Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/3230302e3130382e3137322e302f32322d3234203d3e20323730323536.roa
File:                     3230302e3130382e3137322e302f32322d3234203d3e20323730323536.roa (raw, json)
Hash identifier:          SyVXephioWjhphhMFSQ2ojBhOV1j6Ru1n2DLerHS8vk=
Subject key identifier:   F1:C0:50:B7:D1:89:BC:E2:EC:82:A6:21:2F:95:BE:BC:FA:F8:B9:03
Certificate issuer:       /CN=A342FC6471B5406C66BB5A51BD6F3F7D07316279
Certificate serial:       6629E3B90304D3E278216D3E07CAD289E3ED6E7B
Authority key identifier: A3:42:FC:64:71:B5:40:6C:66:BB:5A:51:BD:6F:3F:7D:07:31:62:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A342FC6471B5406C66BB5A51BD6F3F7D07316279.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/3230302e3130382e3137322e302f32322d3234203d3e20323730323536.roa
Signing time:             Wed 25 Jan 2023 17:58:18 +0000
ROA not before:           Wed 25 Jan 2023 17:53:18 +0000
ROA not after:            Wed 24 Jan 2024 17:58:18 +0000
asID:                     270256
IP address blocks:        200.108.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:29:e3:b9:03:04:d3:e2:78:21:6d:3e:07:ca:d2:89:e3:ed:6e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A342FC6471B5406C66BB5A51BD6F3F7D07316279
        Validity
            Not Before: Jan 25 17:53:18 2023 GMT
            Not After : Jan 24 17:58:18 2024 GMT
        Subject: CN=F1C050B7D189BCE2EC82A6212F95BEBCFAF8B903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:8e:36:f8:d0:a0:a9:ef:3a:1b:ad:dc:82:
                    8c:49:13:09:61:53:52:8e:e4:4f:62:0c:54:9d:bc:
                    6f:f3:6d:9f:f1:17:4a:eb:58:a9:94:fa:61:f1:bd:
                    1a:74:bb:b8:b3:19:95:6e:8f:f5:f4:c6:79:79:31:
                    24:9f:08:47:91:4c:b4:fc:e8:fd:27:e5:a3:29:2d:
                    4f:e8:94:64:02:71:42:d4:c4:b6:bb:a6:8e:01:30:
                    f0:63:6b:35:10:db:04:89:b0:e0:15:aa:93:d1:77:
                    07:de:78:ed:dd:d2:aa:11:f5:6b:e0:6a:ea:3d:92:
                    2c:c0:77:29:72:91:60:5f:c6:1d:db:cb:c6:a0:0b:
                    3e:cc:e0:6a:52:23:c4:c4:39:3e:24:e2:b8:d2:37:
                    cb:e6:e6:30:59:73:12:8d:4a:17:8d:53:60:34:41:
                    2d:8b:85:83:3b:56:ad:36:c5:d0:84:37:39:c5:d7:
                    6a:36:41:2c:61:83:83:c7:11:e8:71:16:6f:9b:64:
                    0d:29:79:7a:29:6d:6f:aa:a4:aa:df:4e:e4:60:89:
                    3f:d6:eb:ad:ae:e0:5f:a3:1c:a4:6a:e7:f8:c8:b7:
                    71:98:01:b0:00:ee:65:9c:fe:38:cf:22:df:32:51:
                    6f:4d:65:ff:dc:5f:1e:2e:ea:93:23:c5:9b:ff:a4:
                    49:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C0:50:B7:D1:89:BC:E2:EC:82:A6:21:2F:95:BE:BC:FA:F8:B9:03
            X509v3 Authority Key Identifier:
