Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa
File:                     3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          KMKUP3AYIvn0LuzTE3dQXFwrIP7PQcWeIFTz3qBZeu0=
Subject key identifier:   8B:1E:57:75:4F:00:A8:90:AA:0B:EF:07:6F:97:6C:BC:84:32:D0:7E
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       35D69D65CE101DD97A40B4B896C9CAF7223B8B
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa
Signing time:             Thu 04 Apr 2024 00:16:18 +0000
ROA not before:           Thu 04 Apr 2024 00:11:18 +0000
ROA not after:            Thu 03 Apr 2025 00:16:18 +0000
asID:                     265300
IP address blocks:        200.125.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d6:9d:65:ce:10:1d:d9:7a:40:b4:b8:96:c9:ca:f7:22:3b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr  4 00:11:18 2024 GMT
            Not After : Apr  3 00:16:18 2025 GMT
        Subject: CN=8B1E57754F00A890AA0BEF076F976CBC8432D07E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:4f:24:5f:ad:58:b7:27:bb:f3:aa:34:9e:
                    ac:79:eb:ab:2e:34:df:fa:0c:cb:34:dd:e2:64:67:
                    6d:ac:87:b2:0e:49:fa:de:e4:a5:74:1d:a9:41:e3:
                    70:fc:3e:78:d0:ac:9f:cc:5e:af:1c:c0:0a:1b:26:
                    46:cd:c7:93:00:ec:d6:5e:a8:c8:d2:b7:9c:f5:66:
                    fa:7a:c8:3c:e4:00:f6:24:e8:3e:0e:64:cb:b9:19:
                    df:65:e1:d4:62:e9:12:44:1e:8a:62:43:47:f1:0d:
                    73:f2:21:2f:8c:b0:47:28:cc:c9:ea:62:b3:7f:1f:
                    a5:09:d2:de:9c:d1:c9:d5:f2:31:98:d6:49:3e:89:
                    83:28:a3:fc:a6:65:ea:ba:de:07:7b:65:e5:69:d6:
                    ab:aa:ea:6a:2a:86:d7:6c:3e:d7:37:1f:d2:ff:6b:
                    23:39:d7:4c:0a:3c:8f:48:d4:a8:63:ae:68:20:e0:
                    0e:0b:42:a7:69:a5:2e:c0:6d:92:83:74:d8:f0:9f:
                    c9:72:ed:43:95:6d:2b:91:ad:83:35:48:6e:41:68:
                    31:c4:e2:f2:70:4e:43:fa:ca:2b:5e:3c:77:2f:4b:
                    f4:be:6b:93:52:d5:61:1e:9e:83:a1:41:11:69:a6:
                    d9:6e:aa:fe:1e:44:73:25:99:79:99:71:0d:77:d0:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1E:57:75:4F:00:A8:90:AA:0B:EF:07:6F:97:6C:BC:84:32:D0:7E
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:eb:23:8e:77:be:3c:a1:2a:d6:fc:c9:73:f3:1c:16:7f:
         98:4c:86:92:60:9f:f5:e5:05:dc:cc:b5:3d:2b:4b:8d:16:c2:
         ba:b4:cf:f9:76:f8:a1:94:a4:e6:4e:77:e4:a6:c7:5e:8d:25:
         9e:3c:3b:a8:81:0c:f1:8a:8f:80:6b:ea:df:74:a6:55:a5:49:
         f6:19:de:dd:d7:34:20:17:0d:2b:6b:aa:4b:13:90:61:04:44:
         16:f3:d1:0b:8c:d7:55:42:7e:3e:09:58:10:65:7c:8f:94:f8:
         86:c3:16:38:78:2e:cf:87:15:c8:2c:db:f4:82:37:41:f9:d8:
         96:9e:7a:4f:bb:a3:59:75:bd:58:c6:e9:23:b1:a2:c2:de:f0:
         9e:a8:4c:23:25:00:98:27:a5:5e:b1:af:fc:70:7c:48:c4:80:
         93:e0:bc:e0:3c:ca:74:b4:3b:43:df:3d:41:32:29:b9:6d:df:
         7c:a2:a4:f3:ab:33:b9:b2:d5:62:24:ca:2b:e6:d8:aa:cf:fd:
         a7:9d:8b:fd:0a:f3:5b:e9:79:cb:14:a1:8c:4c:4f:58:21:3b:
         2a:21:d8:55:aa:4a:6d:54:32:60:27:34:fb:6d:bc:f3:aa:63:
         49:03:a4:1c:0b:1d:9e:3b:35:47:0b:6e:86:09:f6:02:61:49:
         ba:98:77:ca
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgITNdadZc4QHdl6QLS4lsnK9yI7izANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhBNTM3QzI1NkVBMENFMzFCRjA1QTkxODg3MzAzMjQ0MTQ1
QUNFOEFEMB4XDTI0MDQwNDAwMTExOFoXDTI1MDQwMzAwMTYxOFowMzExMC8GA1UE
AxMoOEIxRTU3NzU0RjAwQTg5MEFBMEJFRjA3NkY5NzZDQkM4NDMyRDA3RTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALL0TyRfrVi3J7vzqjSerHnrqy40
3/oMyzTd4mRnbayHsg5J+t7kpXQdqUHjcPw+eNCsn8xerxzAChsmRs3HkwDs1l6o
yNK3nPVm+nrIPOQA9iToPg5ky7kZ32Xh1GLpEkQeimJDR/ENc/IhL4ywRyjMyepi
s38fpQnS3pzRydXyMZjWST6Jgyij/KZl6rreB3tl5WnWq6rqaiqG12w+1zcf0v9r
IznXTAo8j0jUqGOuaCDgDgtCp2mlLsBtkoN02PCfyXLtQ5VtK5GtgzVIbkFoMcTi
8nBOQ/rKK148dy9L9L5rk1LVYR6eg6FBEWmm2W6q/h5EcyWZeZlxDXfQ11UCAwEA
AaOCAlMwggJPMB0GA1UdDgQWBBSLHld1TwCokKoL7wdvl2y8hDLQfjAfBgNVHSME
GDAWgBSlN8JW6gzjG/BakYhzAyRBRazorTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DN2Q0YkZmS3VWelU4ZHhvQ1NxdnNEM1VCV2tWYUR3dXVyTHFIZlpXRURv
Yy8xL0E1MzdDMjU2RUEwQ0UzMUJGMDVBOTE4ODczMDMyNDQxNDVBQ0U4QUQuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQTUzN0MyNTZFQTBDRTMxQkYw
NUE5MTg4NzMwMzI0NDE0NUFDRThBRC5jZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGd
BggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VEb2MvMS8z
MjMwMzAyZTMxMzIzNTJlMzEzNzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIz
NjM1MzMzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQByH2wMA0GCSqGSIb3DQEBCwUAA4IBAQCnBesj
jne+PKEq1vzJc/McFn+YTIaSYJ/15QXczLU9K0uNFsK6tM/5dvihlKTmTnfkpsde
jSWePDuogQzxio+Aa+rfdKZVpUn2Gd7d1zQgFw0ra6pLE5BhBEQW89ELjNdVQn4+
CVgQZXyPlPiGwxY4eC7PhxXILNv0gjdB+diWnnpPu6NZdb1YxukjsaLC3vCeqEwj
JQCYJ6Vesa/8cHxIxICT4LzgPMp0tDtD3z1BMim5bd98oqTzqzO5stViJMor5tiq
z/2nnYv9CvNb6XnLFKGMTE9YITsqIdhVqkptVDJgJzT7bbzzqmNJA6QcCx2eOzVH
C26GCfYCYUm6mHfK
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org