Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa
File:                     3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa (raw, json)
Hash identifier:          Bgm47afRztIP8gZRLMD/YpIp57zT3pKRcgpgeqHMSzY=
Subject key identifier:   92:D2:0F:CC:AB:2C:18:17:27:C4:6D:84:52:37:83:BC:2E:2F:B0:E6
Certificate issuer:       /CN=AD30B412FE51DB2B109A7EB7F8931FC45C188D54
Certificate serial:       3EA36332E4D0170AEB6DFF092973115990C40026
Authority key identifier: AD:30:B4:12:FE:51:DB:2B:10:9A:7E:B7:F8:93:1F:C4:5C:18:8D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa
Signing time:             Thu 11 Jan 2024 18:22:02 +0000
ROA not before:           Thu 11 Jan 2024 18:17:02 +0000
ROA not after:            Thu 09 Jan 2025 18:22:02 +0000
asID:                     271303
IP address blocks:        200.36.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a3:63:32:e4:d0:17:0a:eb:6d:ff:09:29:73:11:59:90:c4:00:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD30B412FE51DB2B109A7EB7F8931FC45C188D54
        Validity
            Not Before: Jan 11 18:17:02 2024 GMT
            Not After : Jan  9 18:22:02 2025 GMT
        Subject: CN=92D20FCCAB2C181727C46D84523783BC2E2FB0E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:47:2f:bd:2b:6e:45:d5:6a:6a:cb:1b:7d:37:
                    95:72:b8:57:2f:3a:44:e7:fa:d1:06:19:6c:78:3e:
                    e1:d4:03:a9:39:67:91:07:66:3f:f2:f5:7e:38:62:
                    66:ac:79:10:84:af:df:74:6f:e4:a1:28:42:be:16:
                    80:3b:87:8a:4c:7e:e2:e8:b6:85:0d:a1:e8:df:6c:
                    f2:92:40:43:73:78:94:d3:c2:b6:fc:2b:13:b7:b3:
                    4a:3a:73:e2:bc:d0:5a:7d:5d:a1:09:7b:43:d7:8f:
                    3e:26:73:d8:b1:95:30:2f:21:a4:44:b4:a7:e9:1c:
                    db:7f:1c:c0:7e:d7:dc:7e:93:ad:9e:29:7b:20:67:
                    37:28:e3:e9:fb:6d:00:9c:31:3e:8e:86:ec:12:c3:
                    81:56:75:0a:c4:29:9d:a0:e7:64:de:3a:40:e3:db:
                    47:bd:fb:a9:4f:bf:8e:b7:2c:d4:62:e3:0a:53:10:
                    f6:94:25:7b:d9:fb:29:d3:c3:66:d7:37:bd:20:9e:
                    1d:6d:eb:1a:de:1f:a1:5b:de:6d:a5:0f:41:b8:b1:
                    7e:fb:1e:7b:8b:40:9b:48:f9:0d:fe:b0:45:e9:00:
                    72:d0:fd:06:dd:8d:93:44:29:58:b1:a0:33:e1:9e:
                    bb:1f:c6:bc:8e:8d:0b:77:b8:4b:02:6e:5f:45:fc:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D2:0F:CC:AB:2C:18:17:27:C4:6D:84:52:37:83:BC:2E:2F:B0:E6
            X509v3 Authority Key Identifier:
                keyid:AD:30:B4:12:FE:51:DB:2B:10:9A:7E:B7:F8:93:1F:C4:5C:18:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:f1:56:05:06:94:7a:75:be:00:14:8b:07:8d:01:27:54:
         90:c8:ad:62:56:e2:b5:b0:25:c9:a4:e3:9a:54:3c:a4:40:67:
         fa:ae:fa:4f:fa:10:a1:ef:5f:5a:25:2e:12:3d:4b:c5:aa:eb:
         37:7e:69:d9:07:f6:62:25:65:c3:b7:a8:68:c4:b6:60:17:bf:
         0f:85:1e:69:e1:70:02:6e:bc:7c:99:a4:70:db:6d:d9:0f:2e:
         50:ab:7d:08:ce:38:b1:e6:09:2b:3e:7d:e0:82:c1:49:ee:e8:
         48:7a:db:b0:9f:42:3a:05:dc:63:e2:3d:a8:6a:c1:a4:5d:e7:
         81:8e:7c:41:e0:7c:a5:bb:0a:2a:23:3c:31:3c:d3:39:a3:85:
         d5:b9:d7:77:e3:c4:50:7d:b2:9b:52:93:49:5b:30:1e:ed:60:
         d2:ca:1a:c5:18:26:f6:09:cb:f7:f0:47:9d:aa:ea:b6:38:8a:
         5f:8f:6b:f6:03:e4:54:91:d1:0f:37:25:b6:c4:74:96:05:16:
         3f:f7:a5:0b:d4:f0:bd:2d:72:6d:70:7f:e7:02:a7:2c:a9:3f:
         9a:42:da:10:23:fc:3b:9f:ea:96:99:0b:3a:66:cf:6a:1b:c8:
         74:2c:1c:93:d5:25:19:64:af:41:5d:cf:e2:c0:ee:5a:19:12:
         fd:98:38:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPqNjMuTQFwrrbf8JKXMRWZDEACYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQzMEI0MTJGRTUxREIyQjEwOUE3RUI3Rjg5MzFGQzQ1
QzE4OEQ1NDAeFw0yNDAxMTExODE3MDJaFw0yNTAxMDkxODIyMDJaMDMxMTAvBgNV
BAMTKDkyRDIwRkNDQUIyQzE4MTcyN0M0NkQ4NDUyMzc4M0JDMkUyRkIwRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyRy+9K25F1Wpqyxt9N5VyuFcv
OkTn+tEGGWx4PuHUA6k5Z5EHZj/y9X44YmaseRCEr990b+ShKEK+FoA7h4pMfuLo
toUNoejfbPKSQENzeJTTwrb8KxO3s0o6c+K80Fp9XaEJe0PXjz4mc9ixlTAvIaRE
tKfpHNt/HMB+19x+k62eKXsgZzco4+n7bQCcMT6OhuwSw4FWdQrEKZ2g52TeOkDj
20e9+6lPv463LNRi4wpTEPaUJXvZ+ynTw2bXN70gnh1t6xreH6Fb3m2lD0G4sX77
HnuLQJtI+Q3+sEXpAHLQ/QbdjZNEKVixoDPhnrsfxryOjQt3uEsCbl9F/KFRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUktIPzKssGBcnxG2EUjeDvC4vsOYwHwYDVR0j
BBgwFoAUrTC0Ev5R2ysQmn63+JMfxFwYjVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVpaNjdzN1hpaTJ3dTJkR3FmOW5xZEo3WWtRaFhLUkJhWnRqUEVoWFRq
NEsvMC9BRDMwQjQxMkZFNTFEQjJCMTA5QTdFQjdGODkzMUZDNDVDMTg4RDU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEMzBCNDEyRkU1MURCMkIx
MDlBN0VCN0Y4OTMxRkM0NUMxODhENTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VaWjY3czdYaWkyd3UyZEdxZjlucWRKN1lrUWhYS1JCYVp0alBFaFhUajRLLzAv
MzIzMDMwMmUzMzM2MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIJJAwDQYJKoZIhvcNAQELBQADggEBAD218VYF
BpR6db4AFIsHjQEnVJDIrWJW4rWwJcmk45pUPKRAZ/qu+k/6EKHvX1olLhI9S8Wq
6zd+adkH9mIlZcO3qGjEtmAXvw+FHmnhcAJuvHyZpHDbbdkPLlCrfQjOOLHmCSs+
feCCwUnu6Eh627CfQjoF3GPiPahqwaRd54GOfEHgfKW7CiojPDE80zmjhdW513fj
xFB9sptSk0lbMB7tYNLKGsUYJvYJy/fwR52q6rY4il+Pa/YD5FSR0Q83JbbEdJYF
Fj/3pQvU8L0tcm1wf+cCpyypP5pC2hAj/Duf6paZCzpmz2obyHQsHJPVJRlkr0Fd
z+LA7loZEv2YOCQ=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org