Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32322d3234203d3e20323635333030.roa
File:                     3230302e3132352e3137362e302f32322d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          /O+S4psbrSXbSMGepiNcFzBjaNn/xSGrwdo15MJ1VHA=
Subject key identifier:   2A:B7:2C:E3:E2:14:9F:2A:D7:DD:A3:DE:33:B0:61:E4:C5:59:9C:2F
Certificate issuer:       /CN=73F8BDEC83DDCD973453F97F14C25CC94499272E
Certificate serial:       33AB1AA447060C27111081D90A862100CD5E8C49
Authority key identifier: 73:F8:BD:EC:83:DD:CD:97:34:53:F9:7F:14:C2:5C:C9:44:99:27:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73F8BDEC83DDCD973453F97F14C25CC94499272E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32322d3234203d3e20323635333030.roa
Signing time:             Sun 14 Jan 2024 15:17:19 +0000
ROA not before:           Sun 14 Jan 2024 15:12:19 +0000
ROA not after:            Sun 12 Jan 2025 15:17:19 +0000
asID:                     265300
IP address blocks:        200.125.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ab:1a:a4:47:06:0c:27:11:10:81:d9:0a:86:21:00:cd:5e:8c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73F8BDEC83DDCD973453F97F14C25CC94499272E
        Validity
            Not Before: Jan 14 15:12:19 2024 GMT
            Not After : Jan 12 15:17:19 2025 GMT
        Subject: CN=2AB72CE3E2149F2AD7DDA3DE33B061E4C5599C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:8d:a1:7a:1f:80:32:e7:b2:d6:b1:02:2e:
                    9a:15:9f:11:b9:4c:89:da:68:12:5a:f3:ab:ca:9c:
                    e8:9d:eb:8a:df:ca:9e:d6:77:1d:d8:27:73:2e:af:
                    df:e6:b2:d3:e4:2f:11:17:67:4c:41:d3:22:bb:e8:
                    17:62:5c:44:44:3c:04:02:ae:3e:30:16:3c:d1:e4:
                    43:6a:8f:82:43:9b:1c:cd:7d:d2:8f:1c:9f:e7:ed:
                    d8:47:70:7d:eb:25:31:f3:02:27:01:6d:04:1e:6a:
                    b4:63:b5:73:90:89:ce:2a:54:e1:41:45:a7:50:8d:
                    ee:a1:43:79:8b:1e:3f:12:95:b2:dc:a0:dd:fa:36:
                    28:50:dc:be:07:64:c2:3f:d3:24:67:a3:b1:4e:24:
                    59:90:d5:c1:77:e9:74:ac:b7:be:e8:b2:89:cc:63:
                    4a:1e:5c:67:d9:58:25:47:41:1f:00:64:85:2d:65:
                    89:b0:72:da:03:73:64:ed:63:4e:32:b4:39:f3:83:
                    89:65:07:9f:8f:b5:18:e0:46:f9:66:7e:55:80:ea:
                    4b:a3:5e:b9:26:bc:a2:c7:b4:be:4e:fd:cd:e9:23:
                    e4:ce:8d:91:c1:75:2d:1c:88:99:0f:47:c3:2c:8d:
                    07:2e:86:66:e0:ef:36:64:37:30:01:8a:93:45:c7:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B7:2C:E3:E2:14:9F:2A:D7:DD:A3:DE:33:B0:61:E4:C5:59:9C:2F
            X509v3 Authority Key Identifier:
                keyid:73:F8:BD:EC:83:DD:CD:97:34:53:F9:7F:14:C2:5C:C9:44:99:27:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/73F8BDEC83DDCD973453F97F14C25CC94499272E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73F8BDEC83DDCD973453F97F14C25CC94499272E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32322d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:43:c5:26:e3:f4:a6:59:4c:e6:09:d3:a5:e0:67:92:ff:2a:
         8a:22:52:66:6e:97:7d:ea:8c:83:9d:f7:0d:27:04:03:06:dc:
         5c:ca:37:92:03:3a:7d:b6:b3:df:c9:71:0f:37:4d:be:d8:95:
         cd:0f:b8:49:c2:53:62:91:bc:a5:22:48:69:8f:c1:d9:27:b4:
         ec:f6:fe:78:8f:6e:3d:ae:dc:ed:28:a3:6d:d6:ef:24:07:23:
         5f:34:1d:5d:62:44:0f:f1:6b:07:f3:9b:63:11:e1:7e:37:a2:
         91:b6:31:14:86:2a:2a:22:7f:67:27:a3:d0:5b:c2:de:f8:18:
         9c:1f:c2:f4:3c:93:34:79:86:07:67:59:4b:3f:6a:b5:7d:5a:
         5c:55:80:b2:53:ab:b3:53:ab:60:32:3a:6e:15:81:81:5c:07:
         fc:0d:18:c6:d8:5e:4a:1d:24:cf:ad:b8:52:99:ed:dc:ec:84:
         70:05:d7:8d:e9:cb:17:f7:18:41:a3:f7:a0:e3:53:5e:ed:91:
         29:7a:04:4e:ea:9e:b6:f2:b9:97:c1:23:87:01:93:21:09:b7:
         5a:1b:7c:34:c5:33:38:71:eb:2e:8b:cc:8a:49:59:be:be:45:
         50:67:85:a8:86:78:4c:40:ab:c5:99:91:d0:81:73:94:1f:e1:
         43:df:8e:cb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUM6sapEcGDCcREIHZCoYhAM1ejEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNGOEJERUM4M0REQ0Q5NzM0NTNGOTdGMTRDMjVDQzk0
NDk5MjcyRTAeFw0yNDAxMTQxNTEyMTlaFw0yNTAxMTIxNTE3MTlaMDMxMTAvBgNV
BAMTKDJBQjcyQ0UzRTIxNDlGMkFEN0REQTNERTMzQjA2MUU0QzU1OTlDMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9g42heh+AMuey1rECLpoVnxG5
TInaaBJa86vKnOid64rfyp7Wdx3YJ3Mur9/mstPkLxEXZ0xB0yK76BdiXEREPAQC
rj4wFjzR5ENqj4JDmxzNfdKPHJ/n7dhHcH3rJTHzAicBbQQearRjtXOQic4qVOFB
RadQje6hQ3mLHj8SlbLcoN36NihQ3L4HZMI/0yRno7FOJFmQ1cF36XSst77osonM
Y0oeXGfZWCVHQR8AZIUtZYmwctoDc2TtY04ytDnzg4llB5+PtRjgRvlmflWA6kuj
XrkmvKLHtL5O/c3pI+TOjZHBdS0ciJkPR8MsjQcuhmbg7zZkNzABipNFx/0FAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKrcs4+IUnyrX3aPeM7Bh5MVZnC8wHwYDVR0j
BBgwFoAUc/i97IPdzZc0U/l/FMJcyUSZJy4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMC83M0Y4QkRFQzgzRERDRDk3MzQ1M0Y5N0YxNEMyNUNDOTQ0OTkyNzJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzczRjhCREVDODNERENEOTcz
NDUzRjk3RjE0QzI1Q0M5NDQ5OTI3MkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAv
MzIzMDMwMmUzMTMyMzUyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsh9sDANBgkqhkiG9w0BAQsFAAOCAQEAsUPF
JuP0pllM5gnTpeBnkv8qiiJSZm6XfeqMg533DScEAwbcXMo3kgM6fbaz38lxDzdN
vtiVzQ+4ScJTYpG8pSJIaY/B2Se07Pb+eI9uPa7c7SijbdbvJAcjXzQdXWJED/Fr
B/ObYxHhfjeikbYxFIYqKiJ/Zyej0FvC3vgYnB/C9DyTNHmGB2dZSz9qtX1aXFWA
slOrs1OrYDI6bhWBgVwH/A0YxtheSh0kz624Upnt3OyEcAXXjenLF/cYQaP3oONT
Xu2RKXoETuqetvK5l8EjhwGTIQm3Wht8NMUzOHHrLovMiklZvr5FUGeFqIZ4TECr
xZmR0IFzlB/hQ9+Oyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org