Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa
File:                     3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa (raw, json)
Hash identifier:          V68oL8YhA26YvwwgA45DNF4nP56RmUbdZWrBujhNfu4=
Subject key identifier:   CB:65:13:6A:6A:ED:70:0F:5F:A3:A0:8D:CA:5B:46:15:26:51:43:E4
Certificate issuer:       /CN=088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9
Certificate serial:       4741A0039E0E0B5AFDF18859A942FE740C519727
Authority key identifier: 08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa
Signing time:             Tue 09 Apr 2024 17:09:54 +0000
ROA not before:           Tue 09 Apr 2024 17:04:54 +0000
ROA not after:            Tue 08 Apr 2025 17:09:54 +0000
asID:                     270466
IP address blocks:        200.106.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:41:a0:03:9e:0e:0b:5a:fd:f1:88:59:a9:42:fe:74:0c:51:97:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9
        Validity
            Not Before: Apr  9 17:04:54 2024 GMT
            Not After : Apr  8 17:09:54 2025 GMT
        Subject: CN=CB65136A6AED700F5FA3A08DCA5B4615265143E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:1e:45:fb:d8:e9:dd:a7:7f:6a:cd:3f:2b:
                    ff:22:e0:34:69:43:e1:1e:32:63:dc:94:39:56:ec:
                    05:86:f6:34:61:f6:13:d0:0a:e1:2f:49:bd:f0:b9:
                    e6:57:9b:85:2d:b2:84:40:d4:96:7e:55:71:95:63:
                    fb:92:3c:4f:d8:7c:29:ec:0f:f9:82:8c:f9:f2:06:
                    61:32:ab:fe:bb:b3:a5:e6:b1:53:20:da:91:b2:f7:
                    2d:8b:ed:a2:99:b3:0a:ed:48:3d:26:78:9e:db:04:
                    68:d6:6f:45:09:4c:aa:80:0c:f2:a8:a8:8e:f1:fa:
                    cd:58:18:df:3d:1c:cc:0c:a0:06:aa:d3:a3:3f:11:
                    e6:ac:c2:97:f5:b2:06:ab:c6:33:b8:6b:f0:90:e8:
                    4c:15:4c:6f:61:34:0c:d7:5a:1b:b1:0e:20:dd:0c:
                    b3:f1:a0:ea:f7:fe:9b:36:8e:7c:89:c9:6e:10:b9:
                    24:34:99:57:1d:95:34:8e:44:35:13:83:ef:d7:6b:
                    dd:fc:c6:de:aa:5a:fd:d3:48:0e:70:c8:69:44:9e:
                    7d:de:56:47:20:c8:a7:3a:ed:16:84:ca:f5:39:fc:
                    b1:96:ad:34:9a:70:a9:76:02:4d:b0:a8:f2:ae:31:
                    ad:ce:f7:fe:83:0d:aa:78:20:c8:65:dc:09:1d:b8:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:65:13:6A:6A:ED:70:0F:5F:A3:A0:8D:CA:5B:46:15:26:51:43:E4
            X509v3 Authority Key Identifier:
                keyid:08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:f3:fe:b6:5d:4d:98:4a:b5:36:03:80:8f:18:68:d4:9f:53:
         a3:f2:f7:35:e2:78:4e:d6:ea:bf:4d:94:76:bb:d7:40:26:0e:
