Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e2033353631.roa
File:                     3230302e3232302e3136302e302f32322d3232203d3e2033353631.roa (raw, json)
Hash identifier:          k5i5ll59JNw3T3ao79J4WJsCgdHG2A4FMfJpE1uIAYc=
Subject key identifier:   E4:A9:09:34:9E:80:CE:9B:2B:7E:4C:7E:99:88:87:A2:F2:20:20:0B
Certificate issuer:       /CN=09DB4A19059937507E1D222CDD031D6B802062DC
Certificate serial:       11D83795F08FB9B70E9A02D888578BA27352AD23
Authority key identifier: 09:DB:4A:19:05:99:37:50:7E:1D:22:2C:DD:03:1D:6B:80:20:62:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09DB4A19059937507E1D222CDD031D6B802062DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e2033353631.roa
Signing time:             Fri 15 Apr 2022 09:12:42 +0000
ROA not before:           Fri 15 Apr 2022 09:07:42 +0000
ROA not after:            Fri 14 Apr 2023 09:12:42 +0000
asID:                     3561
IP address blocks:        200.220.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d8:37:95:f0:8f:b9:b7:0e:9a:02:d8:88:57:8b:a2:73:52:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09DB4A19059937507E1D222CDD031D6B802062DC
        Validity
            Not Before: Apr 15 09:07:42 2022 GMT
            Not After : Apr 14 09:12:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4e:ea:e7:b3:e4:20:58:fe:fe:a2:21:92:59:
                    76:08:61:8e:a6:e2:db:73:af:59:15:e6:98:20:df:
                    07:7c:8f:f8:4e:b5:02:39:05:b7:37:cb:e4:11:80:
                    d5:9c:19:df:08:af:99:d4:25:aa:58:b5:a4:17:9d:
                    72:d1:bf:a3:b2:59:cf:80:f6:b0:37:8e:d6:19:cf:
                    57:f3:a8:1d:45:3f:fe:27:9e:6a:8e:27:15:81:53:
                    52:6b:53:14:17:27:4b:7b:fb:1a:50:8e:a8:63:0e:
                    78:08:7e:2f:b3:8f:c3:e8:45:3e:63:6e:58:2a:a0:
                    cc:bd:33:b5:f9:f7:0b:17:4a:73:92:df:14:a6:42:
                    d1:19:dc:f3:60:ce:06:c9:78:98:70:19:56:64:26:
                    b5:4e:93:30:3f:d3:d4:ce:05:be:1e:6f:5b:55:cf:
                    e9:6a:9a:c7:0d:ae:ab:90:8c:e7:e2:60:12:d0:b9:
                    25:c4:99:38:46:59:4e:28:84:1a:a0:97:35:e6:ed:
                    a4:2d:5a:34:cc:2e:16:71:53:0a:9c:37:75:c7:e6:
                    21:41:23:90:02:0f:08:52:c5:48:25:b2:9f:7a:3b:
                    c6:7d:d1:8e:77:2f:42:28:20:94:4c:1a:15:a7:05:
                    b7:76:42:d3:3c:d1:a7:cf:13:70:69:e4:89:3b:be:
                    2d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A9:09:34:9E:80:CE:9B:2B:7E:4C:7E:99:88:87:A2:F2:20:20:0B
            X509v3 Authority Key Identifier:
                keyid:09:DB:4A:19:05:99:37:50:7E:1D:22:2C:DD:03:1D:6B:80:20:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/09DB4A19059937507E1D222CDD031D6B802062DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09DB4A19059937507E1D222CDD031D6B802062DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3136302e302f32322d3232203d3e2033353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:2d:16:b6:cc:8a:95:97:38:dd:b4:69:99:d8:14:6e:42:1c:
         fd:62:3b:64:01:67:5f:0f:c7:54:58:6a:45:3d:9f:7c:3e:ad:
         c9:ac:a3:78:27:87:eb:42:b6:1f:ba:fb:90:4e:94:d4:bd:79:
         71:a7:53:09:78:60:de:fb:d4:bd:f7:d5:66:72:50:99:01:aa:
         69:0e:98:8e:1a:ca:11:f5:37:02:c7:30:91:6c:7b:0e:6e:6e:
         97:60:47:0d:aa:34:e2:b3:81:45:e0:f4:64:cc:5c:63:36:27:
         8b:97:98:0d:a1:60:99:51:e4:07:a6:e3:69:26:52:42:89:04:
         22:de:0d:6a:9a:3c:ba:6a:14:19:ae:a5:00:3f:4e:3d:fa:95:
         46:b9:6d:62:07:d6:03:2a:53:af:95:20:bf:bf:2d:22:2c:ae:
         24:bc:97:a3:69:29:14:41:1a:6b:c4:c4:d2:3a:91:75:da:d8:
         40:ee:c5:3d:7d:ba:d7:f6:90:ba:fc:d7:eb:8e:c5:63:0a:3b:
         44:34:7c:be:3f:0d:8e:78:58:fe:45:24:0b:bf:2e:59:ba:20:
         9c:44:fe:17:fc:5d:7c:ff:04:88:7d:a9:08:f1:56:1e:3c:b1:
         7c:aa:5b:19:bf:a3:2d:95:36:00:d8:aa:3e:b4:75:e7:de:cb:
         8c:00:6a:e3
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUEdg3lfCPubcOmgLYiFeLonNSrSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlEQjRBMTkwNTk5Mzc1MDdFMUQyMjJDREQwMzFENkI4
MDIwNjJEQzAeFw0yMjA0MTUwOTA3NDJaFw0yMzA0MTQwOTEyNDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjA0RUVBRTdCM0U0MjA1OEZF
RkVBMjIxOTI1OTc2MDg2MThFQTZFMkRCNzNBRjU5MTVFNjk4MjBERjA3N0M4RkY4
NEVCNTAyMzkwNUI3MzdDQkU0MTE4MEQ1OUMxOURGMDhBRjk5RDQyNUFBNThCNUE0
MTc5RDcyRDFCRkEzQjI1OUNGODBGNkIwMzc4RUQ2MTlDRjU3RjNBODFENDUzRkZF
Mjc5RTZBOEUyNzE1ODE1MzUyNkI1MzE0MTcyNzRCN0JGQjFBNTA4RUE4NjMwRTc4
MDg3RTJGQjM4RkMzRTg0NTNFNjM2RTU4MkFBMENDQkQzM0I1RjlGNzBCMTc0QTcz
OTJERjE0QTY0MkQxMTlEQ0YzNjBDRTA2Qzk3ODk4NzAxOTU2NjQyNkI1NEU5MzMw
M0ZEM0Q0Q0UwNUJFMUU2RjVCNTVDRkU5NkE5QUM3MERBRUFCOTA4Q0U3RTI2MDEy
RDBCOTI1QzQ5OTM4NDY1OTRFMjg4NDFBQTA5NzM1RTZFREE0MkQ1QTM0Q0MyRTE2
NzE1MzBBOUMzNzc1QzdFNjIxNDEyMzkwMDIwRjA4NTJDNTQ4MjVCMjlGN0EzQkM2
N0REMThFNzcyRjQyMjgyMDk0NEMxQTE1QTcwNUI3NzY0MkQzM0NEMUE3Q0YxMzcw
NjlFNDg5M0JCRTJEQTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8E7q57PkIFj+/qIhkll2CGGOpuLbc69ZFeaYIN8HfI/4TrUCOQW3
N8vkEYDVnBnfCK+Z1CWqWLWkF51y0b+jslnPgPawN47WGc9X86gdRT/+J55qjicV
gVNSa1MUFydLe/saUI6oYw54CH4vs4/D6EU+Y25YKqDMvTO1+fcLF0pzkt8UpkLR
GdzzYM4GyXiYcBlWZCa1TpMwP9PUzgW+Hm9bVc/paprHDa6rkIzn4mAS0LklxJk4
RllOKIQaoJc15u2kLVo0zC4WcVMKnDd1x+YhQSOQAg8IUsVIJbKfejvGfdGOdy9C
KCCUTBoVpwW3dkLTPNGnzxNwaeSJO74tpwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FOSpCTSegM6bK35MfpmIh6LyICALMB8GA1UdIwQYMBaAFAnbShkFmTdQfh0iLN0D
HWuAIGLcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dFSDdVVXBZN1RSbUVi
WVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzAvMDlEQjRBMTkwNTk5Mzc1
MDdFMUQyMjJDREQwMzFENkI4MDIwNjJEQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wOURCNEExOTA1OTkzNzUwN0UxRDIyMkNERDAzMUQ2QjgwMjA2
MkRDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HRUg3VVVwWTdUUm1FYllXdEtk
V1NWbmU1Z0J6eGZ2TlFMeUY3V3N1YWJhUC8wLzMyMzAzMDJlMzIzMjMwMmUzMTM2
MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMzM1MzYzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsjc
oDANBgkqhkiG9w0BAQsFAAOCAQEAgS0WtsyKlZc43bRpmdgUbkIc/WI7ZAFnXw/H
VFhqRT2ffD6tyayjeCeH60K2H7r7kE6U1L15cadTCXhg3vvUvffVZnJQmQGqaQ6Y
jhrKEfU3AscwkWx7Dm5ul2BHDao04rOBReD0ZMxcYzYni5eYDaFgmVHkB6bjaSZS
QokEIt4Napo8umoUGa6lAD9OPfqVRrltYgfWAypTr5Ugv78tIiyuJLyXo2kpFEEa
a8TE0jqRddrYQO7FPX261/aQuvzX647FYwo7RDR8vj8NjnhY/kUkC78uWbognET+
F/xdfP8EiH2pCPFWHjyxfKpbGb+jLZU2ANiqPrR1597LjABq4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org