Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3131312e302f32342d3234203d3e20323730343338.roa
File:                     3230302e31312e3131312e302f32342d3234203d3e20323730343338.roa (raw, json)
Hash identifier:          HLhjOA8ZoQyWQmHFwmYYM3X9U0626ZPzXw2eSVeSpPM=
Subject key identifier:   99:0C:54:2C:25:BB:7B:91:39:9A:42:47:68:5F:D9:12:CE:9F:6C:53
Certificate issuer:       /CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
Certificate serial:       0BDA2BEEB424E6B1A8EEE90A554FE3C1C0A2DED6
Authority key identifier: 55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3131312e302f32342d3234203d3e20323730343338.roa
Signing time:             Wed 01 Nov 2023 18:24:18 +0000
ROA not before:           Wed 01 Nov 2023 18:19:18 +0000
ROA not after:            Wed 30 Oct 2024 18:24:18 +0000
asID:                     270438
IP address blocks:        200.11.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:da:2b:ee:b4:24:e6:b1:a8:ee:e9:0a:55:4f:e3:c1:c0:a2:de:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
        Validity
            Not Before: Nov  1 18:19:18 2023 GMT
            Not After : Oct 30 18:24:18 2024 GMT
        Subject: CN=990C542C25BB7B91399A4247685FD912CE9F6C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:ad:70:73:92:be:44:e9:c9:3f:9a:08:53:
                    4d:7a:37:55:10:92:f9:22:1c:d8:b2:20:8e:02:db:
                    eb:fd:bc:7c:73:47:87:29:a6:b3:78:69:a2:3c:54:
                    95:f2:c0:18:80:8d:75:32:46:3f:c5:00:cc:a6:a2:
                    c2:19:ee:f4:66:00:5d:07:b0:35:2d:e4:00:97:24:
                    1d:40:1e:8b:99:0d:11:57:35:04:54:85:b6:78:e8:
                    ab:ba:29:b7:ff:b3:1a:89:fb:ae:a3:9a:09:d7:6e:
                    52:fe:fd:bc:d2:f0:7e:78:75:c6:26:81:db:be:db:
                    ce:76:1a:5a:31:5b:3a:1c:dd:e0:76:6f:d6:78:ad:
                    a1:a4:32:3d:c6:84:9b:2c:7e:86:e1:8a:70:0e:5d:
                    49:9a:82:15:d2:a7:4d:52:fa:ec:f9:22:b2:01:3f:
                    b4:c3:0c:9a:95:2f:6a:c4:ea:ce:8f:5e:fa:ed:6d:
                    6b:13:72:09:0f:5a:98:e4:c9:5f:cc:e0:c6:e7:02:
                    a9:aa:44:4d:47:a7:8d:b5:b1:82:65:10:62:ce:cb:
                    27:e8:07:15:50:10:95:d1:77:02:21:80:7f:53:22:
                    db:b5:4e:7c:2b:75:71:57:c5:d6:6d:b6:02:da:67:
                    fb:da:56:51:74:63:e7:7a:e3:77:e1:09:db:cd:15:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0C:54:2C:25:BB:7B:91:39:9A:42:47:68:5F:D9:12:CE:9F:6C:53
            X509v3 Authority Key Identifier:
                keyid:55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/3230302e31312e3131312e302f32342d3234203d3e20323730343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:97:62:3b:5d:5d:5e:c2:36:55:a2:51:0f:03:7f:c8:23:a7:
         e6:31:b1:a4:69:d8:39:a4:25:ac:16:63:db:4a:47:00:96:40:
         99:b6:53:b7:bf:59:fd:d0:a4:92:fe:3d:6d:9e:26:db:fa:34:
         97:28:24:b4:4d:71:a3:e5:f5:60:fd:da:79:82:d4:56:03:4c:
         6f:1d:78:f8:68:51:57:02:55:55:0f:00:cd:a0:6e:3e:4b:78:
         e1:28:4b:d2:00:ce:9a:08:9f:cc:05:28:22:3b:c6:83:c8:3b:
         be:8c:4e:ce:0a:00:ca:aa:61:2f:13:2d:76:87:bf:ef:21:7a:
         7c:76:e7:40:dc:b4:29:2a:4a:cb:a2:26:28:aa:bd:ec:67:6c:
         e8:1d:57:00:f6:58:b1:22:66:90:1b:9c:0a:44:0c:ae:93:0b:
         b8:44:c6:b7:4d:f1:2b:43:75:7f:b1:09:18:f2:4d:50:9e:5c:
         f0:36:ad:3c:0e:41:2c:3c:16:43:de:55:aa:7d:98:9b:db:d3:
         83:bc:44:73:6e:18:04:20:5d:3b:c6:eb:16:63:e2:ad:05:cc:
         54:3e:f9:e2:74:0f:4d:50:24:a2:e6:58:0c:df:06:7d:e6:a8:
         16:2e:98:12:78:78:d7:76:e7:a0:c4:8f:82:b4:93:e0:37:a6:
         68:c1:3e:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC9or7rQk5rGo7ukKVU/jwcCi3tYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU1NjcwMDMxMzQwQjVEMzFGQTlFOTNFRkFCNEY0OUQ1
QTU1M0IzMzAeFw0yMzExMDExODE5MThaFw0yNDEwMzAxODI0MThaMDMxMTAvBgNV
BAMTKDk5MEM1NDJDMjVCQjdCOTEzOTlBNDI0NzY4NUZEOTEyQ0U5RjZDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjq1wc5K+ROnJP5oIU016N1UQ
kvkiHNiyII4C2+v9vHxzR4cpprN4aaI8VJXywBiAjXUyRj/FAMymosIZ7vRmAF0H
sDUt5ACXJB1AHouZDRFXNQRUhbZ46Ku6Kbf/sxqJ+66jmgnXblL+/bzS8H54dcYm
gdu+2852GloxWzoc3eB2b9Z4raGkMj3GhJssfobhinAOXUmaghXSp01S+uz5IrIB
P7TDDJqVL2rE6s6PXvrtbWsTcgkPWpjkyV/M4MbnAqmqRE1Hp421sYJlEGLOyyfo
BxVQEJXRdwIhgH9TItu1TnwrdXFXxdZttgLaZ/vaVlF0Y+d643fhCdvNFXRlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmQxULCW7e5E5mkJHaF/ZEs6fbFMwHwYDVR0j
BBgwFoAUVVZwAxNAtdMfqek++rT0nVpVOzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0Q5eTRXcnhSNVo4QUJxREFmTHJUWGd3TjNkU25aSkR0cGQxblBBZUFw
cngvMC81NTU2NzAwMzEzNDBCNUQzMUZBOUU5M0VGQUI0RjQ5RDVBNTUzQjMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1NTY3MDAzMTM0MEI1RDMx
RkE5RTkzRUZBQjRGNDlENUE1NTNCMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NEOXk0V3J4UjVaOEFCcURBZkxyVFhnd04zZFNuWkpEdHBkMW5QQWVBcHJ4LzAv
MzIzMDMwMmUzMTMxMmUzMTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIC28wDQYJKoZIhvcNAQELBQADggEBAJqXYjtd
XV7CNlWiUQ8Df8gjp+YxsaRp2DmkJawWY9tKRwCWQJm2U7e/Wf3QpJL+PW2eJtv6
NJcoJLRNcaPl9WD92nmC1FYDTG8dePhoUVcCVVUPAM2gbj5LeOEoS9IAzpoIn8wF
KCI7xoPIO76MTs4KAMqqYS8TLXaHv+8henx250DctCkqSsuiJiiqvexnbOgdVwD2
WLEiZpAbnApEDK6TC7hExrdN8StDdX+xCRjyTVCeXPA2rTwOQSw8FkPeVap9mJvb
04O8RHNuGAQgXTvG6xZj4q0FzFQ++eJ0D01QJKLmWAzfBn3mqBYumBJ4eNd256DE
j4K0k+A3pmjBPiQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org