         33:6f:31:91:98:3f:c5:be:89:56:41:71:e1:d2:b4:6b:09:7f:
         55:54:9d:ea:41:3a:ed:69:c0:85:18:67:95:36:a5:d2:f8:9d:
         36:2d:c8:a3:5d:f7:84:d7:0e:2c:69:2e:fe:3b:b9:22:34:06:
         19:f8:25:4d:92:57:66:27:18:6d:1c:26:d0:e6:bd:78:de:32:
         8b:ec:89:21:5d:5c:ef:19:39:88:66:d2:f9:ae:be:79:f3:59:
         56:f0:76:8f:ec:ae:8c:98:8a:e1:38:63:d8:31:68:1f:c2:2d:
         56:d2:4b:de:e7:e7:7f:52:f2:53:5b:fc:c7:e4:f1:c1:da:b2:
         cc:68:66:ef:d7:15:2d:89:20:cf:11:08:4e:e0:64:ec:c4:ea:
         b8:97:b4:e6:44:d1:d3:6b:45:fb:c9:e6:b8:59:de:89:cb:79:
         a4:dc:75:26:95:7a:60:48:00:15:e9:c7:70:8f:51:23:1a:e4:
         bb:31:42:65:4a:14:21:49:0f:af:6d:ce:a9:23:ed:83:88:b4:
         ea:25:db:2c:5c:94:a4:90:15:f1:91:6e:b1:8b:a5:a5:38:fe:
         e8:31:1e:a9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR0GgA54OC1r98YhZqUL+dAxRlycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4RjVCODRCREM1N0ZBNjJGMTc2OUNBQ0IxQ0RFRDFE
RjlCQUJCOTAeFw0yNDA0MDkxNzA0NTRaFw0yNTA0MDgxNzA5NTRaMDMxMTAvBgNV
BAMTKENCNjUxMzZBNkFFRDcwMEY1RkEzQTA4RENBNUI0NjE1MjY1MTQzRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6h5F+9jp3ad/as0/K/8i4DRp
Q+EeMmPclDlW7AWG9jRh9hPQCuEvSb3wueZXm4UtsoRA1JZ+VXGVY/uSPE/YfCns
D/mCjPnyBmEyq/67s6XmsVMg2pGy9y2L7aKZswrtSD0meJ7bBGjWb0UJTKqADPKo
qI7x+s1YGN89HMwMoAaq06M/Eeaswpf1sgarxjO4a/CQ6EwVTG9hNAzXWhuxDiDd
DLPxoOr3/ps2jnyJyW4QuSQ0mVcdlTSORDUTg+/Xa938xt6qWv3TSA5wyGlEnn3e
VkcgyKc67RaEyvU5/LGWrTSacKl2Ak2wqPKuMa3O9/6DDap4IMhl3AkduFBlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUy2UTamrtcA9fo6CNyltGFSZRQ+QwHwYDVR0j
BBgwFoAUCI9bhL3Ff6YvF2nKyxze0d+bq7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREE3TXFyRHBGeDlKazhOOGtHRVpEYjJqaWo4eWd2ZlpuaEN0eFk2QlZB
dWEvMC8wODhGNUI4NEJEQzU3RkE2MkYxNzY5Q0FDQjFDREVEMURGOUJBQkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4OEY1Qjg0QkRDNTdGQTYy
RjE3NjlDQUNCMUNERUQxREY5QkFCQjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBN01xckRwRng5Sms4TjhrR0VaRGIyamlqOHlndmZabmhDdHhZNkJWQXVhLzAv
MzIzMDMwMmUzMTMwMzYyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM0MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshqiDANBgkqhkiG9w0BAQsFAAOCAQEAifP+
tl1NmEq1NgOAjxho1J9To/L3NeJ4Ttbqv02UdrvXQCYOM28xkZg/xb6JVkFx4dK0
awl/VVSd6kE67WnAhRhnlTal0vidNi3Io133hNcOLGku/ju5IjQGGfglTZJXZicY
bRwm0Oa9eN4yi+yJIV1c7xk5iGbS+a6+efNZVvB2j+yujJiK4Thj2DFoH8ItVtJL
3ufnf1LyU1v8x+TxwdqyzGhm79cVLYkgzxEITuBk7MTquJe05kTR02tF+8nmuFne
ict5pNx1JpV6YEgAFenHcI9RIxrkuzFCZUoUIUkPr23OqSPtg4i06iXbLFyUpJAV
8ZFusYulpTj+6DEeqQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:51 2025 by rpki-client