                keyid:A3:42:FC:64:71:B5:40:6C:66:BB:5A:51:BD:6F:3F:7D:07:31:62:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/A342FC6471B5406C66BB5A51BD6F3F7D07316279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A342FC6471B5406C66BB5A51BD6F3F7D07316279.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/3230302e3130382e3137322e302f32322d3234203d3e20323730323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:9d:42:c6:0c:19:2d:58:a0:b3:3a:d2:b9:d6:4c:36:88:
         0a:c5:db:cd:d4:3e:bd:8a:7c:27:e7:1a:dc:3a:33:39:ab:4d:
         e6:00:a8:aa:8d:69:1e:5f:e5:90:5e:61:ea:cd:c3:c0:58:54:
         3a:9f:bb:d6:be:81:a3:f6:ce:cc:86:b8:9b:42:fa:2e:5e:58:
         f7:af:10:7d:ed:c1:1e:92:a7:9c:ad:14:39:66:5a:8b:b8:99:
         f4:30:8d:12:6f:47:fa:2e:3f:d5:8c:50:ea:39:ac:bd:2d:24:
         cb:c0:b9:df:f0:01:79:3c:64:92:98:60:5e:68:95:85:0e:6a:
         9c:03:6d:8e:dc:1b:ce:c6:63:78:b0:ef:cd:54:d6:ff:ba:f7:
         2d:50:e2:aa:7f:58:08:6e:b9:fd:ca:32:78:5e:b3:ee:e2:f3:
         16:32:af:e4:0b:04:4d:54:7c:10:d7:2e:9a:cb:82:b2:6d:2f:
         dc:51:7d:13:7e:5a:14:d0:4f:0c:b4:64:9e:ca:2a:59:88:3b:
         03:6a:3e:1d:0f:cc:8a:ec:72:ee:ab:90:26:5c:2c:b4:6b:6f:
         a6:18:33:87:ef:eb:02:8b:69:8c:46:d5:e1:b8:05:ec:35:5d:
         dd:05:34:5a:74:d1:db:18:f1:5f:b2:15:20:c5:f5:8d:a1:18:
         35:3a:5e:b2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZinjuQME0+J4IW0+B8rSiePtbnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM0MkZDNjQ3MUI1NDA2QzY2QkI1QTUxQkQ2RjNGN0Qw
NzMxNjI3OTAeFw0yMzAxMjUxNzUzMThaFw0yNDAxMjQxNzU4MThaMDMxMTAvBgNV
BAMTKEYxQzA1MEI3RDE4OUJDRTJFQzgyQTYyMTJGOTVCRUJDRkFGOEI5MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQY42+NCgqe86G63cgoxJEwlh
U1KO5E9iDFSdvG/zbZ/xF0rrWKmU+mHxvRp0u7izGZVuj/X0xnl5MSSfCEeRTLT8
6P0n5aMpLU/olGQCcULUxLa7po4BMPBjazUQ2wSJsOAVqpPRdwfeeO3d0qoR9Wvg
auo9kizAdylykWBfxh3by8agCz7M4GpSI8TEOT4k4rjSN8vm5jBZcxKNSheNU2A0
QS2LhYM7Vq02xdCENznF12o2QSxhg4PHEehxFm+bZA0peXopbW+qpKrfTuRgiT/W
662u4F+jHKRq5/jIt3GYAbAA7mWc/jjPIt8yUW9NZf/cXx4u6pMjxZv/pEk/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8cBQt9GJvOLsgqYhL5W+vPr4uQMwHwYDVR0j
BBgwFoAUo0L8ZHG1QGxmu1pRvW8/fQcxYnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE5ydGg2bkREanpRV0M3Z0J6VTIxaGJRUWs3THNkc2ppM2lIQ3dLOENU
eDcvMC9BMzQyRkM2NDcxQjU0MDZDNjZCQjVBNTFCRDZGM0Y3RDA3MzE2Mjc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EzNDJGQzY0NzFCNTQwNkM2
NkJCNUE1MUJENkYzRjdEMDczMTYyNzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ROcnRoNm5ERGp6UVdDN2dCelUyMWhiUVFrN0xzZHNqaTNpSEN3SzhDVHg3LzAv
MzIzMDMwMmUzMTMwMzgyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshsrDANBgkqhkiG9w0BAQsFAAOCAQEAMrmd
QsYMGS1YoLM60rnWTDaICsXbzdQ+vYp8J+ca3DozOatN5gCoqo1pHl/lkF5h6s3D
wFhUOp+71r6Bo/bOzIa4m0L6Ll5Y968Qfe3BHpKnnK0UOWZai7iZ9DCNEm9H+i4/
1YxQ6jmsvS0ky8C53/ABeTxkkphgXmiVhQ5qnANtjtwbzsZjeLDvzVTW/7r3LVDi
qn9YCG65/coyeF6z7uLzFjKv5AsETVR8ENcumsuCsm0v3FF9E35aFNBPDLRknsoq
WYg7A2o+HQ/Miuxy7quQJlwstGtvphgzh+/rAotpjEbV4bgF7DVd3QU0WnTR2xjx
X7IVIMX1jaEYNTpesg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-ams.rpki-client.org