Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131392e302f32342d3234203d3e20323731323934.roa
File:                     3230312e3232312e3131392e302f32342d3234203d3e20323731323934.roa (raw, json)
Hash identifier:          K8b+y3SWLBDcHccsYvVbe9RrN1sR4prn0itujOLQly0=
Subject key identifier:   07:35:16:C8:80:21:A2:BF:00:A9:97:40:48:71:4B:CF:F7:5F:E5:24
Certificate issuer:       /CN=DD3E7B838121B434E340680D66319BE2A1861311
Certificate serial:       2FF89A985D2B1F02014470E6D2DCAF943C876BD8
Authority key identifier: DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131392e302f32342d3234203d3e20323731323934.roa
Signing time:             Wed 10 Jan 2024 12:45:50 +0000
ROA not before:           Wed 10 Jan 2024 12:40:50 +0000
ROA not after:            Wed 08 Jan 2025 12:45:50 +0000
asID:                     271294
IP address blocks:        201.221.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f8:9a:98:5d:2b:1f:02:01:44:70:e6:d2:dc:af:94:3c:87:6b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3E7B838121B434E340680D66319BE2A1861311
        Validity
            Not Before: Jan 10 12:40:50 2024 GMT
            Not After : Jan  8 12:45:50 2025 GMT
        Subject: CN=073516C88021A2BF00A9974048714BCFF75FE524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:9a:08:c0:f2:ad:3a:0f:ab:dd:1c:32:b2:
                    48:4e:ad:fb:39:da:42:6e:0b:40:95:99:68:bb:5b:
                    9e:55:e8:6c:93:c3:99:4f:97:1e:13:1b:44:b1:7d:
                    87:ad:f0:90:f7:29:25:f2:63:00:e2:36:a5:5a:df:
                    6d:bb:5c:18:0a:02:83:97:d5:af:65:61:1b:e3:d3:
                    b0:ca:64:ea:43:d3:56:68:42:25:9d:46:14:a7:61:
                    c2:fe:fa:1a:8a:48:f0:40:27:8f:16:d7:11:46:02:
                    38:f8:72:54:38:e1:1d:c8:da:15:28:08:ac:25:f1:
                    f8:69:f7:1a:d8:4d:14:8f:1d:e3:e7:d8:60:b7:75:
                    10:cc:8d:f2:72:32:3d:47:75:79:ef:64:54:8b:46:
                    43:ee:35:bb:d6:04:8c:12:b5:fd:7d:2d:c9:32:91:
                    6c:13:7f:0a:29:8e:2c:b2:6b:b2:f4:6c:df:40:78:
                    4b:da:51:10:3e:a2:df:99:b3:56:d1:1b:29:23:29:
                    cc:88:bf:4d:9e:bc:d3:e7:ea:0d:57:04:22:e3:d9:
                    fd:c4:c7:7d:0f:06:7e:3a:3d:ce:3f:1f:18:47:78:
                    3c:d6:2f:e3:8d:be:0c:df:cf:e7:d1:d4:ca:ad:37:
                    92:31:77:bc:39:cf:25:29:22:d4:a2:15:45:f5:95:
                    9e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:35:16:C8:80:21:A2:BF:00:A9:97:40:48:71:4B:CF:F7:5F:E5:24
            X509v3 Authority Key Identifier:
                keyid:DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DD3E7B838121B434E340680D66319BE2A1861311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131392e302f32342d3234203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:31:60:5a:c8:58:25:62:a4:af:9f:ef:1c:db:85:37:58:1f:
         b8:56:4b:8a:06:a0:c9:96:ef:01:21:86:ff:a8:41:67:97:8f:
         38:90:1e:c8:ee:74:0e:0b:ae:93:83:4b:80:ab:92:d7:19:86:
         91:e7:df:d0:75:de:57:11:65:81:c9:67:26:83:98:03:a1:14:
         d7:fe:94:54:54:24:d9:69:7a:56:4d:4c:0c:06:22:47:01:a0:
         05:cf:20:a2:59:88:6f:4f:d2:81:71:54:58:5a:59:0c:13:a9:
         21:e8:c1:74:21:c0:bc:b0:3a:99:ca:9e:52:71:79:07:32:d8:
         5d:cc:34:87:6d:b7:ea:a2:87:cc:19:f4:09:86:5b:42:10:90:
         38:4c:4e:ca:ec:93:e2:34:b8:6b:5b:88:3a:a9:b1:05:8a:a1:
         78:3d:80:45:97:6a:0b:cb:d5:09:d6:2f:50:36:6d:82:d1:0a:
         73:d4:91:f1:db:c2:ad:d2:ff:dd:e0:87:35:9f:99:1e:54:7f:
         1f:c6:f5:0c:38:01:ab:45:38:bd:6b:fc:91:d6:99:b3:45:85:
         2c:c5:c3:9f:17:c0:96:ac:64:33:b7:5a:27:d2:18:25:a2:e2:
         73:42:8c:86:0e:f1:19:1c:02:88:4b:03:8a:d5:2d:0a:28:4e:
         3a:05:a1:6a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL/iamF0rHwIBRHDm0tyvlDyHa9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQzRTdCODM4MTIxQjQzNEUzNDA2ODBENjYzMTlCRTJB
MTg2MTMxMTAeFw0yNDAxMTAxMjQwNTBaFw0yNTAxMDgxMjQ1NTBaMDMxMTAvBgNV
BAMTKDA3MzUxNkM4ODAyMUEyQkYwMEE5OTc0MDQ4NzE0QkNGRjc1RkU1MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PZoIwPKtOg+r3RwyskhOrfs5
2kJuC0CVmWi7W55V6GyTw5lPlx4TG0SxfYet8JD3KSXyYwDiNqVa3227XBgKAoOX
1a9lYRvj07DKZOpD01ZoQiWdRhSnYcL++hqKSPBAJ48W1xFGAjj4clQ44R3I2hUo
CKwl8fhp9xrYTRSPHePn2GC3dRDMjfJyMj1HdXnvZFSLRkPuNbvWBIwStf19Lcky
kWwTfwopjiyya7L0bN9AeEvaURA+ot+Zs1bRGykjKcyIv02evNPn6g1XBCLj2f3E
x30PBn46Pc4/HxhHeDzWL+ONvgzfz+fR1MqtN5Ixd7w5zyUpItSiFUX1lZ4tAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBzUWyIAhor8AqZdASHFLz/df5SQwHwYDVR0j
BBgwFoAU3T57g4EhtDTjQGgNZjGb4qGGExEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2JGU3RlRjRGRmZkVHViU3ZONWZFN3RNMUplVk5qODMxb0EydEEzYmt3
TmovMC9ERDNFN0I4MzgxMjFCNDM0RTM0MDY4MEQ2NjMxOUJFMkExODYxMzExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0REM0U3QjgzODEyMUI0MzRF
MzQwNjgwRDY2MzE5QkUyQTE4NjEzMTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NiRlN0ZUY0RkZmZFR1YlN2TjVmRTd0TTFKZVZOajgzMW9BMnRBM2Jrd05qLzAv
MzIzMDMxMmUzMjMyMzEyZTMxMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMyMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnddzANBgkqhkiG9w0BAQsFAAOCAQEAizFg
WshYJWKkr5/vHNuFN1gfuFZLigagyZbvASGG/6hBZ5ePOJAeyO50Dguuk4NLgKuS
1xmGkeff0HXeVxFlgclnJoOYA6EU1/6UVFQk2Wl6Vk1MDAYiRwGgBc8golmIb0/S
gXFUWFpZDBOpIejBdCHAvLA6mcqeUnF5BzLYXcw0h2236qKHzBn0CYZbQhCQOExO
yuyT4jS4a1uIOqmxBYqheD2ARZdqC8vVCdYvUDZtgtEKc9SR8dvCrdL/3eCHNZ+Z
HlR/H8b1DDgBq0U4vWv8kdaZs0WFLMXDnxfAlqxkM7daJ9IYJaLic0KMhg7xGRwC
iEsDitUtCihOOgWhag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org