Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36352e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          jlKU0Ji+S82OfuLr4rgPnzEmnpEi49d1bjvpfOpV5eo=
Subject key identifier:   BA:FF:42:E3:05:ED:02:6A:B6:E9:CC:8A:9B:FD:72:2A:38:C0:1B:27
Certificate issuer:       /CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
Certificate serial:       3963A5E98ADF5E0F94BCFDC13DFA58A9FE4619DA
Authority key identifier: 10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
Signing time:             Tue 12 Mar 2024 08:08:50 +0000
ROA not before:           Tue 12 Mar 2024 08:03:50 +0000
ROA not after:            Tue 11 Mar 2025 08:08:50 +0000
asID:                     271504
IP address blocks:        200.53.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:63:a5:e9:8a:df:5e:0f:94:bc:fd:c1:3d:fa:58:a9:fe:46:19:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
        Validity
            Not Before: Mar 12 08:03:50 2024 GMT
            Not After : Mar 11 08:08:50 2025 GMT
        Subject: CN=BAFF42E305ED026AB6E9CC8A9BFD722A38C01B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:92:33:de:c1:72:d7:f8:20:2c:6b:95:de:
                    b5:f4:48:19:d9:2c:ac:19:6c:d2:e7:99:cc:3f:d7:
                    4f:71:a1:be:81:18:2b:ea:eb:b9:e9:56:ea:74:e1:
                    44:6b:8a:ac:e7:dc:2f:b3:e9:b1:e5:a4:be:b3:4d:
                    8e:b8:51:c8:1d:22:e5:4f:82:e5:65:1e:f9:2a:e2:
                    41:55:2d:5d:2d:8f:c7:5f:a9:22:ce:27:db:8a:b1:
                    5c:e6:04:ff:15:f2:4e:1e:75:69:7f:cb:e8:aa:c2:
                    24:99:a9:6d:b9:c1:b0:71:54:63:60:55:97:c3:d2:
                    44:a5:87:b8:f7:05:aa:64:fd:2e:a8:55:11:a4:97:
                    84:81:e7:84:11:7c:2e:f7:a4:cb:46:23:98:d5:2c:
                    bb:b7:70:53:28:e0:bc:48:19:45:fa:2b:4c:ca:bc:
                    37:c6:d0:20:11:0d:7b:46:60:00:bd:27:1c:be:ec:
                    f1:01:ff:85:b1:22:df:67:79:e1:4e:81:26:9a:98:
                    69:38:56:2e:75:14:6b:8d:fa:67:99:18:73:78:21:
                    b2:2b:c4:2a:d4:2a:27:56:70:a0:c8:d4:99:f7:6c:
                    d8:e4:91:5d:09:0b:15:1f:fb:ff:9d:91:00:34:c7:
                    50:19:65:c4:58:12:9d:bc:68:eb:da:da:1d:fa:5e:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FF:42:E3:05:ED:02:6A:B6:E9:CC:8A:9B:FD:72:2A:38:C0:1B:27
            X509v3 Authority Key Identifier:
                keyid:10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:a1:2a:65:f7:80:e9:e1:b8:20:2b:fb:13:cd:1b:69:9c:49:
         b1:da:7c:48:0d:f2:17:e7:ce:55:d7:97:ae:04:fc:36:9f:40:
         a5:4f:8a:00:84:e2:25:64:6e:e9:11:25:bf:b9:9f:15:78:e7:
         6f:b1:56:60:56:7b:8a:b7:6b:c6:2d:43:c8:23:ca:28:71:02:
         bb:b8:9e:00:07:e6:22:e7:c2:98:91:ef:1a:1b:72:89:54:68:
         24:93:c9:bf:90:c9:36:07:f4:e9:98:2c:9b:96:a1:09:db:ca:
         30:15:1e:d6:de:57:75:ce:47:97:ea:b9:da:b4:a7:86:ee:b3:
         48:a2:33:76:2f:c2:33:22:72:55:16:35:a3:f6:41:d3:27:c8:
         81:57:e1:29:78:fc:ec:6f:d7:01:b2:f5:18:54:22:ad:fd:b5:
         0c:e1:0f:50:92:90:6f:58:4a:c2:c7:7c:5e:cf:44:5b:2c:95:
         e2:c6:dd:47:0d:60:8c:be:24:f6:16:96:4c:e0:a5:79:44:d8:
         fc:88:a7:fa:65:50:77:cf:3d:60:1f:42:c1:b8:0e:8f:d9:12:
         2a:19:21:6d:34:6f:7e:9f:92:28:59:3c:d2:a2:7b:02:8c:3e:
         0e:75:91:19:67:4e:c8:92:49:1b:17:ac:14:0a:8b:74:fd:c0:
         a4:6f:0c:bf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOWOl6YrfXg+UvP3BPfpYqf5GGdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4NzJDRUM2QkJGNTNCMUE3RjY4NEQ5QTY2MUE4OTc4
NTY0RkU3RDAeFw0yNDAzMTIwODAzNTBaFw0yNTAzMTEwODA4NTBaMDMxMTAvBgNV
BAMTKEJBRkY0MkUzMDVFRDAyNkFCNkU5Q0M4QTlCRkQ3MjJBMzhDMDFCMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJpIz3sFy1/ggLGuV3rX0SBnZ
LKwZbNLnmcw/109xob6BGCvq67npVup04URriqzn3C+z6bHlpL6zTY64UcgdIuVP
guVlHvkq4kFVLV0tj8dfqSLOJ9uKsVzmBP8V8k4edWl/y+iqwiSZqW25wbBxVGNg
VZfD0kSlh7j3Bapk/S6oVRGkl4SB54QRfC73pMtGI5jVLLu3cFMo4LxIGUX6K0zK
vDfG0CARDXtGYAC9Jxy+7PEB/4WxIt9neeFOgSaamGk4Vi51FGuN+meZGHN4IbIr
xCrUKidWcKDI1Jn3bNjkkV0JCxUf+/+dkQA0x1AZZcRYEp28aOva2h36Xtj9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuv9C4wXtAmq26cyKm/1yKjjAGycwHwYDVR0j
BBgwFoAUEIcs7Gu/U7Gn9oTZpmGol4Vk/n0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFdQNnd6N3hyZXNzb1NCY2dYS3FtUW9BV0ZmMmZyOEs2aFNrZjFRR3ZM
OXovMC8xMDg3MkNFQzZCQkY1M0IxQTdGNjg0RDlBNjYxQTg5Nzg1NjRGRTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwODcyQ0VDNkJCRjUzQjFB
N0Y2ODREOUE2NjFBODk3ODU2NEZFN0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RXUDZ3ejd4cmVzc29TQmNnWEtxbVFvQVdGZjJmcjhLNmhTa2YxUUd2TDl6LzAv
MzIzMDMwMmUzNTMzMmUzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzUzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyDVBMA0GCSqGSIb3DQEBCwUAA4IBAQA8oSpl94Dp
4bggK/sTzRtpnEmx2nxIDfIX585V15euBPw2n0ClT4oAhOIlZG7pESW/uZ8VeOdv
sVZgVnuKt2vGLUPII8oocQK7uJ4AB+Yi58KYke8aG3KJVGgkk8m/kMk2B/TpmCyb
lqEJ28owFR7W3ld1zkeX6rnatKeG7rNIojN2L8IzInJVFjWj9kHTJ8iBV+EpePzs
b9cBsvUYVCKt/bUM4Q9QkpBvWErCx3xez0RbLJXixt1HDWCMviT2FpZM4KV5RNj8
iKf6ZVB3zz1gH0LBuA6P2RIqGSFtNG9+n5IoWTzSonsCjD4OdZEZZ07IkkkbF6wU
Cot0/cCkbwy/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org