Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa
File:                     3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa (raw, json)
Hash identifier:          LtpQSrCNt1ZHzCebNqsYXso+CFXRRvNnAar1NRdyBYE=
Subject key identifier:   54:31:72:0B:C5:44:36:5C:9F:D8:0D:83:AA:F1:76:DC:5F:DF:BB:E8
Certificate issuer:       /CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
Certificate serial:       3CBD19CFA9ECDF20851F6067EF7C944CF71D118A
Authority key identifier: 65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa
Signing time:             Sun 25 Feb 2024 23:34:58 +0000
ROA not before:           Sun 25 Feb 2024 23:29:58 +0000
ROA not after:            Sun 23 Feb 2025 23:34:58 +0000
asID:                     22773
IP address blocks:        200.220.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bd:19:cf:a9:ec:df:20:85:1f:60:67:ef:7c:94:4c:f7:1d:11:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A09344BB82159BF3390F7713CC70EB58AE43DF
        Validity
            Not Before: Feb 25 23:29:58 2024 GMT
            Not After : Feb 23 23:34:58 2025 GMT
        Subject: CN=5431720BC544365C9FD80D83AAF176DC5FDFBBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:44:68:4c:8a:82:7a:9e:e7:a8:a7:26:4c:f2:
                    ca:45:72:2f:b0:c6:d2:a8:b0:e4:bc:1f:7f:76:a9:
                    c3:1a:67:a9:68:6c:6e:6b:0a:73:1a:cc:d1:95:25:
                    6e:db:03:cf:7a:a2:f0:9f:50:2e:3e:f5:6c:71:66:
                    16:a4:fb:70:16:fa:89:d1:32:f4:8d:34:62:8d:b3:
                    d7:9b:0e:5a:db:24:8c:a9:21:cd:57:bd:00:67:66:
                    21:2e:19:4b:50:d0:b2:49:9a:92:a3:a1:4a:74:0b:
                    ca:42:79:07:1c:c5:71:91:bb:94:7c:ee:2d:23:8a:
                    d9:c4:f2:11:8e:65:7c:6e:7f:d9:2c:18:33:22:e3:
                    93:46:4b:64:81:a6:1b:03:24:bc:4a:dd:c7:1f:d5:
                    ec:3a:30:96:6d:d1:c5:2c:c7:3a:75:7f:2f:f4:e4:
                    a2:9a:0d:7c:09:12:0a:6b:61:74:e4:1b:28:f5:2f:
                    41:c4:83:d6:14:b3:bb:83:d1:d4:1a:37:3a:ff:72:
                    ef:9f:25:82:61:fe:c1:0f:6c:d1:4e:7d:fb:17:17:
                    e0:46:a9:47:d3:f7:91:40:2a:f8:25:db:ae:b8:61:
                    b3:1f:4a:c9:f1:02:07:e6:89:34:64:40:68:cd:79:
                    6a:cc:71:ca:c3:c1:4d:cb:d7:ad:36:bb:fd:e7:54:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:72:0B:C5:44:36:5C:9F:D8:0D:83:AA:F1:76:DC:5F:DF:BB:E8
            X509v3 Authority Key Identifier:
                keyid:65:A0:93:44:BB:82:15:9B:F3:39:0F:77:13:CC:70:EB:58:AE:43:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A09344BB82159BF3390F7713CC70EB58AE43DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEH7UUpY7TRmEbYWtKdWSVne5gBzxfvNQLyF7WsuabaP/0/3230302e3232302e3137322e302f32322d3232203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:b7:66:9b:87:55:ef:fe:72:4d:e2:e8:e7:72:fb:04:14:
         01:f9:f5:5f:37:47:13:66:65:8e:f1:e6:6a:ab:89:a9:f4:ae:
         5c:1a:75:71:58:89:c5:65:c3:27:50:f5:33:e5:e4:a6:33:77:
         a0:39:c2:4b:18:21:a4:74:42:47:cc:f3:cb:b4:e5:0f:b4:9d:
         81:48:9c:25:76:0f:00:5d:bf:e5:fe:df:c2:c9:b3:7b:4f:88:
         55:b4:37:72:52:c3:44:32:97:32:ed:c1:eb:d9:ca:9e:e2:20:
         f3:1b:ff:f2:e8:14:b8:0b:c0:e7:8e:f7:46:d4:ca:2a:6a:02:
         26:86:1c:72:f8:54:59:39:e2:93:bf:17:8d:7f:c2:ac:3f:ef:
         e5:90:f8:00:e0:ea:78:4c:e7:b0:bb:90:c3:4a:db:2b:e4:e0:
         28:a9:07:36:9d:2c:ff:06:7a:53:b7:b1:94:a5:04:ae:7f:f3:
         a6:0f:65:e1:4b:ed:c9:72:71:fe:2c:20:a7:c6:27:6c:03:eb:
         8c:fd:e3:44:fc:70:76:ff:23:cb:df:b9:cb:1d:ed:59:bd:b8:
         01:a3:96:0b:c4:ff:2e:62:e1:5f:35:b7:26:1e:e9:ba:15:b0:
         f1:a3:e6:7d:35:ed:02:73:ec:dd:ae:4a:e0:20:6a:18:48:d1:
         0b:b9:f8:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPL0Zz6ns3yCFH2Bn73yUTPcdEYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVBMDkzNDRCQjgyMTU5QkYzMzkwRjc3MTNDQzcwRUI1
OEFFNDNERjAeFw0yNDAyMjUyMzI5NThaFw0yNTAyMjMyMzM0NThaMDMxMTAvBgNV
BAMTKDU0MzE3MjBCQzU0NDM2NUM5RkQ4MEQ4M0FBRjE3NkRDNUZERkJCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzRGhMioJ6nueopyZM8spFci+w
xtKosOS8H392qcMaZ6lobG5rCnMazNGVJW7bA896ovCfUC4+9WxxZhak+3AW+onR
MvSNNGKNs9ebDlrbJIypIc1XvQBnZiEuGUtQ0LJJmpKjoUp0C8pCeQccxXGRu5R8
7i0jitnE8hGOZXxuf9ksGDMi45NGS2SBphsDJLxK3ccf1ew6MJZt0cUsxzp1fy/0
5KKaDXwJEgprYXTkGyj1L0HEg9YUs7uD0dQaNzr/cu+fJYJh/sEPbNFOffsXF+BG
qUfT95FAKvgl2664YbMfSsnxAgfmiTRkQGjNeWrMccrDwU3L1602u/3nVNdrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVDFyC8VENlyf2A2DqvF23F/fu+gwHwYDVR0j
BBgwFoAUZaCTRLuCFZvzOQ93E8xw61iuQ98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VIN1VVcFk3VFJtRWJZV3RLZFdTVm5lNWdCenhmdk5RTHlGN1dzdWFi
YVAvMC82NUEwOTM0NEJCODIxNTlCRjMzOTBGNzcxM0NDNzBFQjU4QUU0M0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1QTA5MzQ0QkI4MjE1OUJG
MzM5MEY3NzEzQ0M3MEVCNThBRTQzREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFSDdVVXBZN1RSbUViWVd0S2RXU1ZuZTVnQnp4ZnZOUUx5RjdXc3VhYmFQLzAv
MzIzMDMwMmUzMjMyMzAyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI3KwwDQYJKoZIhvcNAQELBQADggEBADpCt2ab
h1Xv/nJN4ujncvsEFAH59V83RxNmZY7x5mqrian0rlwadXFYicVlwydQ9TPl5KYz
d6A5wksYIaR0QkfM88u05Q+0nYFInCV2DwBdv+X+38LJs3tPiFW0N3JSw0QylzLt
wevZyp7iIPMb//LoFLgLwOeO90bUyipqAiaGHHL4VFk54pO/F41/wqw/7+WQ+ADg
6nhM57C7kMNK2yvk4CipBzadLP8GelO3sZSlBK5/86YPZeFL7clycf4sIKfGJ2wD
64z940T8cHb/I8vfucsd7Vm9uAGjlgvE/y5i4V81tyYe6boVsPGj5n017QJz7N2u
SuAgahhI0Qu5+F4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org