Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/3230302e3130382e3137322e302f32322d3232203d3e20323730323536.roa
File:                     3230302e3130382e3137322e302f32322d3232203d3e20323730323536.roa (raw, json)
Hash identifier:          EY5CZTxEMrGqzlBd8MldnjX2vaZWhT8DZT21yF2C3tE=
Subject key identifier:   44:4F:FB:99:45:C5:F1:C7:A6:DB:DC:88:11:C5:61:D7:CD:B7:81:44
Certificate issuer:       /CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
Certificate serial:       4B18F110C2A65BD8A13519B89A6A1C7ED5FD5DAC
Authority key identifier: E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/3230302e3130382e3137322e302f32322d3232203d3e20323730323536.roa
Signing time:             Mon 30 Jan 2023 18:09:20 +0000
ROA not before:           Mon 30 Jan 2023 18:04:20 +0000
ROA not after:            Mon 29 Jan 2024 18:09:20 +0000
asID:                     270256
IP address blocks:        200.108.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:18:f1:10:c2:a6:5b:d8:a1:35:19:b8:9a:6a:1c:7e:d5:fd:5d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
        Validity
            Not Before: Jan 30 18:04:20 2023 GMT
            Not After : Jan 29 18:09:20 2024 GMT
        Subject: CN=444FFB9945C5F1C7A6DBDC8811C561D7CDB78144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:90:6c:db:6b:3e:00:0a:82:8a:aa:2b:ea:
                    eb:48:f2:8a:1d:3a:22:0e:ea:f0:09:f0:5a:79:e3:
                    c9:c4:f4:9b:a0:34:6a:7e:9a:29:4a:a8:f8:2d:f3:
                    84:41:2b:1a:da:fa:33:e0:ce:e7:7d:0f:f6:6b:24:
                    a9:f4:45:42:0e:31:7c:32:2b:be:39:82:16:48:b5:
                    0c:96:e7:85:4b:0e:77:7d:59:88:12:e1:8c:16:47:
                    53:d3:8b:47:24:83:61:be:36:42:c3:15:d8:77:2e:
                    56:75:97:8c:95:f7:fd:df:e5:d0:69:6f:9b:db:c0:
                    44:96:d2:d5:6b:89:12:be:75:4e:01:78:ce:1d:b3:
                    d4:9b:75:ee:f8:81:da:8a:e6:ec:5c:c4:49:81:ce:
                    69:8d:d3:28:38:7b:c5:ca:b9:d9:af:74:87:c8:d1:
                    45:b6:da:33:2f:f6:37:ec:f3:b7:2c:17:25:8b:0d:
                    c4:e4:3c:21:d2:a0:a9:86:47:cb:1c:a5:8e:56:70:
                    85:cd:5d:8e:78:4b:e4:e2:53:07:a1:1e:29:b2:28:
                    9f:20:cf:f5:f5:23:f7:e7:9d:22:a3:da:76:f1:ce:
                    06:1b:18:6f:30:03:26:0f:72:1a:cf:66:ee:c6:74:
                    53:cf:07:ad:3d:fb:4c:d8:90:85:ec:e2:85:95:2c:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4F:FB:99:45:C5:F1:C7:A6:DB:DC:88:11:C5:61:D7:CD:B7:81:44
            X509v3 Authority Key Identifier:
                keyid:E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/3230302e3130382e3137322e302f32322d3232203d3e20323730323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:e2:21:a0:5c:0f:65:fc:2e:d3:a0:77:b5:f5:e4:14:d7:a9:
         b6:46:fc:62:ba:d8:f2:9b:0a:a6:5d:99:e0:08:33:5f:cc:10:
         75:26:98:d6:72:64:d4:4a:a5:92:59:f3:56:e8:fb:c9:54:26:
         7c:0d:5b:1c:6b:dd:36:6a:d1:e5:71:4e:3a:0e:b7:7f:c3:d6:
         8e:5e:70:4a:ce:87:86:95:6e:8b:3d:86:ca:72:49:b2:03:e4:
         89:8f:f4:2c:48:03:6c:45:fd:14:dc:e9:18:1e:83:87:77:19:
         20:b5:e6:ae:4a:30:58:aa:fe:81:a3:25:21:78:9e:94:44:6f:
         22:47:e8:41:68:37:3b:a4:5a:ef:f9:c6:9d:f1:10:5e:88:88:
         c0:d9:2a:90:ad:af:2e:7d:de:2e:2a:2c:fd:63:76:50:e2:14:
         9c:78:82:2c:fc:1f:e9:0f:94:8e:00:73:7c:02:18:c5:19:99:
         2a:f9:ec:2e:24:aa:b6:1b:de:c3:95:71:82:75:15:b2:dd:b7:
         ea:c0:cf:35:55:71:de:c0:56:08:2c:77:5f:85:c3:7c:4d:d8:
         55:3a:63:0d:e3:78:29:94:ff:b5:7d:48:ab:5b:5a:d2:d1:2d:
         6b:43:00:e4:40:10:d3:89:cb:d8:12:2d:99:75:cd:10:54:a1:
         09:56:7f:8e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSxjxEMKmW9ihNRm4mmocftX9XawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ5NUYxOTVCRkNFNTk2Q0ZEQzA3NUM0MUYwRjc5RUQz
RDUyMEQ4ODAeFw0yMzAxMzAxODA0MjBaFw0yNDAxMjkxODA5MjBaMDMxMTAvBgNV
BAMTKDQ0NEZGQjk5NDVDNUYxQzdBNkRCREM4ODExQzU2MUQ3Q0RCNzgxNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzpBs22s+AAqCiqor6utI8ood
OiIO6vAJ8Fp548nE9JugNGp+milKqPgt84RBKxra+jPgzud9D/ZrJKn0RUIOMXwy
K745ghZItQyW54VLDnd9WYgS4YwWR1PTi0ckg2G+NkLDFdh3LlZ1l4yV9/3f5dBp
b5vbwESW0tVriRK+dU4BeM4ds9Sbde74gdqK5uxcxEmBzmmN0yg4e8XKudmvdIfI
0UW22jMv9jfs87csFyWLDcTkPCHSoKmGR8scpY5WcIXNXY54S+TiUwehHimyKJ8g
z/X1I/fnnSKj2nbxzgYbGG8wAyYPchrPZu7GdFPPB609+0zYkIXs4oWVLDxBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURE/7mUXF8cem29yIEcVh1823gUQwHwYDVR0j
BBgwFoAU5JXxlb/OWWz9wHXEHw957T1SDYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE5ydGg2bkREanpRV0M3Z0J6VTIxaGJRUWs3THNkc2ppM2lIQ3dLOENU
eDcvMC9FNDk1RjE5NUJGQ0U1OTZDRkRDMDc1QzQxRjBGNzlFRDNENTIwRDg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U0OTVGMTk1QkZDRTU5NkNG
REMwNzVDNDFGMEY3OUVEM0Q1MjBEODguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ROcnRoNm5ERGp6UVdDN2dCelUyMWhiUVFrN0xzZHNqaTNpSEN3SzhDVHg3LzAv
MzIzMDMwMmUzMTMwMzgyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshsrDANBgkqhkiG9w0BAQsFAAOCAQEAY+Ih
oFwPZfwu06B3tfXkFNeptkb8YrrY8psKpl2Z4AgzX8wQdSaY1nJk1EqlklnzVuj7
yVQmfA1bHGvdNmrR5XFOOg63f8PWjl5wSs6HhpVuiz2GynJJsgPkiY/0LEgDbEX9
FNzpGB6Dh3cZILXmrkowWKr+gaMlIXielERvIkfoQWg3O6Ra7/nGnfEQXoiIwNkq
kK2vLn3eLios/WN2UOIUnHiCLPwf6Q+UjgBzfAIYxRmZKvnsLiSqthvew5VxgnUV
st236sDPNVVx3sBWCCx3X4XDfE3YVTpjDeN4KZT/tX1Iq1ta0tEta0MA5EAQ04nL
2BItmXXNEFShCVZ/jg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-ams.rpki-client.org