjhaMDMxMTAvBgNV
BAMTKDczMDEyOTg2NEREN0VBQkVFRTJFRDg2NzBFMDA3N0FERDgwRjNBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+TMXu6q3iJM3A7SZ1g3OhGxj
CIQn9fiX3Mg4tWvP/Q9RRITzmZNHrJajWTEcY/MvHJZWALCat/NKepRzpZ9g9N1b
Rpz8gEnSegQBBPgIfrxd7IXOKf+j2qWEqFsAasjdy3us+iDQcPoFp7Y/DxsoKRdF
w3YCNJQpGFpcRV6teqQCyjQff1CaQwQWxYGam23VeyRThGtlyaCOUSQjPXF9PyoQ
PO3THhtiIYBYoJ3eKvR8J0/duqCpQJtF23Q6nxGsfY1kix6p8N2RGEADCSjk1F42
mRMfBp4AE41UL04s5Lyug0IbTc26E1LbdL1po5vVDM5+4JNvjg6pT4X93o9dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcwEphk3X6r7uLthnDgB3rdgPOnUwHwYDVR0j
BBgwFoAU325Gp21cQOMdYtucKdyw8k4VBQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0
OTgvMC9ERjZFNDZBNzZENUM0MEUzMUQ2MkRCOUMyOURDQjBGMjRFMTUwNTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RGNkU0NkE3NkQ1QzQwRTMx
RDYyREI5QzI5RENCMEYyNEUxNTA1MDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JXb1BVMUhoWHVFblA1WjZEMktZVTFuelBvS05kc3lUdmRqTWNoQTVWdDk4LzAv
MzIzMDMwMmUzNzMzMmUzMjMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALISdgwDQYJKoZIhvcNAQELBQADggEBABBIlUIn
K9L5jP3L52O+SeumdOuQ3rdeTCDwXYu0TVDCY9BRVY1rMkiqRE5J+pvu9ZU5+0Ve
HznRKJM61vM5z53rFZSAHR2chgau/8kZt5xGca659HT1BHvRwnlIkzWq+TrNW99c
XxjGDz6cbBPdiRcUO9HAQScVAbN1ZyMwlMlVtf9WnrBU1q6ifZBi0LKSpNeWEawU
VcrgT4cxUnPHfOBCk4Zmr8Phl+yv1eZO0Bw1DND4mCIhLDlPNCMIdolHM6vX9cdU
23DoLoGE/P2N8PDpBor4JsSPVF404NSKKP2OgdK89o2sRi/SprTzt+eTJwrvMJKM
Dl7SfQWqawFykDk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org