Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/3230302e35302e3232342e302f32322d3234203d3e20323731333338.roa
File:                     3230302e35302e3232342e302f32322d3234203d3e20323731333338.roa (raw, json)
Hash identifier:          tXrVWxq+crxU41HErn2PpTglAC6mtUF8JIvhseGHuk8=
Subject key identifier:   83:FF:5E:89:D2:F7:D7:2A:85:8F:F8:93:F1:7B:91:7E:FB:9B:AF:C9
Certificate issuer:       /CN=10F9F6613952FE3BE61CE03425A3088AECA2929F
Certificate serial:       3BBA4FEC6C5AFA97EBE44E1C8DD88E1E4F989EE8
Authority key identifier: 10:F9:F6:61:39:52:FE:3B:E6:1C:E0:34:25:A3:08:8A:EC:A2:92:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/3230302e35302e3232342e302f32322d3234203d3e20323731333338.roa
Signing time:             Thu 03 Aug 2023 13:02:18 +0000
ROA not before:           Thu 03 Aug 2023 12:57:18 +0000
ROA not after:            Thu 01 Aug 2024 13:02:18 +0000
asID:                     271338
IP address blocks:        200.50.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ba:4f:ec:6c:5a:fa:97:eb:e4:4e:1c:8d:d8:8e:1e:4f:98:9e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F9F6613952FE3BE61CE03425A3088AECA2929F
        Validity
            Not Before: Aug  3 12:57:18 2023 GMT
            Not After : Aug  1 13:02:18 2024 GMT
        Subject: CN=83FF5E89D2F7D72A858FF893F17B917EFB9BAFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:74:b3:97:60:30:07:af:ad:23:c2:a2:00:
                    74:42:f2:61:9f:a0:91:b5:18:7a:59:3e:81:05:56:
                    f3:91:61:39:08:bf:ea:63:dd:00:1f:7c:2f:28:0a:
                    2e:6b:8b:0b:d0:fc:2d:2f:20:05:43:e1:c1:1d:88:
                    ae:11:67:d1:2b:10:bf:42:70:ba:50:d4:c5:52:b2:
                    87:11:a7:c3:89:57:2d:78:19:2a:3c:7c:24:96:82:
                    f1:9d:fa:9a:19:f8:af:43:ab:ef:da:15:b7:c3:81:
                    a9:67:9e:07:2b:b3:28:49:c5:4a:a2:25:14:95:74:
                    0b:28:ea:e7:57:aa:c2:10:3a:43:fb:50:16:40:65:
                    7a:a1:5f:e7:7c:89:98:ae:86:f0:5c:bb:3b:91:62:
                    93:ac:ee:f9:6a:29:4d:d1:ef:d4:77:f6:6b:53:1c:
                    28:1f:e5:9f:c8:eb:9a:5d:46:b2:73:4f:01:01:07:
                    ac:00:58:bb:52:7e:82:de:ef:be:64:56:f2:9d:f6:
                    c2:59:07:5e:66:71:cb:9f:31:21:ca:06:14:b6:e1:
                    fd:9b:75:3e:06:85:f1:b5:94:c6:24:bf:d0:16:64:
                    49:ad:48:3b:01:e5:f4:3e:25:98:e5:de:10:e4:10:
                    0f:3d:95:74:ad:38:1c:ae:18:72:b4:6b:3a:da:b3:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FF:5E:89:D2:F7:D7:2A:85:8F:F8:93:F1:7B:91:7E:FB:9B:AF:C9
            X509v3 Authority Key Identifier:
