Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e37312e302f32342d3234203d3e20323731333034.roa
File:                     3230302e35332e37312e302f32342d3234203d3e20323731333034.roa (raw, json)
Hash identifier:          8Qjd3PfA4xzoMG8VYOtT3i9msIOrryprJ1xJVz61uHk=
Subject key identifier:   7A:32:4E:73:65:48:9C:B8:1E:9C:5A:0D:8B:8F:9A:16:FB:07:59:07
Certificate issuer:       /CN=DF1BF4C8AF5714489FC67733E3835BAE3260825C
Certificate serial:       053B7EE5354A81BFE881300E6FBA66E3B9C056DE
Authority key identifier: DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e37312e302f32342d3234203d3e20323731333034.roa
Signing time:             Sat 28 Oct 2023 13:00:00 +0000
ROA not before:           Sat 28 Oct 2023 12:55:00 +0000
ROA not after:            Sat 26 Oct 2024 13:00:00 +0000
asID:                     271304
IP address blocks:        200.53.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3b:7e:e5:35:4a:81:bf:e8:81:30:0e:6f:ba:66:e3:b9:c0:56:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1BF4C8AF5714489FC67733E3835BAE3260825C
        Validity
            Not Before: Oct 28 12:55:00 2023 GMT
            Not After : Oct 26 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:9f:5d:78:58:de:c7:35:47:92:30:3d:2e:
                    83:e7:6f:a6:d4:bf:87:d4:39:56:eb:7f:e5:61:d1:
                    8c:5e:57:a2:3d:7f:a4:f0:0e:d2:b1:f4:1e:29:1b:
                    69:c2:1b:c0:03:6b:a9:27:12:3d:49:17:41:cc:b0:
                    11:84:fc:3b:62:51:95:b7:ab:e9:52:bb:80:ae:ec:
                    a6:fd:7a:05:b1:40:ab:89:1c:d8:27:b6:80:e8:4d:
                    ad:cf:64:9f:7c:da:16:e1:55:b1:90:ac:ab:2b:4e:
                    9d:54:a8:44:01:a2:f6:8a:7d:fd:03:f1:f7:cb:22:
                    50:fb:fd:fd:11:0f:07:db:58:8c:9a:a6:45:8e:d2:
                    6c:95:48:7d:3a:c9:0b:1c:9c:cd:05:22:3f:a3:cc:
                    c7:61:5c:86:da:8b:2b:c1:b7:57:13:2e:8c:21:83:
                    66:87:3a:a7:32:91:73:ea:ae:aa:1b:bf:b8:53:3d:
                    2a:44:9e:9f:43:e8:af:d7:46:1d:bd:23:89:c2:eb:
                    f3:cc:9f:40:17:9b:24:d4:83:dc:0a:70:b3:43:94:
                    65:09:ba:28:7c:5c:cd:4f:1e:6a:fa:82:15:44:44:
                    05:62:60:71:b1:ba:10:3c:e1:42:a3:c2:fc:7b:dd:
                    d4:22:54:16:24:51:d5:1a:c9:e7:73:6e:80:4e:ef:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:32:4E:73:65:48:9C:B8:1E:9C:5A:0D:8B:8F:9A:16:FB:07:59:07
            X509v3 Authority Key Identifier:
                keyid:DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e37312e302f32342d3234203d3e20323731333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ba:66:e9:01:1b:ab:89:7d:2e:82:c7:cf:7f:7a:37:5f:7d:
         f8:36:53:4b:c0:46:1b:6f:41:8f:75:f0:ab:f5:0f:4a:99:d1:
         a7:29:a0:b5:5d:20:d1:09:0c:cf:e9:92:a5:1c:90:68:ef:e9:
         4b:66:83:e7:54:9d:30:e3:25:63:b9:b4:8d:c4:db:0c:8f:85:
         61:aa:92:aa:18:cf:d3:61:7b:9a:74:50:54:c6:51:cd:84:9d:
         13:57:24:a7:33:a9:26:20:c0:32:f0:22:ed:22:23:f4:8a:f2:
         81:a6:ad:fe:93:81:8e:b9:31:d5:04:5b:f5:13:db:0c:d1:19:
         29:2e:17:c0:c2:dc:b4:4e:71:c9:fb:7d:59:c7:0e:b2:1b:41:
         cd:5a:44:8d:0c:be:e9:3d:d0:2f:1f:c8:2c:26:44:72:4a:23:
         12:ab:af:f5:2e:45:22:77:d4:b9:9d:bf:44:ce:65:59:c5:e0:
         a6:5d:a5:99:f6:09:d1:0c:51:1e:f0:04:f1:7e:8a:2f:e2:df:
         e8:f4:f7:4c:cd:65:53:84:70:0a:c8:12:dc:22:c4:46:a3:e9:
         8b:24:89:2e:b1:7d:15:15:ce:3b:ad:dc:24:19:5f:d1:79:7a:
         59:1c:20:c7:17:a6:41:f9:67:04:ed:c5:61:69:10:1f:bd:f2:
         ce:2f:c6:2d
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUBTt+5TVKgb/ogTAOb7pm47nAVt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYxQkY0QzhBRjU3MTQ0ODlGQzY3NzMzRTM4MzVCQUUz
MjYwODI1QzAeFw0yMzEwMjgxMjU1MDBaFw0yNDEwMjYxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTZCNjlGNUQ3ODU4REVDNzM1
NDc5MjMwM0QyRTgzRTc2RkE2RDRCRjg3RDQzOTU2RUI3RkU1NjFEMThDNUU1N0Ey
M0Q3RkE0RjAwRUQyQjFGNDFFMjkxQjY5QzIxQkMwMDM2QkE5MjcxMjNENDkxNzQx
Q0NCMDExODRGQzNCNjI1MTk1QjdBQkU5NTJCQjgwQUVFQ0E2RkQ3QTA1QjE0MEFC
ODkxQ0Q4MjdCNjgwRTg0REFEQ0Y2NDlGN0NEQTE2RTE1NUIxOTBBQ0FCMkI0RTlE
NTRBODQ0MDFBMkY2OEE3REZEMDNGMUY3Q0IyMjUwRkJGREZEMTEwRjA3REI1ODhD
OUFBNjQ1OEVEMjZDOTU0ODdEM0FDOTBCMUM5Q0NEMDUyMjNGQTNDQ0M3NjE1Qzg2
REE4QjJCQzFCNzU3MTMyRThDMjE4MzY2ODczQUE3MzI5MTczRUFBRUFBMUJCRkI4
NTMzRDJBNDQ5RTlGNDNFOEFGRDc0NjFEQkQyMzg5QzJFQkYzQ0M5RjQwMTc5QjI0
RDQ4M0RDMEE3MEIzNDM5NDY1MDlCQTI4N0M1Q0NENEYxRTZBRkE4MjE1NDQ0NDA1
NjI2MDcxQjFCQTEwM0NFMTQyQTNDMkZDN0JEREQ0MjI1NDE2MjQ1MUQ1MUFDOUU3
NzM2RTgwNEVFRkJEQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAprafXXhY3sc1R5IwPS6D52+m1L+H1DlW63/lYdGMXleiPX+k8A7S
sfQeKRtpwhvAA2upJxI9SRdBzLARhPw7YlGVt6vpUruAruym/XoFsUCriRzYJ7aA
6E2tz2SffNoW4VWxkKyrK06dVKhEAaL2in39A/H3yyJQ+/39EQ8H21iMmqZFjtJs
lUh9OskLHJzNBSI/o8zHYVyG2osrwbdXEy6MIYNmhzqnMpFz6q6qG7+4Uz0qRJ6f
Q+iv10YdvSOJwuvzzJ9AF5sk1IPcCnCzQ5RlCboofFzNTx5q+oIVREQFYmBxsboQ
POFCo8L8e93UIlQWJFHVGsnnc26ATu+9uQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FHoyTnNlSJy4HpxaDYuPmhb7B1kHMB8GA1UdIwQYMBaAFN8b9MivVxRIn8Z3M+OD
W64yYIJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5cTVQZDVTSG93bUV3
bXFkTjRpdkJKVFpCTHYxNHlhelJrV1JxNkJtelZlLzAvREYxQkY0QzhBRjU3MTQ0
ODlGQzY3NzMzRTM4MzVCQUUzMjYwODI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ERjFCRjRDOEFGNTcxNDQ4OUZDNjc3MzNFMzgzNUJBRTMyNjA4
MjVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXE1UGQ1U0hvd21Fd21xZE40
aXZCSlRaQkx2MTR5YXpSa1dScTZCbXpWZS8wLzMyMzAzMDJlMzUzMzJlMzczMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg1
RzANBgkqhkiG9w0BAQsFAAOCAQEAo7pm6QEbq4l9LoLHz396N199+DZTS8BGG29B
j3Xwq/UPSpnRpymgtV0g0QkMz+mSpRyQaO/pS2aD51SdMOMlY7m0jcTbDI+FYaqS
qhjP02F7mnRQVMZRzYSdE1ckpzOpJiDAMvAi7SIj9Irygaat/pOBjrkx1QRb9RPb
DNEZKS4XwMLctE5xyft9WccOshtBzVpEjQy+6T3QLx/ILCZEckojEquv9S5FInfU
uZ2/RM5lWcXgpl2lmfYJ0QxRHvAE8X6KL+Lf6PT3TM1lU4RwCsgS3CLERqPpiySJ
LrF9FRXOO63cJBlf0Xl6WRwgxxemQflnBO3FYWkQH73yzi/GLQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org