Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233362e33322e302f31392d3234203d3e2032373136.roa
File:                     3230302e3233362e33322e302f31392d3234203d3e2032373136.roa (raw, json)
Hash identifier:          e2fo7mjyzkKiPMjK66ZOxYv++WmSGAkSatBPFpVHc9U=
Subject key identifier:   87:A1:78:34:2B:5E:1C:C6:FD:0D:93:BB:3E:74:0B:64:74:EA:05:A7
Certificate issuer:       /CN=71712024E7C984B82DF5E8204BB161EDF9843B50
Certificate serial:       3BC3C90866C697DA6B1E19BF43C2123A53CFAC51
Authority key identifier: 71:71:20:24:E7:C9:84:B8:2D:F5:E8:20:4B:B1:61:ED:F9:84:3B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71712024E7C984B82DF5E8204BB161EDF9843B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233362e33322e302f31392d3234203d3e2032373136.roa
Signing time:             Mon 04 Jul 2022 18:12:56 +0000
ROA not before:           Mon 04 Jul 2022 18:07:56 +0000
ROA not after:            Mon 03 Jul 2023 18:12:56 +0000
asID:                     2716
IP address blocks:        200.236.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c3:c9:08:66:c6:97:da:6b:1e:19:bf:43:c2:12:3a:53:cf:ac:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71712024E7C984B82DF5E8204BB161EDF9843B50
        Validity
            Not Before: Jul  4 18:07:56 2022 GMT
            Not After : Jul  3 18:12:56 2023 GMT
        Subject: CN=3082010A0282010100BB06B44A385D5EBF14FA308B0B5AF4AB3D2B3E05E4C132DE2F5866D643F89AA0C0765865E675AC8B53E5CCA379DDF255DE658CA74D0897D6FA329FC136F80F6A3DD8C39504FED83E919489B19B10A45516E3D7454549EC0A59DA65CCD0A8410514CEAD35AE5D05B7B4DA18B267743A136F89E88B2F331D34CFB1BEAEE84C87CAA5C79CDC64A2A1AD4FA6345C4D545104FB2A5E1D4F1322A21319059A561B1D19DE836AB722375F37A8564784E5445DA9B17281545A0ED12A6DADA7CD1456C32BC1BD07B90622CA8D617F41F1C027A4E2CCB2B8FF9346704464D9FB4FC8B2CB12BE5B50F68DE02710219322D9F74D262284EABAD82E04A43A91209040E6200D190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:b4:4a:38:5d:5e:bf:14:fa:30:8b:0b:5a:
                    f4:ab:3d:2b:3e:05:e4:c1:32:de:2f:58:66:d6:43:
                    f8:9a:a0:c0:76:58:65:e6:75:ac:8b:53:e5:cc:a3:
                    79:dd:f2:55:de:65:8c:a7:4d:08:97:d6:fa:32:9f:
                    c1:36:f8:0f:6a:3d:d8:c3:95:04:fe:d8:3e:91:94:
                    89:b1:9b:10:a4:55:16:e3:d7:45:45:49:ec:0a:59:
                    da:65:cc:d0:a8:41:05:14:ce:ad:35:ae:5d:05:b7:
                    b4:da:18:b2:67:74:3a:13:6f:89:e8:8b:2f:33:1d:
                    34:cf:b1:be:ae:e8:4c:87:ca:a5:c7:9c:dc:64:a2:
                    a1:ad:4f:a6:34:5c:4d:54:51:04:fb:2a:5e:1d:4f:
                    13:22:a2:13:19:05:9a:56:1b:1d:19:de:83:6a:b7:
                    22:37:5f:37:a8:56:47:84:e5:44:5d:a9:b1:72:81:
                    54:5a:0e:d1:2a:6d:ad:a7:cd:14:56:c3:2b:c1:bd:
                    07:b9:06:22:ca:8d:61:7f:41:f1:c0:27:a4:e2:cc:
                    b2:b8:ff:93:46:70:44:64:d9:fb:4f:c8:b2:cb:12:
                    be:5b:50:f6:8d:e0:27:10:21:93:22:d9:f7:4d:26:
                    22:84:ea:ba:d8:2e:04:a4:3a:91:20:90:40:e6:20:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A1:78:34:2B:5E:1C:C6:FD:0D:93:BB:3E:74:0B:64:74:EA:05:A7
            X509v3 Authority Key Identifier:
                keyid:71:71:20:24:E7:C9:84:B8:2D:F5:E8:20:4B:B1:61:ED:F9:84:3B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/71712024E7C984B82DF5E8204BB161EDF9843B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71712024E7C984B82DF5E8204BB161EDF9843B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233362e33322e302f31392d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:82:e4:43:2f:8b:17:ae:09:92:1d:29:31:3a:15:a1:46:79:
         0f:bb:54:a7:83:f6:c7:6a:85:cb:85:71:0b:95:2e:3b:2d:08:
         f5:85:5a:f6:98:bb:ea:09:a7:9d:70:57:e1:06:0e:8a:80:27:
         db:49:72:10:07:c7:54:99:bb:c4:0b:29:67:d6:b7:9c:38:ef:
         71:6d:fb:8f:1b:5c:d5:cf:96:3e:4f:3e:d6:b2:da:54:11:70:
         a2:d8:a7:e9:5b:d1:7f:72:28:a0:40:fd:5b:55:0f:71:19:43:
         48:78:45:53:23:52:9a:be:ef:56:4e:82:34:18:4f:c5:4a:f2:
         34:1a:8d:22:26:e3:7e:fb:be:32:83:b3:28:fc:ed:b2:65:aa:
         30:cc:81:ef:e3:6c:70:7a:48:c9:69:85:ba:be:cb:63:67:e1:
         9b:a7:23:f9:04:76:52:46:77:36:14:db:46:76:bd:b2:82:9d:
         ce:b4:0e:31:ba:b2:d6:83:6a:6d:07:d2:52:ca:c3:6b:c6:ad:
         ec:cb:64:04:12:9f:1b:e7:63:2a:4d:e8:82:90:77:5e:df:39:
         48:29:60:f3:11:00:18:da:75:41:d8:c2:98:e7:bb:ea:cf:96:
         e4:b6:4f:13:2d:79:86:f0:48:0d:d0:eb:98:ff:74:d0:93:a7:
         df:ff:f4:d7
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUO8PJCGbGl9prHhm/Q8ISOlPPrFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE3MTIwMjRFN0M5ODRCODJERjVFODIwNEJCMTYxRURG
OTg0M0I1MDAeFw0yMjA3MDQxODA3NTZaFw0yMzA3MDMxODEyNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkIwNkI0NEEzODVENUVCRjE0
RkEzMDhCMEI1QUY0QUIzRDJCM0UwNUU0QzEzMkRFMkY1ODY2RDY0M0Y4OUFBMEMw
NzY1ODY1RTY3NUFDOEI1M0U1Q0NBMzc5RERGMjU1REU2NThDQTc0RDA4OTdENkZB
MzI5RkMxMzZGODBGNkEzREQ4QzM5NTA0RkVEODNFOTE5NDg5QjE5QjEwQTQ1NTE2
RTNENzQ1NDU0OUVDMEE1OURBNjVDQ0QwQTg0MTA1MTRDRUFEMzVBRTVEMDVCN0I0
REExOEIyNjc3NDNBMTM2Rjg5RTg4QjJGMzMxRDM0Q0ZCMUJFQUVFODRDODdDQUE1
Qzc5Q0RDNjRBMkExQUQ0RkE2MzQ1QzRENTQ1MTA0RkIyQTVFMUQ0RjEzMjJBMjEz
MTkwNTlBNTYxQjFEMTlERTgzNkFCNzIyMzc1RjM3QTg1NjQ3ODRFNTQ0NURBOUIx
NzI4MTU0NUEwRUQxMkE2REFEQTdDRDE0NTZDMzJCQzFCRDA3QjkwNjIyQ0E4RDYx
N0Y0MUYxQzAyN0E0RTJDQ0IyQjhGRjkzNDY3MDQ0NjREOUZCNEZDOEIyQ0IxMkJF
NUI1MEY2OERFMDI3MTAyMTkzMjJEOUY3NEQyNjIyODRFQUJBRDgyRTA0QTQzQTkx
MjA5MDQwRTYyMDBEMTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuwa0SjhdXr8U+jCLC1r0qz0rPgXkwTLeL1hm1kP4mqDAdlhl5nWs
i1PlzKN53fJV3mWMp00Il9b6Mp/BNvgPaj3Yw5UE/tg+kZSJsZsQpFUW49dFRUns
ClnaZczQqEEFFM6tNa5dBbe02hiyZ3Q6E2+J6IsvMx00z7G+ruhMh8qlx5zcZKKh
rU+mNFxNVFEE+ypeHU8TIqITGQWaVhsdGd6DarciN183qFZHhOVEXamxcoFUWg7R
Km2tp80UVsMrwb0HuQYiyo1hf0HxwCek4syyuP+TRnBEZNn7T8iyyxK+W1D2jeAn
ECGTItn3TSYihOq62C4EpDqRIJBA5iANGQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FIeheDQrXhzG/Q2Tuz50C2R06gWnMB8GA1UdIwQYMBaAFHFxICTnyYS4LfXoIEux
Ye35hDtQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q2NTdiWFBDVDFyczVz
Y21lSjU3Q1NWNzEyQmY2TGdtN0JZM0Zydnl0ZmJHLzAvNzE3MTIwMjRFN0M5ODRC
ODJERjVFODIwNEJCMTYxRURGOTg0M0I1MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83MTcxMjAyNEU3Qzk4NEI4MkRGNUU4MjA0QkIxNjFFREY5ODQz
QjUwLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ENjU3YlhQQ1QxcnM1c2NtZUo1
N0NTVjcxMkJmNkxnbTdCWTNGcnZ5dGZiRy8wLzMyMzAzMDJlMzIzMzM2MmUzMzMy
MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzNzMxMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXI7CAw
DQYJKoZIhvcNAQELBQADggEBAIOC5EMvixeuCZIdKTE6FaFGeQ+7VKeD9sdqhcuF
cQuVLjstCPWFWvaYu+oJp51wV+EGDoqAJ9tJchAHx1SZu8QLKWfWt5w473Ft+48b
XNXPlj5PPtay2lQRcKLYp+lb0X9yKKBA/VtVD3EZQ0h4RVMjUpq+71ZOgjQYT8VK
8jQajSIm4377vjKDsyj87bJlqjDMge/jbHB6SMlphbq+y2Nn4ZunI/kEdlJGdzYU
20Z2vbKCnc60DjG6staDam0H0lLKw2vGrezLZAQSnxvnYypN6IKQd17fOUgpYPMR
ABjadUHYwpjnu+rPluS2TxMteYbwSA3Q65j/dNCTp9//9Nc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org