Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3232203d3e203532383733.roa
File:                     3230302e3232392e3232302e302f32322d3232203d3e203532383733.roa (raw, json)
Hash identifier:          jEFTS/At/xr4ebA+6ZpTU/kgfGpiBx8MhL2UJQNjtjE=
Subject key identifier:   73:0F:C2:8F:45:23:3B:10:37:E9:B4:AA:20:92:17:8B:77:EA:DB:83
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       6E90B5614D0B87C901B858DD0653EEDA5CA1911B
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3232203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:42 +0000
ROA not before:           Sat 27 Jan 2024 23:05:42 +0000
ROA not after:            Sat 25 Jan 2025 23:10:42 +0000
asID:                     52873
IP address blocks:        200.229.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:90:b5:61:4d:0b:87:c9:01:b8:58:dd:06:53:ee:da:5c:a1:91:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:42 2024 GMT
            Not After : Jan 25 23:10:42 2025 GMT
        Subject: CN=730FC28F45233B1037E9B4AA2092178B77EADB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:dd:08:b3:c3:33:7f:e7:d6:85:f4:88:90:
                    45:ab:3d:7b:c7:38:59:98:a4:71:2c:88:6f:36:d6:
                    14:cc:a0:da:48:d6:ff:0d:7d:b0:8d:0e:e7:3c:b9:
                    c7:e3:82:d4:54:2b:4a:49:02:70:eb:7c:a2:63:1f:
                    f9:3e:86:f1:b0:2c:b9:c2:d5:c7:ac:7d:3a:69:11:
                    39:f6:ad:46:7f:58:9a:65:73:bf:8f:2b:60:7a:6f:
                    bb:0d:99:c6:a1:8f:f9:6e:44:f4:97:54:75:71:b5:
                    ac:36:69:bb:b9:b5:6b:7e:64:22:64:fc:1d:4e:bf:
                    70:f5:bc:b3:8b:44:8d:46:ee:d1:79:da:20:1c:b8:
                    fa:e1:13:df:a1:2c:7f:82:dc:e9:a5:ee:d5:33:10:
                    f8:c9:b4:e0:be:4a:67:02:a8:40:81:51:8c:bd:8f:
                    b0:9a:2e:e2:d5:4f:51:98:34:af:1a:0f:d0:af:43:
                    ae:d6:45:a6:10:5c:74:54:b9:03:48:d9:88:4a:ba:
                    c9:8a:37:76:74:f2:b0:0b:34:5b:94:d9:27:f1:39:
                    f0:2a:fa:6c:cb:4d:81:e2:84:f4:b1:6e:c2:40:25:
                    7d:6d:43:c5:a8:9b:50:b0:d6:af:cb:43:31:b8:41:
                    c4:e5:cc:41:52:a3:1c:58:fa:7a:f8:a4:22:75:0a:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0F:C2:8F:45:23:3B:10:37:E9:B4:AA:20:92:17:8B:77:EA:DB:83
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3232203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:e9:6b:49:86:c8:69:b9:0d:58:65:be:5e:59:f4:ce:0b:21:
         8f:a4:94:53:5e:8e:a1:70:41:2d:56:74:c6:9b:26:f9:f4:9f:
         9e:e3:20:69:42:cd:c0:85:20:7e:b7:d7:48:64:7e:8a:82:72:
         a8:0d:57:a2:ef:b6:74:c3:6f:30:bb:98:41:37:7a:8b:f9:80:
         79:29:94:aa:6a:c9:53:40:4e:2f:94:5e:35:b1:19:c0:9f:01:
         71:e3:af:22:5c:5f:37:90:50:b1:04:28:de:30:24:03:e5:d6:
         91:df:a9:84:a8:a5:97:4c:5d:36:1a:af:b5:33:1b:bd:fc:19:
         d9:a0:9c:24:0c:24:03:26:e1:69:62:78:35:f9:16:53:3b:0f:
         a5:66:0e:6d:b8:fe:1f:75:18:db:58:65:de:64:29:37:f1:05:
         85:21:0a:d3:d8:1e:db:74:30:39:c4:30:57:9e:47:f4:16:ab:
         c0:51:19:f4:99:11:9a:d8:25:ce:01:0e:6c:ee:85:4d:07:dd:
         f7:34:63:94:15:ba:a3:a9:9c:f5:7d:48:15:6b:9f:b4:e0:e5:
         ad:51:a7:ff:f2:86:cf:4f:5c:21:27:d5:7b:42:6b:ba:bf:95:
         1c:30:9d:83:cf:64:02:25:43:8b:49:54:b3:4f:ac:f8:ce:23:
         df:36:ff:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbpC1YU0Lh8kBuFjdBlPu2lyhkRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ5RUFDREE4MUY5REY5MDdFMkVFRkNFMENBNkI0MTQz
RTRGRkUxODAeFw0yNDAxMjcyMzA1NDJaFw0yNTAxMjUyMzEwNDJaMDMxMTAvBgNV
BAMTKDczMEZDMjhGNDUyMzNCMTAzN0U5QjRBQTIwOTIxNzhCNzdFQURCODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03t0Is8Mzf+fWhfSIkEWrPXvH
OFmYpHEsiG821hTMoNpI1v8NfbCNDuc8ucfjgtRUK0pJAnDrfKJjH/k+hvGwLLnC
1cesfTppETn2rUZ/WJplc7+PK2B6b7sNmcahj/luRPSXVHVxtaw2abu5tWt+ZCJk
/B1Ov3D1vLOLRI1G7tF52iAcuPrhE9+hLH+C3Oml7tUzEPjJtOC+SmcCqECBUYy9
j7CaLuLVT1GYNK8aD9CvQ67WRaYQXHRUuQNI2YhKusmKN3Z08rALNFuU2SfxOfAq
+mzLTYHihPSxbsJAJX1tQ8Wom1Cw1q/LQzG4QcTlzEFSoxxY+nr4pCJ1CqKVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcw/Cj0UjOxA36bSqIJIXi3fq24MwHwYDVR0j
BBgwFoAUDZ6s2oH535B+Lu/ODKa0FD5P/hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC8wRDlFQUNEQTgxRjlERjkwN0UyRUVGQ0UwQ0E2QjQxNDNFNEZGRTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEOUVBQ0RBODFGOURGOTA3
RTJFRUZDRTBDQTZCNDE0M0U0RkZFMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI5dwwDQYJKoZIhvcNAQELBQADggEBACTpa0mG
yGm5DVhlvl5Z9M4LIY+klFNejqFwQS1WdMabJvn0n57jIGlCzcCFIH6310hkfoqC
cqgNV6LvtnTDbzC7mEE3eov5gHkplKpqyVNATi+UXjWxGcCfAXHjryJcXzeQULEE
KN4wJAPl1pHfqYSopZdMXTYar7UzG738GdmgnCQMJAMm4WlieDX5FlM7D6VmDm24
/h91GNtYZd5kKTfxBYUhCtPYHtt0MDnEMFeeR/QWq8BRGfSZEZrYJc4BDmzuhU0H
3fc0Y5QVuqOpnPV9SBVrn7Tg5a1Rp//yhs9PXCEn1XtCa7q/lRwwnYPPZAIlQ4tJ
VLNPrPjOI982/3I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org