                keyid:10:F9:F6:61:39:52:FE:3B:E6:1C:E0:34:25:A3:08:8A:EC:A2:92:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/3230302e35302e3232342e302f32322d3234203d3e20323731333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:75:7a:e2:b8:26:41:be:0a:3d:28:a8:d7:b4:03:8c:85:9b:
         92:e6:75:4b:d0:23:a1:1d:09:0f:34:de:57:4c:8c:dd:83:88:
         99:25:a8:52:15:28:fb:95:1f:1d:29:49:9d:06:e6:05:8b:8f:
         26:fa:f4:53:4e:11:2a:e0:8c:5e:37:76:2d:82:eb:a7:db:1f:
         3c:4a:bf:9f:28:c7:57:a9:96:14:91:73:b2:25:64:a4:43:88:
         b6:ff:5f:c2:eb:b8:1c:95:18:5a:6e:f0:4c:79:ae:59:69:b5:
         4f:5e:4d:e4:af:9d:d2:69:2d:6e:f7:12:8d:33:9f:31:25:b0:
         f7:75:36:9f:b8:69:f1:cb:27:4f:ef:f0:86:6f:c0:f1:35:35:
         52:1b:6b:a5:c7:09:08:8a:e3:04:c4:88:18:bd:5b:65:02:a0:
         c9:b6:86:c9:af:69:94:88:95:60:bd:15:54:ec:10:04:0e:b4:
         00:81:38:b9:41:b1:65:a8:1d:06:7e:e6:be:7c:9a:9e:43:50:
         3a:e4:fb:3d:1e:d4:96:a9:86:52:ca:ce:8d:f3:6b:b2:57:20:
         15:53:2d:e9:03:e9:07:85:b4:1a:81:9f:cc:8a:7c:a2:e6:c6:
         40:60:6e:ed:0e:83:bb:52:89:4b:78:20:2b:10:78:c3:c4:2c:
         d2:41:0c:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO7pP7Gxa+pfr5E4cjdiOHk+YnugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGOUY2NjEzOTUyRkUzQkU2MUNFMDM0MjVBMzA4OEFF
Q0EyOTI5RjAeFw0yMzA4MDMxMjU3MThaFw0yNDA4MDExMzAyMThaMDMxMTAvBgNV
BAMTKDgzRkY1RTg5RDJGN0Q3MkE4NThGRjg5M0YxN0I5MTdFRkI5QkFGQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJ3Szl2AwB6+tI8KiAHRC8mGf
oJG1GHpZPoEFVvORYTkIv+pj3QAffC8oCi5riwvQ/C0vIAVD4cEdiK4RZ9ErEL9C
cLpQ1MVSsocRp8OJVy14GSo8fCSWgvGd+poZ+K9Dq+/aFbfDgalnngcrsyhJxUqi
JRSVdAso6udXqsIQOkP7UBZAZXqhX+d8iZiuhvBcuzuRYpOs7vlqKU3R79R39mtT
HCgf5Z/I65pdRrJzTwEBB6wAWLtSfoLe775kVvKd9sJZB15mccufMSHKBhS24f2b
dT4GhfG1lMYkv9AWZEmtSDsB5fQ+JZjl3hDkEA89lXStOByuGHK0azraszjXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg/9eidL31yqFj/iT8XuRfvubr8kwHwYDVR0j
BBgwFoAUEPn2YTlS/jvmHOA0JaMIiuyikp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmtRMmd0eTlhWVJhR0Jvc0xXdzVEeGNxN1dQOUdSYk5BamREOUhZV2tx
THUvMC8xMEY5RjY2MTM5NTJGRTNCRTYxQ0UwMzQyNUEzMDg4QUVDQTI5MjlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwRjlGNjYxMzk1MkZFM0JF
NjFDRTAzNDI1QTMwODhBRUNBMjkyOUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JrUTJndHk5YVlSYUdCb3NMV3c1RHhjcTdXUDlHUmJOQWpkRDlIWVdrcUx1LzAv
MzIzMDMwMmUzNTMwMmUzMjMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIMuAwDQYJKoZIhvcNAQELBQADggEBAL91euK4
JkG+Cj0oqNe0A4yFm5LmdUvQI6EdCQ803ldMjN2DiJklqFIVKPuVHx0pSZ0G5gWL
jyb69FNOESrgjF43di2C66fbHzxKv58ox1eplhSRc7IlZKRDiLb/X8LruByVGFpu
8Ex5rllptU9eTeSvndJpLW73Eo0znzElsPd1Np+4afHLJ0/v8IZvwPE1NVIba6XH
CQiK4wTEiBi9W2UCoMm2hsmvaZSIlWC9FVTsEAQOtACBOLlBsWWoHQZ+5r58mp5D
UDrk+z0e1JaphlLKzo3za7JXIBVTLekD6QeFtBqBn8yKfKLmxkBgbu0Og7tSiUt4
ICsQeMPELNJBDE0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org