Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa
File:                     3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          2SQAhJxJ+d/BRX2jencEkm2QBQdHVFtwMAFisBJuBj0=
Subject key identifier:   E7:C1:B1:02:84:86:A3:7D:BE:FB:32:61:B0:31:89:A9:06:29:B6:D9
Certificate issuer:       /CN=B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0
Certificate serial:       7ACAB59A25CC19D3FD4E0A75C6CD86257607ED2F
Authority key identifier: B1:BE:7E:2D:9D:CD:70:7E:1A:54:86:1A:2C:C8:81:00:84:DF:55:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa
Signing time:             Thu 27 Jun 2024 20:46:58 +0000
ROA not before:           Thu 27 Jun 2024 20:41:58 +0000
ROA not after:            Thu 26 Jun 2025 20:46:58 +0000
asID:                     265300
IP address blocks:        200.125.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ca:b5:9a:25:cc:19:d3:fd:4e:0a:75:c6:cd:86:25:76:07:ed:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0
        Validity
            Not Before: Jun 27 20:41:58 2024 GMT
            Not After : Jun 26 20:46:58 2025 GMT
        Subject: CN=E7C1B1028486A37DBEFB3261B03189A90629B6D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:25:28:91:13:32:9e:0b:b7:cd:e2:30:cd:
                    5a:f5:c8:1c:8b:b1:b7:8a:c0:e3:ce:85:69:05:c5:
                    03:24:c3:e8:5d:c4:53:71:e0:79:29:51:ac:54:83:
                    ef:46:09:5c:91:4c:d2:11:5b:0d:29:7a:3e:da:f5:
                    7f:b6:cb:7b:89:82:dd:65:cb:36:d7:0d:53:b5:41:
                    bc:55:df:7f:d8:ed:42:2e:ef:68:37:41:d0:57:74:
                    d5:1e:1e:61:8a:08:ba:f5:40:8b:8e:cd:07:b7:dd:
                    79:1f:ea:4f:df:96:f3:4c:9f:26:d3:90:6b:b9:3c:
                    1b:82:9c:2f:17:a6:3b:78:5c:6e:99:a2:07:6b:a2:
                    d5:ab:ca:4a:fb:d4:dd:c6:d0:22:ea:58:be:8b:1d:
                    b2:44:82:c0:d7:02:f2:97:fc:e7:d6:4e:04:d4:67:
                    e5:28:3e:db:0a:77:76:d6:05:2e:e5:64:f6:fc:b8:
                    9c:34:78:40:62:79:d3:11:12:75:fa:8d:2d:19:c9:
                    35:fa:2d:2a:d3:ec:b8:b4:eb:39:68:24:19:53:d4:
                    dd:55:9d:da:ca:c6:68:64:db:28:e4:bd:f2:83:0a:
                    e7:72:54:b5:9f:56:45:ee:be:bc:68:cf:da:68:eb:
                    95:b7:4b:94:fb:44:67:27:5a:83:27:cc:2c:c0:85:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C1:B1:02:84:86:A3:7D:BE:FB:32:61:B0:31:89:A9:06:29:B6:D9
            X509v3 Authority Key Identifier:
                keyid:B1:BE:7E:2D:9D:CD:70:7E:1A:54:86:1A:2C:C8:81:00:84:DF:55:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1BE7E2D9DCD707E1A54861A2CC8810084DF55B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:13:50:3c:08:34:d7:f2:ae:54:5c:e5:0c:a2:3a:7e:68:49:
         e5:e9:b1:3e:e4:45:ce:f5:8a:d5:8c:fc:95:64:c3:cd:bb:c7:
         6f:14:d6:bd:fe:94:76:f8:26:34:6e:13:53:f8:bc:84:8f:94:
         69:7f:3b:94:1b:91:9b:d1:1c:14:ba:f5:51:e3:7e:60:4e:8b:
         d6:3c:14:85:7c:66:b3:14:a5:7c:47:d1:39:3d:17:d9:48:37:
         41:4e:9e:80:df:12:35:83:2d:7f:96:17:88:b1:41:7e:12:ef:
         07:c3:b0:1f:34:2d:62:5a:8e:cc:27:da:db:f1:6d:b5:db:b3:
         9c:0c:57:41:3f:4a:93:da:59:ef:83:fa:ba:8a:d3:4c:8a:91:
         b5:80:db:d7:c7:4a:cd:13:5b:36:8e:54:47:e9:70:56:74:59:
         c5:05:c4:0b:45:d8:59:12:b1:c4:96:a9:14:1b:52:64:2f:4c:
         22:50:e1:19:97:a9:d1:04:4d:20:3d:37:60:e4:cf:7e:49:ab:
         30:93:77:b1:a7:02:b2:37:b4:f6:fc:f4:9c:87:89:54:a9:99:
         81:1a:03:db:a0:b1:94:07:8c:3d:4a:b0:5f:36:eb:d3:4d:c4:
         ff:e6:ec:43:8e:98:ce:28:34:c8:87:d3:54:38:98:10:ff:93:
         34:e4:c8:3b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUesq1miXMGdP9Tgp1xs2GJXYH7S8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFCRTdFMkQ5RENENzA3RTFBNTQ4NjFBMkNDODgxMDA4
NERGNTVCMDAeFw0yNDA2MjcyMDQxNThaFw0yNTA2MjYyMDQ2NThaMDMxMTAvBgNV
BAMTKEU3QzFCMTAyODQ4NkEzN0RCRUZCMzI2MUIwMzE4OUE5MDYyOUI2RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHyUokRMyngu3zeIwzVr1yByL
sbeKwOPOhWkFxQMkw+hdxFNx4HkpUaxUg+9GCVyRTNIRWw0pej7a9X+2y3uJgt1l
yzbXDVO1QbxV33/Y7UIu72g3QdBXdNUeHmGKCLr1QIuOzQe33Xkf6k/flvNMnybT
kGu5PBuCnC8Xpjt4XG6ZogdrotWrykr71N3G0CLqWL6LHbJEgsDXAvKX/OfWTgTU
Z+UoPtsKd3bWBS7lZPb8uJw0eEBiedMREnX6jS0ZyTX6LSrT7Li06zloJBlT1N1V
ndrKxmhk2yjkvfKDCudyVLWfVkXuvrxoz9po65W3S5T7RGcnWoMnzCzAhTGxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU58GxAoSGo32++zJhsDGJqQYpttkwHwYDVR0j
BBgwFoAUsb5+LZ3NcH4aVIYaLMiBAITfVbAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMC9CMUJFN0UyRDlEQ0Q3MDdFMUE1NDg2MUEyQ0M4ODEwMDg0REY1NUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxQkU3RTJEOURDRDcwN0Ux
QTU0ODYxQTJDQzg4MTAwODRERjU1QjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAv
MzIzMDMwMmUzMTMyMzUyZTMxMzczNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAch9sDANBgkqhkiG9w0BAQsFAAOCAQEAEBNQ
PAg01/KuVFzlDKI6fmhJ5emxPuRFzvWK1Yz8lWTDzbvHbxTWvf6UdvgmNG4TU/i8
hI+UaX87lBuRm9EcFLr1UeN+YE6L1jwUhXxmsxSlfEfROT0X2Ug3QU6egN8SNYMt
f5YXiLFBfhLvB8OwHzQtYlqOzCfa2/FttduznAxXQT9Kk9pZ74P6uorTTIqRtYDb
18dKzRNbNo5UR+lwVnRZxQXEC0XYWRKxxJapFBtSZC9MIlDhGZep0QRNID03YOTP
fkmrMJN3sacCsje09vz0nIeJVKmZgRoD26CxlAeMPUqwXzbr003E/+bsQ46Yzig0
yIfTVDiYEP+TNOTIOw==
-----END CERTIFICATE-----
Generated at Fri Oct 4 22:38:44 2024 by rpki-client on console-ams.rpki-client.org