Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233382e302e302f31382d3234203d3e2032373136.roa
File:                     3230302e3233382e302e302f31382d3234203d3e2032373136.roa (raw, json)
Hash identifier:          kPCs0RsBhcOATg9Q1DRQC2IEDNukMR3IW7Q6O7kA9Mc=
Subject key identifier:   2A:4D:48:78:8A:28:B0:10:EF:BB:0E:C2:92:66:B0:DF:92:80:D4:F6
Certificate issuer:       /CN=71712024E7C984B82DF5E8204BB161EDF9843B50
Certificate serial:       064B5F49FAFBCCFBA11736AC6DA5CBB58A6A7430
Authority key identifier: 71:71:20:24:E7:C9:84:B8:2D:F5:E8:20:4B:B1:61:ED:F9:84:3B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71712024E7C984B82DF5E8204BB161EDF9843B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233382e302e302f31382d3234203d3e2032373136.roa
Signing time:             Mon 04 Jul 2022 18:12:56 +0000
ROA not before:           Mon 04 Jul 2022 18:07:56 +0000
ROA not after:            Mon 03 Jul 2023 18:12:56 +0000
asID:                     2716
IP address blocks:        200.238.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4b:5f:49:fa:fb:cc:fb:a1:17:36:ac:6d:a5:cb:b5:8a:6a:74:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71712024E7C984B82DF5E8204BB161EDF9843B50
        Validity
            Not Before: Jul  4 18:07:56 2022 GMT
            Not After : Jul  3 18:12:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:be:fa:a4:2d:c3:f7:54:6f:06:e8:91:5c:
                    15:03:18:d1:c8:04:5e:f5:00:6c:38:6b:15:57:48:
                    9a:36:b8:f0:e1:e6:55:d4:9a:ae:5a:6f:c6:9a:8f:
                    24:ea:a3:81:8a:ec:f0:85:09:0c:5f:be:fc:de:12:
                    33:b9:c8:06:0d:c7:31:1e:68:8c:d9:ed:09:66:5e:
                    71:34:48:e9:28:55:8b:df:47:88:5d:99:d7:c8:57:
                    e4:07:ce:69:19:af:d2:c6:ed:03:1a:b2:cf:d5:3f:
                    3e:da:a2:c1:47:5c:08:b1:a9:e4:5a:0b:28:39:0b:
                    f4:7c:38:82:07:e0:72:df:5e:24:a2:4c:90:45:77:
                    b0:b7:6d:b8:db:3f:e6:56:78:c9:e9:88:e7:e2:d5:
                    95:da:a3:35:0a:98:ca:ca:04:a7:3f:cb:3d:f4:4a:
                    59:1c:4b:6e:a1:75:b8:fb:58:c9:55:49:99:10:e5:
                    05:e8:67:6a:d9:3f:21:4e:16:18:fb:07:da:43:db:
                    d8:4b:7d:f3:a5:55:53:4b:47:17:34:01:1d:b8:1e:
                    c6:ce:e5:ba:b5:01:97:54:e6:d1:82:f4:ed:59:6b:
                    48:7c:fd:fd:9b:f7:f0:a6:df:d5:5f:86:47:43:56:
                    c9:d0:79:41:26:d1:8c:21:72:54:cb:a9:aa:59:11:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:48:78:8A:28:B0:10:EF:BB:0E:C2:92:66:B0:DF:92:80:D4:F6
            X509v3 Authority Key Identifier:
                keyid:71:71:20:24:E7:C9:84:B8:2D:F5:E8:20:4B:B1:61:ED:F9:84:3B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/71712024E7C984B82DF5E8204BB161EDF9843B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71712024E7C984B82DF5E8204BB161EDF9843B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/3230302e3233382e302e302f31382d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:db:73:f2:c0:2d:3c:12:16:c9:14:a2:08:1a:e0:75:bc:a5:
         65:ae:b7:a5:6a:2b:1e:65:ad:a7:e5:dd:aa:89:cc:1c:82:51:
         65:aa:a2:70:a1:98:60:4f:36:41:4c:8e:78:de:13:9e:ad:aa:
