Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/1/3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa
File:                     3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa (raw, json)
Hash identifier:          xq/IjIxLhuse2KqZLdpnVZLAph6GWaXK5yK/fJrOwgM=
Subject key identifier:   DB:85:95:A5:0F:E2:A6:99:3D:79:DC:8D:0F:2D:72:43:76:07:36:70
Certificate issuer:       /CN=4F8E807032C5AC917F3BCFA40A13C40101DD149F
Certificate serial:       61B384171C39C922AE6716278C0BBDFCC7361288
Authority key identifier: 4F:8E:80:70:32:C5:AC:91:7F:3B:CF:A4:0A:13:C4:01:01:DD:14:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F8E807032C5AC917F3BCFA40A13C40101DD149F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/1/3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa
Signing time:             Mon 06 Feb 2023 13:19:44 +0000
ROA not before:           Mon 06 Feb 2023 13:14:44 +0000
ROA not after:            Mon 05 Feb 2024 13:19:44 +0000
asID:                     270758
IP address blocks:        200.39.144.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b3:84:17:1c:39:c9:22:ae:67:16:27:8c:0b:bd:fc:c7:36:12:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F8E807032C5AC917F3BCFA40A13C40101DD149F
        Validity
            Not Before: Feb  6 13:14:44 2023 GMT
            Not After : Feb  5 13:19:44 2024 GMT
        Subject: CN=DB8595A50FE2A6993D79DC8D0F2D724376073670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:a4:3f:e0:fa:85:ca:96:dd:f2:2f:0b:90:
                    4c:b5:bd:70:c3:4b:6d:f9:e7:c4:64:7f:96:fd:e2:
                    e3:84:96:45:f0:98:16:5c:b9:98:49:a2:48:d9:02:
                    32:dc:c2:5b:7a:bf:ba:ec:d6:cf:a3:f1:fc:0f:4f:
                    12:80:20:db:c5:83:ce:14:f7:b7:dd:c2:44:15:ce:
                    f1:e0:5c:42:c7:72:49:74:e9:0f:90:d6:a2:34:01:
                    b5:9f:8c:27:74:1d:1d:7b:f2:74:4b:1d:aa:05:09:
                    fd:01:a2:3f:38:54:b1:c1:97:4d:9a:42:b2:9c:0e:
                    77:ce:16:1a:c4:a4:e1:d2:6b:68:2b:73:cd:02:7e:
                    01:aa:e2:58:62:4e:90:8b:3f:f0:1b:d1:a4:04:ba:
                    52:be:32:24:d3:bf:8d:51:1b:df:f6:36:41:9a:85:
                    2a:48:bc:7c:f9:59:30:8a:06:22:03:80:9e:b4:91:
                    b2:ee:c7:8e:a7:8e:91:14:7b:74:fb:0d:16:e7:3c:
                    ac:5b:c0:8e:0e:06:c0:12:ef:24:cd:d2:97:64:7e:
                    7a:76:ae:29:8c:5f:bc:51:d9:5d:ba:06:c7:96:9b:
                    d2:13:76:82:56:23:40:1a:c0:3f:b9:49:62:8e:d7:
                    59:d4:59:41:34:52:56:e9:8f:84:30:27:6b:22:0a:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:85:95:A5:0F:E2:A6:99:3D:79:DC:8D:0F:2D:72:43:76:07:36:70
            X509v3 Authority Key Identifier:
                keyid:4F:8E:80:70:32:C5:AC:91:7F:3B:CF:A4:0A:13:C4:01:01:DD:14:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/1/4F8E807032C5AC917F3BCFA40A13C40101DD149F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F8E807032C5AC917F3BCFA40A13C40101DD149F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/1/3230302e33392e3134342e302f32322d3332203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:d4:48:76:bc:3c:6a:cd:0f:dd:f2:cf:f1:02:5f:96:c2:45:
         fd:fc:92:06:6e:b4:6f:61:ed:04:fe:06:3e:c9:45:8a:10:d2:
         a8:75:78:0b:2c:a6:00:0b:8d:fe:6b:1c:36:aa:d5:19:d1:77:
         44:dc:ff:f4:00:c0:d5:96:a1:e3:63:f0:7a:7d:07:bb:4d:e7:
         51:e2:13:46:c1:26:c7:da:7a:75:7e:ac:c5:4f:c7:e7:54:8d:
         72:e3:fb:e9:a9:47:5f:c6:8c:0b:20:4e:69:29:e4:a6:53:61:
         78:42:6f:ff:a3:aa:fb:7e:7e:08:4b:04:2a:78:78:30:37:15:
         5a:f3:95:d4:ff:82:71:c0:d5:32:3c:ec:40:d4:b4:f1:ab:a4:
         e5:c0:ee:3a:f8:ab:38:99:46:85:13:8a:43:79:b3:65:4c:f1:
         a8:0e:1a:dc:19:7a:6f:ea:ed:db:59:85:30:0e:24:7e:f1:36:
         15:5f:b8:0e:d7:9a:dd:f1:45:33:d1:83:f0:91:c8:74:39:fe:
         ad:50:03:65:cc:15:56:a3:6c:7a:64:32:d1:47:e5:db:09:4c:
         df:58:6f:85:7f:47:ab:36:10:80:d2:ea:2f:15:f9:37:da:84:
         34:83:57:57:60:ae:17:0b:7f:cd:60:4d:3e:ad:42:36:43:19:
         60:5c:f8:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYbOEFxw5ySKuZxYnjAu9/Mc2EogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY4RTgwNzAzMkM1QUM5MTdGM0JDRkE0MEExM0M0MDEw
MUREMTQ5RjAeFw0yMzAyMDYxMzE0NDRaFw0yNDAyMDUxMzE5NDRaMDMxMTAvBgNV
BAMTKERCODU5NUE1MEZFMkE2OTkzRDc5REM4RDBGMkQ3MjQzNzYwNzM2NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rqQ/4PqFypbd8i8LkEy1vXDD
S23558Rkf5b94uOElkXwmBZcuZhJokjZAjLcwlt6v7rs1s+j8fwPTxKAINvFg84U
97fdwkQVzvHgXELHckl06Q+Q1qI0AbWfjCd0HR178nRLHaoFCf0Boj84VLHBl02a
QrKcDnfOFhrEpOHSa2grc80CfgGq4lhiTpCLP/Ab0aQEulK+MiTTv41RG9/2NkGa
hSpIvHz5WTCKBiIDgJ60kbLux46njpEUe3T7DRbnPKxbwI4OBsAS7yTN0pdkfnp2
rimMX7xR2V26BseWm9ITdoJWI0AawD+5SWKO11nUWUE0Ulbpj4QwJ2siCpiZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU24WVpQ/ippk9edyNDy1yQ3YHNnAwHwYDVR0j
BBgwFoAUT46AcDLFrJF/O8+kChPEAQHdFJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0V4WnFiZzRzNWtucnNjNlZLS3piaGFmS1pEMWhlUkR1S2VmeGFqa3E0
cEUvMS80RjhFODA3MDMyQzVBQzkxN0YzQkNGQTQwQTEzQzQwMTAxREQxNDlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRGOEU4MDcwMzJDNUFDOTE3
RjNCQ0ZBNDBBMTNDNDAxMDFERDE0OUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFeFpxYmc0czVrbnJzYzZWS0t6YmhhZktaRDFoZVJEdUtlZnhhamtxNHBFLzEv
MzIzMDMwMmUzMzM5MmUzMTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIJ5AwDQYJKoZIhvcNAQELBQADggEBAGXUSHa8
PGrND93yz/ECX5bCRf38kgZutG9h7QT+Bj7JRYoQ0qh1eAsspgALjf5rHDaq1RnR
d0Tc//QAwNWWoeNj8Hp9B7tN51HiE0bBJsfaenV+rMVPx+dUjXLj++mpR1/GjAsg
Tmkp5KZTYXhCb/+jqvt+fghLBCp4eDA3FVrzldT/gnHA1TI87EDUtPGrpOXA7jr4
qziZRoUTikN5s2VM8agOGtwZem/q7dtZhTAOJH7xNhVfuA7Xmt3xRTPRg/CRyHQ5
/q1QA2XMFVajbHpkMtFH5dsJTN9Yb4V/R6s2EIDS6i8V+TfahDSDV1dgrhcLf81g
TT6tQjZDGWBc+HI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org