Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa
File:                     3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa (raw, json)
Hash identifier:          0J0aRzH2WxN8JTnoLRgONnUe8lXI0SydyMZdClYRerw=
Subject key identifier:   46:08:6A:69:B6:59:08:9F:C6:45:60:02:7B:CF:0B:A0:B7:09:11:E3
Certificate issuer:       /CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Certificate serial:       59D081DF77F2A21064AB65AACAD18266280E3F1F
Authority key identifier: 65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa
Signing time:             Sun 25 Feb 2024 23:34:58 +0000
ROA not before:           Sun 25 Feb 2024 23:29:58 +0000
ROA not after:            Sun 23 Feb 2025 23:34:58 +0000
asID:                     22773
IP address blocks:        200.220.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d0:81:df:77:f2:a2:10:64:ab:65:aa:ca:d1:82:66:28:0e:3f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
        Validity
            Not Before: Feb 25 23:29:58 2024 GMT
            Not After : Feb 23 23:34:58 2025 GMT
        Subject: CN=46086A69B659089FC64560027BCF0BA0B70911E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:59:f7:2a:cc:ce:d4:92:28:9a:53:7c:ea:
                    5e:6d:2c:4b:72:4a:f8:eb:5b:52:05:c1:86:06:72:
                    01:9d:10:73:16:31:ec:f1:0b:44:f3:2c:a9:54:89:
                    88:26:5b:47:cd:97:06:fa:06:4f:27:88:cc:b1:23:
                    1f:ea:ed:02:75:6f:22:d6:2f:62:f4:1c:34:70:04:
                    73:1a:0a:c8:74:80:19:87:96:7b:04:34:a2:58:76:
                    dd:ac:1d:0f:9c:ec:61:f0:ea:4f:cd:34:4f:74:27:
                    38:68:33:57:37:07:1f:4d:3b:7b:af:3b:e2:98:7c:
                    cf:fe:3a:da:45:c0:e6:50:7d:10:47:ef:93:e7:9d:
                    37:40:ff:79:79:7b:41:e3:96:64:3e:98:77:9b:3d:
                    bc:d2:e1:da:78:fc:65:5d:24:75:23:cb:99:f1:57:
                    89:b5:e7:15:70:b5:95:f7:57:1b:f4:f7:fe:37:f7:
                    46:b2:17:84:15:4c:1a:8b:03:ee:5a:42:13:d0:5a:
                    a8:25:bc:bb:95:2c:8a:3e:d5:fe:e1:b7:08:8d:de:
                    c8:3c:d8:11:76:1b:28:9b:03:22:30:74:f0:bf:36:
                    e0:a3:0e:71:8c:36:30:58:1d:8a:9f:b5:99:a9:e6:
                    5c:96:c3:28:52:2f:4b:ae:05:a2:76:5f:f4:5e:1b:
                    d4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:08:6A:69:B6:59:08:9F:C6:45:60:02:7B:CF:0B:A0:B7:09:11:E3
            X509v3 Authority Key Identifier:
                keyid:65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:62:f2:17:97:6e:b2:ea:a1:58:d8:2a:36:35:7c:e7:4e:ca:
         43:c2:cf:96:f6:ef:19:cb:bd:1e:99:67:8e:3e:28:95:e1:b5:
         9c:88:cc:d0:6e:53:fd:99:92:00:12:29:9e:26:16:c6:00:55:
         31:d1:f9:cd:5b:8b:e7:8d:73:cb:f0:f5:96:e0:9a:0e:36:d0:
         9a:76:3d:9a:a5:24:54:ca:b8:0a:c3:91:2b:2c:65:5f:b5:71:
         be:de:ed:c6:27:2a:ef:93:88:e5:82:57:1c:66:6d:8b:91:fe:
         79:f6:70:39:59:80:9d:9b:4d:76:cf:cf:52:d2:93:66:26:39:
         2f:00:ce:b4:0f:d8:08:f1:06:82:2e:97:23:c8:a0:e9:56:e6:
         fc:d8:d5:e3:3c:bf:7a:77:2d:e5:a5:a4:ce:c2:4d:e6:c8:5e:
         4c:f9:94:a6:54:7f:9f:df:7f:96:67:bc:c5:fb:52:9f:27:45:
         7a:b7:a4:ac:e9:72:d9:0c:05:dd:8f:a3:20:a6:68:d3:c8:f9:
         f8:ae:ff:f9:21:5a:b8:12:9d:57:ab:5e:d9:f7:d8:39:46:52:
         d6:97:ff:d1:de:ff:47:15:97:7b:59:df:10:6b:a2:9c:5f:e6:
         9c:7c:0d:a3:12:ba:f9:43:d2:da:39:d9:d9:88:ae:78:00:01:
         26:6e:c9:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWdCB33fyohBkq2WqytGCZigOPx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVBMDkzNDRCQjgyMTU5QkYzMzkwRjc3MTNDQzcwRUI1
OEFFNDNERjAeFw0yNDAyMjUyMzI5NThaFw0yNTAyMjMyMzM0NThaMDMxMTAvBgNV
BAMTKDQ2MDg2QTY5QjY1OTA4OUZDNjQ1NjAwMjdCQ0YwQkEwQjcwOTExRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBln3KszO1JIomlN86l5tLEty
SvjrW1IFwYYGcgGdEHMWMezxC0TzLKlUiYgmW0fNlwb6Bk8niMyxIx/q7QJ1byLW
L2L0HDRwBHMaCsh0gBmHlnsENKJYdt2sHQ+c7GHw6k/NNE90JzhoM1c3Bx9NO3uv
O+KYfM/+OtpFwOZQfRBH75PnnTdA/3l5e0HjlmQ+mHebPbzS4dp4/GVdJHUjy5nx
V4m15xVwtZX3Vxv09/4390ayF4QVTBqLA+5aQhPQWqglvLuVLIo+1f7htwiN3sg8
2BF2GyibAyIwdPC/NuCjDnGMNjBYHYqftZmp5lyWwyhSL0uuBaJ2X/ReG9TvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURghqabZZCJ/GRWACe88LoLcJEeMwHwYDVR0j
BBgwFoAUZaCTRLuCFZvzOQ93E8xw61iuQ98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMC82NUEwOTM0NEJCODIxNTlCRjMzOTBGNzcxM0NDNzBFQjU4QUU0M0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1QTA5MzQ0QkI4MjE1OUJG
MzM5MEY3NzEzQ0M3MEVCNThBRTQzREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzAv
MzIzMDMwMmUzMjMyMzAyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI3KAwDQYJKoZIhvcNAQELBQADggEBAJhi8heX
brLqoVjYKjY1fOdOykPCz5b27xnLvR6ZZ44+KJXhtZyIzNBuU/2ZkgASKZ4mFsYA
VTHR+c1bi+eNc8vw9Zbgmg420Jp2PZqlJFTKuArDkSssZV+1cb7e7cYnKu+TiOWC
VxxmbYuR/nn2cDlZgJ2bTXbPz1LSk2YmOS8AzrQP2AjxBoIulyPIoOlW5vzY1eM8
v3p3LeWlpM7CTebIXkz5lKZUf5/ff5ZnvMX7Up8nRXq3pKzpctkMBd2PoyCmaNPI
+fiu//khWrgSnVerXtn32DlGUtaX/9He/0cVl3tZ3xBropxf5px8DaMSuvlD0to5
2dmIrngAASZuyWo=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:30 2024 by rpki-client on console-ams.rpki-client.org