Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32342d3234203d3e20323731333034.roa
File:                     3230302e35332e36382e302f32342d3234203d3e20323731333034.roa (raw, json)
Hash identifier:          AMcLejaRlwCl1kDClLzCGbBZzWBmXkarV0E3b9aPgdg=
Subject key identifier:   01:62:E3:75:DA:EB:2E:39:EE:52:B3:D9:5F:52:87:A8:C1:5E:C5:0D
Certificate issuer:       /CN=DF1BF4C8AF5714489FC67733E3835BAE3260825C
Certificate serial:       3676ED4BA1EC1DD2F55186E35E3000FC8E6F9801
Authority key identifier: DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32342d3234203d3e20323731333034.roa
Signing time:             Fri 20 Oct 2023 00:00:00 +0000
ROA not before:           Thu 19 Oct 2023 23:55:00 +0000
ROA not after:            Fri 18 Oct 2024 00:00:00 +0000
asID:                     271304
IP address blocks:        200.53.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:76:ed:4b:a1:ec:1d:d2:f5:51:86:e3:5e:30:00:fc:8e:6f:98:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1BF4C8AF5714489FC67733E3835BAE3260825C
        Validity
            Not Before: Oct 19 23:55:00 2023 GMT
            Not After : Oct 18 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:9e:11:8d:9b:0c:54:1e:af:78:19:c0:af:
                    83:aa:7e:92:91:f7:9c:ae:6d:4e:55:07:91:ce:34:
                    3e:c6:f1:8a:53:a3:97:fd:c5:cc:8f:22:f1:06:5f:
                    ec:e7:2f:e5:f6:be:43:dd:27:a9:62:cb:90:5d:de:
                    aa:81:ef:9c:83:40:e2:00:ec:1d:66:1f:59:12:05:
                    9f:39:c4:f1:eb:04:08:af:97:b4:d9:29:84:d7:72:
                    e9:42:bb:6c:d2:84:38:b6:b4:46:76:e2:e1:15:ad:
                    24:f1:39:f4:e3:12:73:94:bb:67:e8:cd:b0:38:90:
                    f9:d2:26:3e:7c:45:80:29:65:05:68:1d:c0:c2:80:
                    aa:b3:a1:6c:09:aa:dc:0f:39:85:79:88:b7:e1:44:
                    46:de:a3:a9:8b:2b:83:42:d3:88:1e:aa:97:88:20:
                    17:fb:38:0c:3e:41:0f:fb:27:df:ab:6d:e0:bd:0a:
                    8c:1d:86:60:59:bb:63:d2:72:4b:4d:f0:b0:aa:7a:
                    56:d8:47:74:b6:32:3f:d1:2e:b0:c0:09:f0:0f:88:
                    05:3f:9d:8a:a7:cc:80:6a:30:48:15:2f:ed:e8:f1:
                    16:bf:ac:e4:46:55:db:d7:8d:17:16:d9:21:ee:88:
                    a2:47:ba:f0:40:6c:83:01:85:8d:e7:f8:69:43:b0:
                    7d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:62:E3:75:DA:EB:2E:39:EE:52:B3:D9:5F:52:87:A8:C1:5E:C5:0D
            X509v3 Authority Key Identifier:
                keyid:DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32342d3234203d3e20323731333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ee:5c:47:d6:11:b9:7b:df:1a:7a:0c:2b:22:32:43:23:10:
         12:d5:c4:b0:88:87:1d:b7:ec:47:4f:40:8f:ba:80:01:86:df:
         dc:bb:d6:09:05:28:d2:ba:ed:f8:ef:4f:0d:1a:ae:0e:e3:71:
         38:3d:9b:ef:49:ef:13:73:e1:43:30:4b:7a:87:b1:92:26:78:
         2a:a9:7d:6e:1f:d9:d1:e8:51:83:08:89:fb:97:c8:d4:c3:81:
         35:81:a7:56:6e:b4:2f:16:d4:1d:6b:57:4c:f1:27:af:38:53:
         c8:da:33:93:98:42:52:8e:6f:e9:c9:04:cf:02:9a:8a:75:c7:
         4e:6b:5a:3e:bc:29:8a:aa:5a:98:11:9a:6a:f4:5a:c4:66:8f:
         28:5b:4b:9f:58:64:fa:11:63:71:62:7f:55:01:fd:42:63:e0:
         9c:d1:f9:0b:79:37:c0:a2:5c:68:26:14:b5:30:ea:22:ae:04:
         67:ce:7c:a4:2f:e7:b9:de:0a:a8:35:1c:66:ad:b3:e0:80:ea:
         a1:99:6d:b3:87:72:0f:46:2c:42:4a:a7:87:4c:65:1d:03:0a:
         05:15:29:1a:7f:cb:f4:c1:57:e0:e4:2c:b6:37:78:0b:13:3e:
         78:6d:55:b4:c4:33:ec:a3:26:3d:ec:cf:1b:31:c6:ff:96:66:
         ac:25:e3:c0
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUNnbtS6HsHdL1UYbjXjAA/I5vmAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYxQkY0QzhBRjU3MTQ0ODlGQzY3NzMzRTM4MzVCQUUz
MjYwODI1QzAeFw0yMzEwMTkyMzU1MDBaFw0yNDEwMTgwMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFFODlFMTE4RDlCMEM1NDFF
QUY3ODE5QzBBRjgzQUE3RTkyOTFGNzlDQUU2RDRFNTUwNzkxQ0UzNDNFQzZGMThB
NTNBMzk3RkRDNUNDOEYyMkYxMDY1RkVDRTcyRkU1RjZCRTQzREQyN0E5NjJDQjkw
NURERUFBODFFRjlDODM0MEUyMDBFQzFENjYxRjU5MTIwNTlGMzlDNEYxRUIwNDA4
QUY5N0I0RDkyOTg0RDc3MkU5NDJCQjZDRDI4NDM4QjZCNDQ2NzZFMkUxMTVBRDI0
RjEzOUY0RTMxMjczOTRCQjY3RThDREIwMzg5MEY5RDIyNjNFN0M0NTgwMjk2NTA1
NjgxREMwQzI4MEFBQjNBMTZDMDlBQURDMEYzOTg1Nzk4OEI3RTE0NDQ2REVBM0E5
OEIyQjgzNDJEMzg4MUVBQTk3ODgyMDE3RkIzODBDM0U0MTBGRkIyN0RGQUI2REUw
QkQwQThDMUQ4NjYwNTlCQjYzRDI3MjRCNERGMEIwQUE3QTU2RDg0Nzc0QjYzMjNG
RDEyRUIwQzAwOUYwMEY4ODA1M0Y5RDhBQTdDQzgwNkEzMDQ4MTUyRkVERThGMTE2
QkZBQ0U0NDY1NURCRDc4RDE3MTZEOTIxRUU4OEEyNDdCQUYwNDA2QzgzMDE4NThE
RTdGODY5NDNCMDdEQzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuuieEY2bDFQer3gZwK+Dqn6Skfecrm1OVQeRzjQ+xvGKU6OX/cXM
jyLxBl/s5y/l9r5D3SepYsuQXd6qge+cg0DiAOwdZh9ZEgWfOcTx6wQIr5e02SmE
13LpQrts0oQ4trRGduLhFa0k8Tn04xJzlLtn6M2wOJD50iY+fEWAKWUFaB3AwoCq
s6FsCarcDzmFeYi34URG3qOpiyuDQtOIHqqXiCAX+zgMPkEP+yffq23gvQqMHYZg
Wbtj0nJLTfCwqnpW2Ed0tjI/0S6wwAnwD4gFP52Kp8yAajBIFS/t6PEWv6zkRlXb
140XFtkh7oiiR7rwQGyDAYWN5/hpQ7B9xQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAFi43Xa6y457lKz2V9Sh6jBXsUNMB8GA1UdIwQYMBaAFN8b9MivVxRIn8Z3M+OD
W64yYIJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5cTVQZDVTSG93bUV3
bXFkTjRpdkJKVFpCTHYxNHlhelJrV1JxNkJtelZlLzAvREYxQkY0QzhBRjU3MTQ0
ODlGQzY3NzMzRTM4MzVCQUUzMjYwODI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ERjFCRjRDOEFGNTcxNDQ4OUZDNjc3MzNFMzgzNUJBRTMyNjA4
MjVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXE1UGQ1U0hvd21Fd21xZE40
aXZCSlRaQkx2MTR5YXpSa1dScTZCbXpWZS8wLzMyMzAzMDJlMzUzMzJlMzYzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg1
RDANBgkqhkiG9w0BAQsFAAOCAQEAL+5cR9YRuXvfGnoMKyIyQyMQEtXEsIiHHbfs
R09Aj7qAAYbf3LvWCQUo0rrt+O9PDRquDuNxOD2b70nvE3PhQzBLeoexkiZ4Kql9
bh/Z0ehRgwiJ+5fI1MOBNYGnVm60LxbUHWtXTPEnrzhTyNozk5hCUo5v6ckEzwKa
inXHTmtaPrwpiqpamBGaavRaxGaPKFtLn1hk+hFjcWJ/VQH9QmPgnNH5C3k3wKJc
aCYUtTDqIq4EZ858pC/nud4KqDUcZq2z4IDqoZlts4dyD0YsQkqnh0xlHQMKBRUp
Gn/L9MFX4OQstjd4CxM+eG1VtMQz7KMmPezPGzHG/5ZmrCXjwA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org