Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EuWJgqLLtvVfWuZjXV7Le5cDFERkWJJsEeinF3a1ER57/0/3230312e37312e32302e302f32322d3234203d3e20323730323836.roa
File:                     3230312e37312e32302e302f32322d3234203d3e20323730323836.roa (raw, json)
Hash identifier:          7066C+sgnVC82K4PVSC9Q4QzgqM3t0a02LtBrHIIIiI=
Subject key identifier:   0A:2A:4A:B5:A9:06:96:59:2A:9C:00:9B:11:7D:81:3A:16:20:56:14
Certificate issuer:       /CN=26586D625193DBAEC27D8F4D5FE97AB276DBFD4B
Certificate serial:       285E7DF265A38A4F7D0250A3E5089A7F54C3B721
Authority key identifier: 26:58:6D:62:51:93:DB:AE:C2:7D:8F:4D:5F:E9:7A:B2:76:DB:FD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26586D625193DBAEC27D8F4D5FE97AB276DBFD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EuWJgqLLtvVfWuZjXV7Le5cDFERkWJJsEeinF3a1ER57/0/3230312e37312e32302e302f32322d3234203d3e20323730323836.roa
Signing time:             Tue 27 Jul 2021 15:00:00 +0000
ROA not before:           Tue 27 Jul 2021 14:55:00 +0000
ROA not after:            Wed 27 Jul 2022 15:00:00 +0000
asID:                     270286
IP address blocks:        201.71.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5e:7d:f2:65:a3:8a:4f:7d:02:50:a3:e5:08:9a:7f:54:c3:b7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26586D625193DBAEC27D8F4D5FE97AB276DBFD4B
        Validity
            Not Before: Jul 27 14:55:00 2021 GMT
            Not After : Jul 27 15:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:ca:82:41:3a:65:27:1b:5c:06:8d:6c:be:
                    a9:42:5c:73:15:cb:8b:db:3b:1d:7a:14:4f:89:9e:
                    84:2c:25:05:da:27:4a:cf:31:70:00:77:cf:28:9f:
                    df:d0:bd:c3:5f:7b:ff:8d:49:ac:16:84:22:8b:b9:
                    6a:17:20:3f:42:07:20:d0:31:06:7f:5e:5c:80:dd:
                    15:ba:66:db:db:83:99:0b:bd:74:43:c0:47:73:dd:
                    83:72:4b:91:0b:1e:c9:1d:29:db:20:83:35:45:c2:
                    32:cf:d5:e9:10:9d:4b:7f:19:9d:01:ee:5d:84:ce:
                    9c:7d:9f:81:c5:ac:ba:0d:68:f1:b5:f7:18:6c:89:
                    6a:88:7b:20:54:0e:4c:1a:98:bc:95:fe:1f:52:b2:
                    e3:63:b4:68:8d:50:9f:f5:92:68:26:6e:a8:86:c0:
                    6d:29:23:6f:a7:52:50:a2:9c:af:73:50:d9:c5:e9:
                    db:a2:3c:b1:31:7d:2a:ca:53:31:91:ed:47:92:fd:
                    8e:59:b4:a3:1d:d4:ed:3e:18:82:6c:30:7e:d0:89:
                    e7:7d:78:c0:3e:7c:c3:1b:69:3c:15:64:50:f6:d0:
                    ef:55:b9:00:4c:c5:99:f4:1c:0a:41:04:87:82:d5:
                    54:7b:6d:9a:08:d5:5c:76:89:7b:3f:f9:55:72:79:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:4A:B5:A9:06:96:59:2A:9C:00:9B:11:7D:81:3A:16:20:56:14
            X509v3 Authority Key Identifier:
                keyid:26:58:6D:62:51:93:DB:AE:C2:7D:8F:4D:5F:E9:7A:B2:76:DB:FD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EuWJgqLLtvVfWuZjXV7Le5cDFERkWJJsEeinF3a1ER57/0/26586D625193DBAEC27D8F4D5FE97AB276DBFD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26586D625193DBAEC27D8F4D5FE97AB276DBFD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EuWJgqLLtvVfWuZjXV7Le5cDFERkWJJsEeinF3a1ER57/0/3230312e37312e32302e302f32322d3234203d3e20323730323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:33:ce:72:a9:7e:68:57:60:a9:f8:dc:27:7a:fb:b5:6c:c7:
         3f:51:c3:2c:05:e0:93:ee:c0:53:1a:f9:d5:f0:00:bb:72:4e:
         b5:c5:ad:fe:2f:13:cc:18:5c:01:e3:98:4a:07:e9:29:7a:5a:
         0f:bf:b6:47:fe:ed:01:87:9e:53:cd:1d:78:b9:cc:69:f6:ce:
         96:41:9c:10:dc:5e:27:f2:84:bb:4c:14:09:79:08:61:1e:ac:
         7b:93:6a:99:bf:96:5c:6c:1b:88:02:99:0e:de:bd:41:ae:24:
         bd:27:06:8e:b5:82:86:88:bf:35:5b:f7:db:ca:3d:a2:72:e6:
         0e:a1:87:28:66:2d:18:21:45:2c:87:2c:da:e0:db:8e:10:da:
         9c:1c:3b:0b:4d:ef:8d:45:8f:4b:62:1c:ff:7d:39:d1:5f:4b:
         c1:6d:dd:39:4d:2f:39:2b:60:e0:36:0d:33:08:08:c1:63:c3:
         63:d0:0b:14:1f:30:bb:a1:45:53:8b:c9:3f:2b:08:61:c3:b4:
         df:bf:54:26:24:8f:a2:24:72:83:e9:eb:35:46:f3:f3:f0:3d:
         0a:49:8a:cb:10:3e:57:e1:3e:a6:f3:24:91:88:5d:bd:8a:2a:
         ef:b4:34:e5:d4:e3:a4:fb:36:82:a4:e7:be:77:7a:23:1a:49:
         8e:83:f8:5e
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUKF598mWjik99AlCj5Qiaf1TDtyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY1ODZENjI1MTkzREJBRUMyN0Q4RjRENUZFOTdBQjI3
NkRCRkQ0QjAeFw0yMTA3MjcxNDU1MDBaFw0yMjA3MjcxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzgzN0NBODI0MTNBNjUyNzFC
NUMwNjhENkNCRUE5NDI1QzczMTVDQjhCREIzQjFEN0ExNDRGODk5RTg0MkMyNTA1
REEyNzRBQ0YzMTcwMDA3N0NGMjg5RkRGRDBCREMzNUY3QkZGOEQ0OUFDMTY4NDIy
OEJCOTZBMTcyMDNGNDIwNzIwRDAzMTA2N0Y1RTVDODBERDE1QkE2NkRCREI4Mzk5
MEJCRDc0NDNDMDQ3NzNERDgzNzI0QjkxMEIxRUM5MUQyOURCMjA4MzM1NDVDMjMy
Q0ZENUU5MTA5RDRCN0YxOTlEMDFFRTVEODRDRTlDN0Q5RjgxQzVBQ0JBMEQ2OEYx
QjVGNzE4NkM4OTZBODg3QjIwNTQwRTRDMUE5OEJDOTVGRTFGNTJCMkUzNjNCNDY4
OEQ1MDlGRjU5MjY4MjY2RUE4ODZDMDZEMjkyMzZGQTc1MjUwQTI5Q0FGNzM1MEQ5
QzVFOURCQTIzQ0IxMzE3RDJBQ0E1MzMxOTFFRDQ3OTJGRDhFNTlCNEEzMURENEVE
M0UxODgyNkMzMDdFRDA4OUU3N0Q3OEMwM0U3Q0MzMUI2OTNDMTU2NDUwRjZEMEVG
NTVCOTAwNENDNTk5RjQxQzBBNDEwNDg3ODJENTU0N0I2RDlBMDhENTVDNzY4OTdC
M0ZGOTU1NzI3OUU3OTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyDfKgkE6ZScbXAaNbL6pQlxzFcuL2zsdehRPiZ6ELCUF2idKzzFw
AHfPKJ/f0L3DX3v/jUmsFoQii7lqFyA/Qgcg0DEGf15cgN0Vumbb24OZC710Q8BH
c92DckuRCx7JHSnbIIM1RcIyz9XpEJ1LfxmdAe5dhM6cfZ+Bxay6DWjxtfcYbIlq
iHsgVA5MGpi8lf4fUrLjY7RojVCf9ZJoJm6ohsBtKSNvp1JQopyvc1DZxenbojyx
MX0qylMxke1Hkv2OWbSjHdTtPhiCbDB+0InnfXjAPnzDG2k8FWRQ9tDvVbkATMWZ
9BwKQQSHgtVUe22aCNVcdol7P/lVcnnnlwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAoqSrWpBpZZKpwAmxF9gToWIFYUMB8GA1UdIwQYMBaAFCZYbWJRk9uuwn2PTV/p
erJ22/1LMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V1V0pncUxMdHZWZld1
WmpYVjdMZTVjREZFUmtXSkpzRWVpbkYzYTFFUjU3LzAvMjY1ODZENjI1MTkzREJB
RUMyN0Q4RjRENUZFOTdBQjI3NkRCRkQ0Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yNjU4NkQ2MjUxOTNEQkFFQzI3RDhGNEQ1RkU5N0FCMjc2REJG
RDRCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FdVdKZ3FMTHR2VmZXdVpqWFY3
TGU1Y0RGRVJrV0pKc0VlaW5GM2ExRVI1Ny8wLzMyMzAzMTJlMzczMTJlMzIzMDJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMDMyMzgzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAslH
FDANBgkqhkiG9w0BAQsFAAOCAQEAmDPOcql+aFdgqfjcJ3r7tWzHP1HDLAXgk+7A
Uxr51fAAu3JOtcWt/i8TzBhcAeOYSgfpKXpaD7+2R/7tAYeeU80deLnMafbOlkGc
ENxeJ/KEu0wUCXkIYR6se5Nqmb+WXGwbiAKZDt69Qa4kvScGjrWChoi/NVv328o9
onLmDqGHKGYtGCFFLIcs2uDbjhDanBw7C03vjUWPS2Ic/3050V9LwW3dOU0vOStg
4DYNMwgIwWPDY9ALFB8wu6FFU4vJPysIYcO0379UJiSPoiRyg+nrNUbz8/A9CkmK
yxA+V+E+pvMkkYhdvYoq77Q05dTjpPs2gqTnvnd6IxpJjoP4Xg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org