         fd:5c:2a:09:d4:fb:a4:cb:e7:7a:f1:39:27:67:18:e8:de:bc:
         3b:38:42:34:96:cd:8c:a0:a3:b2:82:f1:1b:eb:a9:5a:2d:ed:
         eb:d8:11:2a:77:e0:13:ee:41:3f:a8:9d:e4:77:d6:36:bc:4b:
         fe:ea:f9:c3:ab:19:31:44:13:6c:db:3f:46:35:8f:70:4c:b2:
         2c:37:b5:b8:f2:80:2a:c1:ce:69:40:fd:ca:6c:6e:ff:d6:bf:
         54:4b:25:e2:c0:e9:fa:fd:c6:62:b1:73:e9:61:14:06:7a:3e:
         4e:5c:42:4a:9c:62:0b:5c:1c:58:86:ef:5e:71:67:d3:15:a8:
         b1:56:2f:15:5c:a0:4d:66:9d:36:92:30:47:3d:89:ec:38:db:
         5b:6e:55:42:24:8e:06:7e:30:c5:ba:37:11:82:a2:45:1d:61:
         4c:20:3d:64:74:5a:fd:c9:67:5b:53:ad:9b:44:ea:7e:04:16:
         be:1c:47:5b:64:f7:13:a7:c4:e1:78:6b:b9:8d:17:50:2c:83:
         5f:6b:2d:82
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUBktfSfr7zPuhFzasbaXLtYpqdDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE3MTIwMjRFN0M5ODRCODJERjVFODIwNEJCMTYxRURG
OTg0M0I1MDAeFw0yMjA3MDQxODA3NTZaFw0yMzA3MDMxODEyNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdBOEJFRkFBNDJEQzNGNzU0
NkYwNkU4OTE1QzE1MDMxOEQxQzgwNDVFRjUwMDZDMzg2QjE1NTc0ODlBMzZCOEYw
RTFFNjU1RDQ5QUFFNUE2RkM2OUE4RjI0RUFBMzgxOEFFQ0YwODUwOTBDNUZCRUZD
REUxMjMzQjlDODA2MERDNzMxMUU2ODhDRDlFRDA5NjY1RTcxMzQ0OEU5Mjg1NThC
REY0Nzg4NUQ5OUQ3Qzg1N0U0MDdDRTY5MTlBRkQyQzZFRDAzMUFCMkNGRDUzRjNF
REFBMkMxNDc1QzA4QjFBOUU0NUEwQjI4MzkwQkY0N0MzODgyMDdFMDcyREY1RTI0
QTI0QzkwNDU3N0IwQjc2REI4REIzRkU2NTY3OEM5RTk4OEU3RTJENTk1REFBMzM1
MEE5OENBQ0EwNEE3M0ZDQjNERjQ0QTU5MUM0QjZFQTE3NUI4RkI1OEM5NTU0OTk5
MTBFNTA1RTg2NzZBRDkzRjIxNEUxNjE4RkIwN0RBNDNEQkQ4NEI3REYzQTU1NTUz
NEI0NzE3MzQwMTFEQjgxRUM2Q0VFNUJBQjUwMTk3NTRFNkQxODJGNEVENTk2QjQ4
N0NGREZEOUJGN0YwQTZERkQ1NUY4NjQ3NDM1NkM5RDA3OTQxMjZEMThDMjE3MjU0
Q0JBOUFBNTkxMUM4RTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt6i++qQtw/dUbwbokVwVAxjRyARe9QBsOGsVV0iaNrjw4eZV1Jqu
Wm/Gmo8k6qOBiuzwhQkMX7783hIzucgGDccxHmiM2e0JZl5xNEjpKFWL30eIXZnX
yFfkB85pGa/Sxu0DGrLP1T8+2qLBR1wIsankWgsoOQv0fDiCB+By314kokyQRXew
t2242z/mVnjJ6Yjn4tWV2qM1CpjKygSnP8s99EpZHEtuoXW4+1jJVUmZEOUF6Gdq
2T8hThYY+wfaQ9vYS33zpVVTS0cXNAEduB7GzuW6tQGXVObRgvTtWWtIfP39m/fw
pt/VX4ZHQ1bJ0HlBJtGMIXJUy6mqWRHI5wIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FCpNSHiKKLAQ77sOwpJmsN+SgNT2MB8GA1UdIwQYMBaAFHFxICTnyYS4LfXoIEux
Ye35hDtQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q2NTdiWFBDVDFyczVz
Y21lSjU3Q1NWNzEyQmY2TGdtN0JZM0Zydnl0ZmJHLzAvNzE3MTIwMjRFN0M5ODRC
ODJERjVFODIwNEJCMTYxRURGOTg0M0I1MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83MTcxMjAyNEU3Qzk4NEI4MkRGNUU4MjA0QkIxNjFFREY5ODQz
QjUwLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ENjU3YlhQQ1QxcnM1c2NtZUo1
N0NTVjcxMkJmNkxnbTdCWTNGcnZ5dGZiRy8wLzMyMzAzMDJlMzIzMzM4MmUzMDJl
MzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMyMzczMTM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyO4AMA0G
CSqGSIb3DQEBCwUAA4IBAQB/23PywC08EhbJFKIIGuB1vKVlrrelaiseZa2n5d2q
icwcglFlqqJwoZhgTzZBTI543hOerar9XCoJ1Puky+d68TknZxjo3rw7OEI0ls2M
oKOygvEb66laLe3r2BEqd+AT7kE/qJ3kd9Y2vEv+6vnDqxkxRBNs2z9GNY9wTLIs
N7W48oAqwc5pQP3KbG7/1r9USyXiwOn6/cZisXPpYRQGej5OXEJKnGILXBxYhu9e
cWfTFaixVi8VXKBNZp02kjBHPYnsONtbblVCJI4GfjDFujcRgqJFHWFMID1kdFr9
yWdbU62bROp+BBa+HEdbZPcTp8TheGu5jRdQLINfay2C
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org