Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/3230302e35302e3231322e302f32332d3233203d3e20323730343530.roa
File:                     3230302e35302e3231322e302f32332d3233203d3e20323730343530.roa (raw, json)
Hash identifier:          PIWAIzs25QPM3VCjrnfft4utN/jxS6lx7En1odCmILE=
Subject key identifier:   31:A5:A1:40:9D:59:B3:1F:5D:F9:D4:B8:0C:08:DD:BD:49:29:0B:7C
Certificate issuer:       /CN=F841D9ED220521410FCC71327DC8CDC7BF9D8113
Certificate serial:       1815D28AEF03C8FFD12730B0F953168B1181DD97
Authority key identifier: F8:41:D9:ED:22:05:21:41:0F:CC:71:32:7D:C8:CD:C7:BF:9D:81:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F841D9ED220521410FCC71327DC8CDC7BF9D8113.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/3230302e35302e3231322e302f32332d3233203d3e20323730343530.roa
Signing time:             Sat 14 Aug 2021 12:00:00 +0000
ROA not before:           Sat 14 Aug 2021 11:55:00 +0000
ROA not after:            Sun 14 Aug 2022 12:00:00 +0000
asID:                     270450
IP address blocks:        200.50.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:15:d2:8a:ef:03:c8:ff:d1:27:30:b0:f9:53:16:8b:11:81:dd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F841D9ED220521410FCC71327DC8CDC7BF9D8113
        Validity
            Not Before: Aug 14 11:55:00 2021 GMT
            Not After : Aug 14 12:00:00 2022 GMT
        Subject: CN=3082010A0282010100BFE2C1806881F7241D786A948FD3B54ED46443BAE76EB022A20C9B958A978C4D879BCD8497756212CFC50F4C6DAD5FF4C86EA2398C2836118F9A4494355D2917AEFFB0D7ED688CD5F02871A3B3932220CEAD168A10463551332D0F6B3E7A4B0BFF188A9A724C50B87603A3ECE301EDCB88F0614F1FABAD63D9BAA3511621F4489A38E710616E195AD9ED83F97F5F04557E86600CB1DCE0D74DF2FA454AD82A68F18656A63963F651F6C2B75AAF97271F09B3DCAD8B1EAA69493E3FDA4AF30FEE5F35C4B0F3C524F76B5F0CB032B86E6BFBFA7789EFAD1CCF96A4D3F62B6F665502BFEB4A5B894C522A664E0A75A3A43BA46622E3D4DA1936E966DFE76E5108950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:c1:80:68:81:f7:24:1d:78:6a:94:8f:d3:
                    b5:4e:d4:64:43:ba:e7:6e:b0:22:a2:0c:9b:95:8a:
                    97:8c:4d:87:9b:cd:84:97:75:62:12:cf:c5:0f:4c:
                    6d:ad:5f:f4:c8:6e:a2:39:8c:28:36:11:8f:9a:44:
                    94:35:5d:29:17:ae:ff:b0:d7:ed:68:8c:d5:f0:28:
                    71:a3:b3:93:22:20:ce:ad:16:8a:10:46:35:51:33:
                    2d:0f:6b:3e:7a:4b:0b:ff:18:8a:9a:72:4c:50:b8:
                    76:03:a3:ec:e3:01:ed:cb:88:f0:61:4f:1f:ab:ad:
                    63:d9:ba:a3:51:16:21:f4:48:9a:38:e7:10:61:6e:
                    19:5a:d9:ed:83:f9:7f:5f:04:55:7e:86:60:0c:b1:
                    dc:e0:d7:4d:f2:fa:45:4a:d8:2a:68:f1:86:56:a6:
                    39:63:f6:51:f6:c2:b7:5a:af:97:27:1f:09:b3:dc:
                    ad:8b:1e:aa:69:49:3e:3f:da:4a:f3:0f:ee:5f:35:
                    c4:b0:f3:c5:24:f7:6b:5f:0c:b0:32:b8:6e:6b:fb:
                    fa:77:89:ef:ad:1c:cf:96:a4:d3:f6:2b:6f:66:55:
                    02:bf:eb:4a:5b:89:4c:52:2a:66:4e:0a:75:a3:a4:
                    3b:a4:66:22:e3:d4:da:19:36:e9:66:df:e7:6e:51:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A5:A1:40:9D:59:B3:1F:5D:F9:D4:B8:0C:08:DD:BD:49:29:0B:7C
            X509v3 Authority Key Identifier:
                keyid:F8:41:D9:ED:22:05:21:41:0F:CC:71:32:7D:C8:CD:C7:BF:9D:81:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/F841D9ED220521410FCC71327DC8CDC7BF9D8113.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F841D9ED220521410FCC71327DC8CDC7BF9D8113.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/3230302e35302e3231322e302f32332d3233203d3e20323730343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:8e:2f:2b:a1:d8:53:e4:54:74:fa:7c:ed:f9:ea:bb:37:
         9a:56:b2:25:34:70:f3:dd:c8:94:6b:06:a5:55:c6:9c:40:db:
         da:28:80:ca:d5:c1:fd:3c:01:6e:e1:3e:d0:12:8a:7a:8f:af:
         bc:df:32:d9:fb:82:40:85:35:b4:98:e4:2f:ba:28:3e:b3:f8:
         78:9e:cb:7d:9b:45:c4:a7:e3:e8:e0:f6:33:44:c4:49:9b:6b:
         69:8c:d2:85:ad:39:04:d8:51:a3:72:b5:c8:f9:4a:fa:b8:34:
         e0:32:90:0e:54:60:9d:10:53:c1:f5:17:80:1d:bb:6c:56:49:
         49:a0:0e:2e:8b:fe:97:bb:e3:4a:09:e1:45:00:43:1a:4f:14:
         9a:d9:b5:19:98:da:12:df:ab:ca:fe:22:dd:df:2e:dc:d8:91:
         f0:fd:93:f1:8d:8e:e1:1d:0b:63:03:35:2e:70:c4:c1:75:28:
         b1:4b:c4:e9:7b:a5:43:24:a2:8e:a4:de:08:5e:4a:43:74:94:
         17:d9:f3:30:1d:3a:af:df:e6:60:7f:1d:67:61:21:9b:a5:73:
         af:97:d0:ab:ba:5c:0c:b8:a2:4a:87:c1:50:4d:80:c0:9f:83:
         8b:aa:4a:bf:c5:b9:1c:cf:c4:7b:f4:9f:5a:37:9b:87:f8:15:
         63:32:26:b3
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUGBXSiu8DyP/RJzCw+VMWixGB3ZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg0MUQ5RUQyMjA1MjE0MTBGQ0M3MTMyN0RDOENEQzdC
RjlEODExMzAeFw0yMTA4MTQxMTU1MDBaFw0yMjA4MTQxMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkZFMkMxODA2ODgxRjcyNDFE
Nzg2QTk0OEZEM0I1NEVENDY0NDNCQUU3NkVCMDIyQTIwQzlCOTU4QTk3OEM0RDg3
OUJDRDg0OTc3NTYyMTJDRkM1MEY0QzZEQUQ1RkY0Qzg2RUEyMzk4QzI4MzYxMThG
OUE0NDk0MzU1RDI5MTdBRUZGQjBEN0VENjg4Q0Q1RjAyODcxQTNCMzkzMjIyMENF
QUQxNjhBMTA0NjM1NTEzMzJEMEY2QjNFN0E0QjBCRkYxODhBOUE3MjRDNTBCODc2
MDNBM0VDRTMwMUVEQ0I4OEYwNjE0RjFGQUJBRDYzRDlCQUEzNTExNjIxRjQ0ODlB
MzhFNzEwNjE2RTE5NUFEOUVEODNGOTdGNUYwNDU1N0U4NjYwMENCMURDRTBENzRE
RjJGQTQ1NEFEODJBNjhGMTg2NTZBNjM5NjNGNjUxRjZDMkI3NUFBRjk3MjcxRjA5
QjNEQ0FEOEIxRUFBNjk0OTNFM0ZEQTRBRjMwRkVFNUYzNUM0QjBGM0M1MjRGNzZC
NUYwQ0IwMzJCODZFNkJGQkZBNzc4OUVGQUQxQ0NGOTZBNEQzRjYyQjZGNjY1NTAy
QkZFQjRBNUI4OTRDNTIyQTY2NEUwQTc1QTNBNDNCQTQ2NjIyRTNENERBMTkzNkU5
NjZERkU3NkU1MTA4OTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv+LBgGiB9yQdeGqUj9O1TtRkQ7rnbrAiogyblYqXjE2Hm82El3Vi
Es/FD0xtrV/0yG6iOYwoNhGPmkSUNV0pF67/sNftaIzV8Chxo7OTIiDOrRaKEEY1
UTMtD2s+eksL/xiKmnJMULh2A6Ps4wHty4jwYU8fq61j2bqjURYh9EiaOOcQYW4Z
Wtntg/l/XwRVfoZgDLHc4NdN8vpFStgqaPGGVqY5Y/ZR9sK3Wq+XJx8Js9ytix6q
aUk+P9pK8w/uXzXEsPPFJPdrXwywMrhua/v6d4nvrRzPlqTT9itvZlUCv+tKW4lM
UipmTgp1o6Q7pGYi49TaGTbpZt/nblEIlQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDGloUCdWbMfXfnUuAwI3b1JKQt8MB8GA1UdIwQYMBaAFPhB2e0iBSFBD8xxMn3I
zce/nYETMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHUmJQUVJFczd4R05H
NlcyR2NoeFo2Q3BXRFEzN2JqZW5FU3J1Q1FLY0Q5LzAvRjg0MUQ5RUQyMjA1MjE0
MTBGQ0M3MTMyN0RDOENEQzdCRjlEODExMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GODQxRDlFRDIyMDUyMTQxMEZDQzcxMzI3REM4Q0RDN0JGOUQ4
MTEzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR1JiUFFSRXM3eEdORzZXMkdj
aHhaNkNwV0RRMzdiamVuRVNydUNRS2NEOS8wLzMyMzAzMDJlMzUzMDJlMzIzMTMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMwMzQzNTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
yDLUMA0GCSqGSIb3DQEBCwUAA4IBAQAy6Y4vK6HYU+RUdPp87fnquzeaVrIlNHDz
3ciUawalVcacQNvaKIDK1cH9PAFu4T7QEop6j6+83zLZ+4JAhTW0mOQvuig+s/h4
nst9m0XEp+Po4PYzRMRJm2tpjNKFrTkE2FGjcrXI+Ur6uDTgMpAOVGCdEFPB9ReA
HbtsVklJoA4ui/6Xu+NKCeFFAEMaTxSa2bUZmNoS36vK/iLd3y7c2JHw/ZPxjY7h
HQtjAzUucMTBdSixS8Tpe6VDJKKOpN4IXkpDdJQX2fMwHTqv3+Zgfx1nYSGbpXOv
l9CrulwMuKJKh8FQTYDAn4OLqkq/xbkcz8R79J9aN5uH+BVjMiaz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org