Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32332d3234203d3e20323639303733.roa
File:                     3230312e3135302e3134342e302f32332d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          pqeoM7HHTzfoya5p34kNwit2B9b4mJWV15BnRxEzLCE=
Subject key identifier:   D2:76:D0:83:ED:14:42:E8:CA:47:74:49:43:8C:D3:D4:4B:40:5B:02
Certificate issuer:       /CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
Certificate serial:       154B6CF80BCABF84151436DAECAF20BBE50C85AA
Authority key identifier: 53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32332d3234203d3e20323639303733.roa
Signing time:             Thu 10 Nov 2022 15:00:00 +0000
ROA not before:           Thu 10 Nov 2022 14:55:00 +0000
ROA not after:            Thu 09 Nov 2023 15:00:00 +0000
asID:                     269073
IP address blocks:        201.150.144.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4b:6c:f8:0b:ca:bf:84:15:14:36:da:ec:af:20:bb:e5:0c:85:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
        Validity
            Not Before: Nov 10 14:55:00 2022 GMT
            Not After : Nov  9 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:c3:b0:ca:f5:f5:3d:c4:6e:80:3b:ef:ba:
                    3a:4d:85:54:de:58:c1:9f:7c:f8:fb:07:b4:9c:53:
                    dc:a8:1c:5f:b5:ee:66:11:1b:3a:b6:62:b1:ce:a5:
                    84:6f:0a:fc:22:56:11:01:6b:6b:17:00:c4:db:1c:
                    a5:dd:7a:de:ce:8a:99:bf:3a:41:e6:04:a2:d2:f8:
                    3a:f1:a8:62:63:bf:ad:97:6a:45:bc:bb:ef:32:c5:
                    43:d4:e9:d4:ac:ed:67:24:ff:09:46:f1:ad:2e:0b:
                    68:c4:35:64:7b:ce:0f:c9:0d:d7:0f:0e:e6:ee:73:
                    bd:5d:ff:9c:47:fe:0c:1b:fe:60:a2:9c:19:37:0b:
                    76:47:7f:71:76:a3:73:e6:46:02:5b:78:a8:30:26:
                    17:4c:97:08:95:43:ee:5e:63:e5:f0:d8:51:79:17:
                    19:78:44:a0:5f:89:47:f5:59:8e:79:87:67:c3:78:
                    6d:c4:af:3f:be:13:cc:be:2c:8a:10:5f:c7:64:6f:
                    8b:f5:f7:af:a2:3f:e4:32:c7:e3:58:7b:f2:3d:fa:
                    26:2d:e0:19:82:94:d2:1d:ef:66:0e:49:6e:b1:0d:
                    45:d6:c9:8e:3e:4a:f0:09:f8:90:28:5e:76:6d:f3:
                    25:f2:20:b2:5a:1b:d5:3e:66:82:f4:18:16:51:13:
                    17:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:76:D0:83:ED:14:42:E8:CA:47:74:49:43:8C:D3:D4:4B:40:5B:02
            X509v3 Authority Key Identifier:
                keyid:53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32332d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:90:a6:fd:1a:ef:c1:bd:78:f4:1b:6c:86:d1:44:fc:94:
         bb:34:4f:c0:0e:1c:6e:a6:a0:09:3f:ea:d0:f7:60:9d:dd:3f:
         90:a1:b5:25:c8:f4:b9:21:1c:74:e6:55:af:7b:0a:be:ef:54:
         13:96:21:b9:ee:07:38:52:62:16:e9:84:c1:62:79:46:d5:fe:
         92:ab:90:b8:33:2b:13:b2:b7:06:8b:32:62:85:cc:68:34:96:
         03:2d:f9:c6:e2:2e:97:7a:26:b8:aa:95:a5:7c:b7:f3:e4:d7:
         70:08:4d:9f:5f:11:49:c7:e6:8b:c1:74:d8:b9:82:12:21:ab:
         41:c8:90:84:fe:ee:43:f7:6e:03:2c:5c:4a:0d:4b:e6:78:ec:
         dc:a8:85:87:8e:66:ce:7c:ca:c5:db:2d:3c:70:54:da:36:c0:
         2e:73:89:ef:77:73:7f:93:a6:19:64:15:b2:88:09:16:d0:6a:
         e7:7f:f4:15:f2:e0:2f:d8:6c:e3:41:d8:aa:86:f0:b0:fd:f2:
         02:cc:e5:1b:41:b5:44:e8:5f:7a:fe:3d:4d:77:f7:fa:43:09:
         d3:5b:07:14:ea:da:f2:11:23:d1:8f:4d:f9:27:cb:19:83:f3:
         cf:bb:9b:39:85:0c:a7:f6:24:b6:25:9e:41:99:b2:90:3f:02:
         fd:a2:3e:01
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUFUts+AvKv4QVFDba7K8gu+UMhaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCMEU2ODRFMUNEREIzNDlGNUJBODQ4MkY5OUJFODdE
M0FGRTZFMzAeFw0yMjExMTAxNDU1MDBaFw0yMzExMDkxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJFQkMzQjBDQUY1RjUzREM0
NkU4MDNCRUZCQTNBNEQ4NTU0REU1OEMxOUY3Q0Y4RkIwN0I0OUM1M0RDQTgxQzVG
QjVFRTY2MTExQjNBQjY2MkIxQ0VBNTg0NkYwQUZDMjI1NjExMDE2QjZCMTcwMEM0
REIxQ0E1REQ3QURFQ0U4QTk5QkYzQTQxRTYwNEEyRDJGODNBRjFBODYyNjNCRkFE
OTc2QTQ1QkNCQkVGMzJDNTQzRDRFOUQ0QUNFRDY3MjRGRjA5NDZGMUFEMkUwQjY4
QzQzNTY0N0JDRTBGQzkwREQ3MEYwRUU2RUU3M0JENURGRjlDNDdGRTBDMUJGRTYw
QTI5QzE5MzcwQjc2NDc3RjcxNzZBMzczRTY0NjAyNUI3OEE4MzAyNjE3NEM5NzA4
OTU0M0VFNUU2M0U1RjBEODUxNzkxNzE5Nzg0NEEwNUY4OTQ3RjU1OThFNzk4NzY3
QzM3ODZEQzRBRjNGQkUxM0NDQkUyQzhBMTA1RkM3NjQ2RjhCRjVGN0FGQTIzRkU0
MzJDN0UzNTg3QkYyM0RGQTI2MkRFMDE5ODI5NEQyMURFRjY2MEU0OTZFQjEwRDQ1
RDZDOThFM0U0QUYwMDlGODkwMjg1RTc2NkRGMzI1RjIyMEIyNUExQkQ1M0U2Njgy
RjQxODE2NTExMzE3RTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu+vDsMr19T3EboA777o6TYVU3ljBn3z4+we0nFPcqBxfte5mERs6
tmKxzqWEbwr8IlYRAWtrFwDE2xyl3XrezoqZvzpB5gSi0vg68ahiY7+tl2pFvLvv
MsVD1OnUrO1nJP8JRvGtLgtoxDVke84PyQ3XDw7m7nO9Xf+cR/4MG/5gopwZNwt2
R39xdqNz5kYCW3ioMCYXTJcIlUPuXmPl8NhReRcZeESgX4lH9VmOeYdnw3htxK8/
vhPMviyKEF/HZG+L9fevoj/kMsfjWHvyPfomLeAZgpTSHe9mDklusQ1F1smOPkrw
CfiQKF52bfMl8iCyWhvVPmaC9BgWURMX5QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FNJ20IPtFELoykd0SUOM09RLQFsCMB8GA1UdIwQYMBaAFFOw5oThzds0n1uoSC+Z
vofTr+bjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J2R3pINlBxZDc5cDMz
OUczZUQyMnM5UlRLVXlnTG9OWE5FaHZOWnF6djkzLzAvNTNCMEU2ODRFMUNEREIz
NDlGNUJBODQ4MkY5OUJFODdEM0FGRTZFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81M0IwRTY4NEUxQ0REQjM0OUY1QkE4NDgyRjk5QkU4N0QzQUZF
NkUzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Cdkd6SDZQcWQ3OXAzMzlHM2VE
MjJzOVJUS1V5Z0xvTlhORWh2TlpxenY5My8wLzMyMzAzMTJlMzEzNTMwMmUzMTM0
MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzkzMDM3MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHJlpAwDQYJKoZIhvcNAQELBQADggEBAI0rkKb9Gu/BvXj0G2yG0UT8lLs0T8AO
HG6moAk/6tD3YJ3dP5ChtSXI9LkhHHTmVa97Cr7vVBOWIbnuBzhSYhbphMFieUbV
/pKrkLgzKxOytwaLMmKFzGg0lgMt+cbiLpd6JriqlaV8t/Pk13AITZ9fEUnH5ovB
dNi5ghIhq0HIkIT+7kP3bgMsXEoNS+Z47NyohYeOZs58ysXbLTxwVNo2wC5zie93
c3+TphlkFbKICRbQaud/9BXy4C/YbONB2KqG8LD98gLM5RtBtUToX3r+PU139/pD
CdNbBxTq2vIRI9GPTfknyxmD88+7mzmFDKf2JLYlnkGZspA/Av2iPgE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org