Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3230302e3231352e3137322e302f32322d3233203d3e20323632363938.roa
File:                     3230302e3231352e3137322e302f32322d3233203d3e20323632363938.roa (raw, json)
Hash identifier:          2NIwnUl2+rKqIIdNJHI21iSOCp9FJ7jyRtD8t4XyTyA=
Subject key identifier:   71:61:41:30:FF:AF:2E:27:38:1D:BE:F6:F0:BF:80:1E:29:B2:2F:96
Certificate issuer:       /CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
Certificate serial:       5ED1DE874E2C5BC342A83C36FF4F0ED008467215
Authority key identifier: FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3230302e3231352e3137322e302f32322d3233203d3e20323632363938.roa
Signing time:             Fri 14 Apr 2023 20:24:13 +0000
ROA not before:           Fri 14 Apr 2023 20:19:13 +0000
ROA not after:            Fri 12 Apr 2024 20:24:13 +0000
asID:                     262698
IP address blocks:        200.215.172.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d1:de:87:4e:2c:5b:c3:42:a8:3c:36:ff:4f:0e:d0:08:46:72:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
        Validity
            Not Before: Apr 14 20:19:13 2023 GMT
            Not After : Apr 12 20:24:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:a5:be:67:64:6d:a7:3d:11:e3:80:98:b9:
                    2b:30:5c:b3:d5:c5:5b:9c:1d:1d:4e:26:c1:0f:c5:
                    dd:f7:3a:b0:ae:45:88:39:91:bd:62:4c:4f:49:79:
                    bd:6b:a4:5f:88:5a:f6:61:8c:b8:56:79:f3:61:ce:
                    2c:5a:cb:49:13:63:d1:82:63:cb:50:dd:bb:1c:d0:
                    66:9b:37:ef:e1:90:0f:41:08:16:e8:8b:9d:71:52:
                    8e:d2:98:39:e3:db:3a:5f:58:9f:8b:01:a6:b7:06:
                    fa:f5:f6:7d:bb:64:04:96:79:a7:09:ad:e6:12:9e:
                    86:d1:c3:4d:f9:6d:90:4a:2b:b2:a0:22:fc:d7:9b:
                    82:cf:db:23:3c:5a:92:ae:c8:8a:ab:f8:4e:52:ca:
                    31:e7:70:a7:22:07:be:9e:af:fe:14:2e:92:96:9a:
                    f8:a2:98:dd:55:0c:1b:5c:0b:a9:68:a5:c6:78:42:
                    d6:ad:03:0a:03:f0:8a:7f:5f:6a:45:0c:c8:36:78:
                    c7:06:3a:97:08:b3:e9:6b:7f:e7:1b:f4:77:8e:97:
                    57:30:9c:0a:67:c2:02:ef:81:b0:ab:d1:0e:de:17:
                    c1:a3:1c:1a:2e:d2:15:7a:61:e8:81:25:73:8b:ce:
                    e0:97:df:1c:0c:05:fa:6a:39:6c:c3:47:1b:f8:0b:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:61:41:30:FF:AF:2E:27:38:1D:BE:F6:F0:BF:80:1E:29:B2:2F:96
            X509v3 Authority Key Identifier:
                keyid:FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3230302e3231352e3137322e302f32322d3233203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:12:f9:13:22:03:e1:f3:d5:e7:09:0a:52:f8:26:fc:da:c9:
         85:8c:c2:05:57:28:e0:48:be:66:6a:73:a0:81:c3:38:7e:2b:
         0b:03:16:3d:ca:5b:85:88:b4:72:8a:d9:19:e3:2f:43:e9:ea:
         b4:70:81:b1:bd:af:ea:8e:53:f9:36:02:ba:a5:a5:e5:dd:3a:
         a2:d9:7a:c0:3c:f8:e6:7d:5d:ab:b2:fe:67:3b:ba:35:78:8e:
         ab:4b:04:33:2e:0c:0b:1b:48:e8:81:b8:3f:17:6c:ac:77:0c:
         75:04:d4:6a:1d:e2:f1:a4:d4:72:48:75:db:7b:40:26:2a:02:
         33:42:41:77:ae:84:92:54:e8:60:79:eb:1e:9a:ff:d9:0d:b5:
         05:b7:64:0c:fc:ba:0f:6b:10:8f:28:b7:cc:ab:0d:da:78:e3:
         d1:ba:a8:99:49:4c:ae:e6:c6:c3:33:3f:67:f3:37:e0:80:1b:
         0f:50:8b:4e:c1:23:05:dd:02:29:41:3c:28:f8:86:04:2e:27:
         ba:0c:96:11:fa:b5:33:1e:bf:cb:63:aa:fe:d7:b6:da:0c:2e:
         4c:0d:24:08:1f:39:fe:15:f8:ac:4f:ce:37:df:76:8e:9b:ca:
         46:cf:6e:0b:06:be:0e:be:d6:d3:9b:ba:be:9c:a0:74:62:6a:
         c5:40:3c:12
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUXtHeh04sW8NCqDw2/08O0AhGchUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUxRUE5MzFFRTUzMUU4RTQyRTQ5NDNFQUQxODkyMjcz
MEYyQjMzNDAeFw0yMzA0MTQyMDE5MTNaFw0yNDA0MTIyMDI0MTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY2OEE1QkU2NzY0NkRBNzNE
MTFFMzgwOThCOTJCMzA1Q0IzRDVDNTVCOUMxRDFENEUyNkMxMEZDNURERjczQUIw
QUU0NTg4Mzk5MUJENjI0QzRGNDk3OUJENkJBNDVGODg1QUY2NjE4Q0I4NTY3OUYz
NjFDRTJDNUFDQjQ5MTM2M0QxODI2M0NCNTBEREJCMUNEMDY2OUIzN0VGRTE5MDBG
NDEwODE2RTg4QjlENzE1MjhFRDI5ODM5RTNEQjNBNUY1ODlGOEIwMUE2QjcwNkZB
RjVGNjdEQkI2NDA0OTY3OUE3MDlBREU2MTI5RTg2RDFDMzRERjk2RDkwNEEyQkIy
QTAyMkZDRDc5QjgyQ0ZEQjIzM0M1QTkyQUVDODhBQUJGODRFNTJDQTMxRTc3MEE3
MjIwN0JFOUVBRkZFMTQyRTkyOTY5QUY4QTI5OERENTUwQzFCNUMwQkE5NjhBNUM2
Nzg0MkQ2QUQwMzBBMDNGMDhBN0Y1RjZBNDUwQ0M4MzY3OEM3MDYzQTk3MDhCM0U5
NkI3RkU3MUJGNDc3OEU5NzU3MzA5QzBBNjdDMjAyRUY4MUIwQUJEMTBFREUxN0Mx
QTMxQzFBMkVEMjE1N0E2MUU4ODEyNTczOEJDRUUwOTdERjFDMEMwNUZBNkEzOTZD
QzM0NzFCRjgwQkNEMzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv2ilvmdkbac9EeOAmLkrMFyz1cVbnB0dTibBD8Xd9zqwrkWIOZG9
YkxPSXm9a6RfiFr2YYy4VnnzYc4sWstJE2PRgmPLUN27HNBmmzfv4ZAPQQgW6Iud
cVKO0pg549s6X1ifiwGmtwb69fZ9u2QElnmnCa3mEp6G0cNN+W2QSiuyoCL815uC
z9sjPFqSrsiKq/hOUsox53CnIge+nq/+FC6Slpr4opjdVQwbXAupaKXGeELWrQMK
A/CKf19qRQzINnjHBjqXCLPpa3/nG/R3jpdXMJwKZ8IC74Gwq9EO3hfBoxwaLtIV
emHogSVzi87gl98cDAX6ajlsw0cb+AvNOQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FHFhQTD/ry4nOB2+9vC/gB4psi+WMB8GA1UdIwQYMBaAFP4eqTHuUx6OQuSUPq0Y
kicw8rM0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zob240MmoyeW5tdktX
N0RDR1hxU1FOV2lYN1NHOENIZ1E4eWhMYnJlbldqLzAvRkUxRUE5MzFFRTUzMUU4
RTQyRTQ5NDNFQUQxODkyMjczMEYyQjMzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRTFFQTkzMUVFNTMxRThFNDJFNDk0M0VBRDE4OTIyNzMwRjJC
MzM0LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GaG9uNDJqMnlubXZLVzdEQ0dY
cVNRTldpWDdTRzhDSGdROHloTGJyZW5Xai8wLzMyMzAzMDJlMzIzMTM1MmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALI16wwDQYJKoZIhvcNAQELBQADggEBAAsS+RMiA+Hz1ecJClL4JvzayYWMwgVX
KOBIvmZqc6CBwzh+KwsDFj3KW4WItHKK2RnjL0Pp6rRwgbG9r+qOU/k2ArqlpeXd
OqLZesA8+OZ9Xauy/mc7ujV4jqtLBDMuDAsbSOiBuD8XbKx3DHUE1God4vGk1HJI
ddt7QCYqAjNCQXeuhJJU6GB56x6a/9kNtQW3ZAz8ug9rEI8ot8yrDdp449G6qJlJ
TK7mxsMzP2fzN+CAGw9Qi07BIwXdAilBPCj4hgQuJ7oMlhH6tTMev8tjqv7XttoM
LkwNJAgfOf4V+KxPzjffdo6bykbPbgsGvg6+1tObur6coHRiasVAPBI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org