Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32332d3233203d3e203532383733.roa
File:                     3230302e3232392e3232302e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier:          IxPFKC1xGOvSUKiollv8iTm+L6nqzlnH93VaI++gPYo=
Subject key identifier:   B0:B2:70:D1:DB:F0:D4:C4:FA:3F:60:D4:94:B3:77:69:F2:4F:22:2E
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       09BF05F1AEC6166F3AFB69D91CB36DEBAC06CD44
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32332d3233203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:42 +0000
ROA not before:           Sat 27 Jan 2024 23:05:42 +0000
ROA not after:            Sat 25 Jan 2025 23:10:42 +0000
asID:                     52873
IP address blocks:        200.229.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bf:05:f1:ae:c6:16:6f:3a:fb:69:d9:1c:b3:6d:eb:ac:06:cd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:42 2024 GMT
            Not After : Jan 25 23:10:42 2025 GMT
        Subject: CN=B0B270D1DBF0D4C4FA3F60D494B37769F24F222E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:f9:2a:78:cf:e0:39:9d:84:69:9d:58:3a:
                    d9:3e:cb:2f:0c:3b:8b:24:91:10:8b:54:38:be:51:
                    be:f1:35:fe:21:3d:08:1e:2b:78:03:eb:29:a2:2e:
                    96:99:42:5b:5e:e7:77:d1:eb:4d:03:34:26:c7:a4:
                    0b:53:47:c2:0b:38:3c:ff:af:b8:dc:88:eb:3a:4b:
                    7e:87:47:73:b1:e8:32:f1:a2:11:41:52:c9:bf:75:
                    a3:50:e8:57:da:a9:8b:dd:96:64:5a:14:93:4d:61:
                    08:64:70:6f:39:32:8d:3c:96:22:f6:d5:d8:4e:9e:
                    84:fe:d2:e3:d0:9a:d0:75:4f:0d:3b:6a:b9:01:9e:
                    cd:70:53:4f:76:07:70:63:25:f2:50:9b:33:a2:8a:
                    91:ce:94:25:dc:9f:61:df:1e:3d:f3:fd:ff:13:a2:
                    fe:41:e9:65:fc:16:f8:3c:8e:ee:f2:38:47:3c:f2:
                    5e:46:b8:2a:07:3e:95:0a:e0:39:1d:d5:6b:b1:7b:
                    ed:5d:ed:2f:11:93:31:af:94:30:10:17:4e:e8:33:
                    c8:65:b3:8c:b3:79:b3:4c:7c:b0:7c:63:29:e5:81:
                    81:aa:f7:92:4b:23:33:2d:92:84:05:a3:15:43:0d:
                    ee:0d:e8:75:62:6f:cd:88:65:f6:57:a6:7f:f0:d7:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B2:70:D1:DB:F0:D4:C4:FA:3F:60:D4:94:B3:77:69:F2:4F:22:2E
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32332d3233203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:6d:68:e9:bc:99:38:99:40:68:50:25:ea:fd:0c:bb:2f:71:
         50:0c:82:a6:ad:f7:70:60:d8:1c:03:56:39:5d:bd:6d:67:99:
         ba:0f:f6:ae:d6:78:de:46:39:4f:12:a5:74:d1:81:78:d8:25:
         66:8a:ed:0e:d6:f0:92:b7:a4:e8:53:f8:45:84:65:73:10:08:
         70:62:ef:10:68:c5:83:ba:eb:da:d8:2f:8d:cf:88:55:a9:f9:
         97:29:85:4d:b9:b2:c4:6c:bd:5e:2d:c9:29:49:08:d8:2f:be:
         f6:98:bf:99:f3:c4:75:3b:43:99:44:f3:1f:99:4c:62:ef:da:
         69:41:52:0c:70:08:63:49:43:41:89:9d:a2:c0:85:35:ef:f9:
         06:0a:d3:3e:c6:66:cd:dd:6a:e4:47:70:b5:2a:3a:92:52:f3:
         f8:11:84:2d:31:61:16:1c:41:27:45:f8:04:78:b1:2a:4e:8b:
         12:8e:ba:96:13:f4:da:11:b6:56:fb:76:e3:82:ff:6f:6b:b9:
         ca:c3:2d:58:93:fe:24:aa:fc:46:ea:11:99:15:c7:a4:ae:6f:
         01:74:60:37:6d:27:72:ac:7b:9a:14:40:70:92:4f:05:b1:e7:
         4f:58:be:48:d4:6c:92:44:8a:a3:d3:d8:99:98:f5:ac:a1:e4:
         da:f9:d5:2b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCb8F8a7GFm86+2nZHLNt66wGzUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ5RUFDREE4MUY5REY5MDdFMkVFRkNFMENBNkI0MTQz
RTRGRkUxODAeFw0yNDAxMjcyMzA1NDJaFw0yNTAxMjUyMzEwNDJaMDMxMTAvBgNV
BAMTKEIwQjI3MEQxREJGMEQ0QzRGQTNGNjBENDk0QjM3NzY5RjI0RjIyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWPkqeM/gOZ2EaZ1YOtk+yy8M
O4skkRCLVDi+Ub7xNf4hPQgeK3gD6ymiLpaZQlte53fR600DNCbHpAtTR8ILODz/
r7jciOs6S36HR3Ox6DLxohFBUsm/daNQ6FfaqYvdlmRaFJNNYQhkcG85Mo08liL2
1dhOnoT+0uPQmtB1Tw07arkBns1wU092B3BjJfJQmzOiipHOlCXcn2HfHj3z/f8T
ov5B6WX8Fvg8ju7yOEc88l5GuCoHPpUK4Dkd1Wuxe+1d7S8RkzGvlDAQF07oM8hl
s4yzebNMfLB8YynlgYGq95JLIzMtkoQFoxVDDe4N6HVib82IZfZXpn/w1x2HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsLJw0dvw1MT6P2DUlLN3afJPIi4wHwYDVR0j
BBgwFoAUDZ6s2oH535B+Lu/ODKa0FD5P/hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC8wRDlFQUNEQTgxRjlERjkwN0UyRUVGQ0UwQ0E2QjQxNDNFNEZGRTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEOUVBQ0RBODFGOURGOTA3
RTJFRUZDRTBDQTZCNDE0M0U0RkZFMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI5dwwDQYJKoZIhvcNAQELBQADggEBAKJtaOm8
mTiZQGhQJer9DLsvcVAMgqat93Bg2BwDVjldvW1nmboP9q7WeN5GOU8SpXTRgXjY
JWaK7Q7W8JK3pOhT+EWEZXMQCHBi7xBoxYO669rYL43PiFWp+ZcphU25ssRsvV4t
ySlJCNgvvvaYv5nzxHU7Q5lE8x+ZTGLv2mlBUgxwCGNJQ0GJnaLAhTXv+QYK0z7G
Zs3dauRHcLUqOpJS8/gRhC0xYRYcQSdF+AR4sSpOixKOupYT9NoRtlb7duOC/29r
ucrDLViT/iSq/EbqEZkVx6SubwF0YDdtJ3Kse5oUQHCSTwWx509YvkjUbJJEiqPT
2JmY9ayh5Nr51Ss=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org