Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/3230302e31332e38352e302f32342d3234203d3e20323730343430.roa
File:                     3230302e31332e38352e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier:          BeWSRnSUSO2oU4Gq0mibEYx/RDnuV+Qnimp+WgKn1wA=
Subject key identifier:   BC:B4:0B:2E:89:FD:E4:F1:E5:7E:50:55:81:E9:FE:42:0A:46:06:3E
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       1D6FEA4F73A0C3A3D4FBDAA11EE0257F070E4335
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/3230302e31332e38352e302f32342d3234203d3e20323730343430.roa
Signing time:             Tue 23 Apr 2024 13:29:26 +0000
ROA not before:           Tue 23 Apr 2024 13:24:26 +0000
ROA not after:            Tue 22 Apr 2025 13:29:26 +0000
asID:                     270440
IP address blocks:        200.13.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6f:ea:4f:73:a0:c3:a3:d4:fb:da:a1:1e:e0:25:7f:07:0e:43:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 23 13:24:26 2024 GMT
            Not After : Apr 22 13:29:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:12:1e:06:6b:fa:e1:38:e9:3f:97:1e:8f:
                    73:9d:75:21:cc:3c:b1:8e:b6:92:fe:9b:cc:ea:00:
                    ec:86:c4:41:fe:5b:ad:65:86:de:42:23:72:d2:69:
                    c1:61:f2:c6:75:a3:fd:cd:1f:0f:00:c4:80:de:1a:
                    dc:49:34:26:0a:bc:af:a2:a8:ea:38:6f:55:40:1c:
                    a2:13:f8:d6:1e:49:08:2c:a9:de:60:62:d9:ba:c5:
                    17:33:48:4f:63:df:e0:84:81:79:77:f5:5e:c6:2e:
                    ee:52:e7:a5:72:25:01:72:52:1b:a1:92:3b:57:aa:
                    7a:64:38:35:dd:9b:24:9d:cf:b1:d6:92:ba:94:2d:
                    66:39:bd:a1:b9:13:61:85:52:1c:70:ed:36:04:29:
                    8a:4e:2a:87:fd:f1:94:0f:9a:9c:97:bc:ae:50:c0:
                    34:cc:0c:93:de:2f:3b:c1:5a:09:fd:95:ac:36:64:
                    7f:08:48:d4:81:7e:6b:1f:b5:9c:ae:7e:67:d7:bd:
                    5a:74:bb:e4:15:9c:1b:10:85:f9:20:ae:44:65:dd:
                    be:08:04:17:90:a0:be:e7:f6:dd:fb:27:ac:46:31:
                    87:4f:24:02:d6:2f:77:ca:de:3e:2a:20:ce:73:94:
                    87:36:3e:d2:94:e8:9b:95:8f:6a:d7:ed:07:54:26:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B4:0B:2E:89:FD:E4:F1:E5:7E:50:55:81:E9:FE:42:0A:46:06:3E
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/3230302e31332e38352e302f32342d3234203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:67:54:00:1e:cd:be:25:8d:7c:fe:e3:7c:ee:39:c8:3e:
         7d:97:38:2f:dd:5e:17:b2:84:15:3e:fc:d4:e0:a1:05:12:b0:
         13:d3:56:f9:5d:cf:1a:e0:91:a5:85:34:63:04:d4:7a:f7:e5:
         2f:50:cc:9e:d8:fc:01:05:b4:ed:82:35:99:fb:f4:59:9a:af:
         a0:5a:a9:7a:2c:88:a4:b7:af:40:8e:da:6f:7e:e8:ec:7e:82:
         35:38:2a:5b:bb:37:39:75:bd:e0:5e:f8:50:c3:90:96:6c:c4:
         57:72:38:f5:a2:cf:2f:a9:e7:53:80:d8:f8:b2:4e:64:83:eb:
         9b:0f:b5:0b:68:3b:54:69:cd:21:c1:01:72:dc:27:5e:25:c0:
         11:62:3b:2f:23:db:b8:28:18:cd:fc:84:f4:ab:a2:e3:91:83:
         aa:98:37:cf:98:47:93:09:99:f4:65:fa:53:78:16:b0:74:92:
         91:30:89:c8:7e:57:2b:c2:29:b4:c3:e3:ea:a2:36:55:87:02:
         bb:e0:74:75:a8:73:cd:99:99:7b:17:a7:65:72:a4:7b:db:5b:
         16:19:87:7e:e4:79:eb:a0:ee:ba:97:d2:6e:a5:72:e7:51:d6:
         fc:7b:92:a1:d0:c6:27:14:d9:af:5b:be:43:d2:9f:7a:90:36:
         71:0a:c1:fd
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUHW/qT3Ogw6PU+9qhHuAlfwcOQzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3MkE5RjQ2Q0Y1NzlCRDlGNUE1RUFFQUUyOUNENEQ4
NjZFMjdDNDAeFw0yNDA0MjMxMzI0MjZaFw0yNTA0MjIxMzI5MjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjI4MzEyMUUwNjZCRkFFMTM4
RTkzRjk3MUU4RjczOUQ3NTIxQ0MzQ0IxOEVCNjkyRkU5QkNDRUEwMEVDODZDNDQx
RkU1QkFENjU4NkRFNDIyMzcyRDI2OUMxNjFGMkM2NzVBM0ZEQ0QxRjBGMDBDNDgw
REUxQURDNDkzNDI2MEFCQ0FGQTJBOEVBMzg2RjU1NDAxQ0EyMTNGOEQ2MUU0OTA4
MkNBOURFNjA2MkQ5QkFDNTE3MzM0ODRGNjNERkUwODQ4MTc5NzdGNTVFQzYyRUVF
NTJFN0E1NzIyNTAxNzI1MjFCQTE5MjNCNTdBQTdBNjQzODM1REQ5QjI0OURDRkIx
RDY5MkJBOTQyRDY2MzlCREExQjkxMzYxODU1MjFDNzBFRDM2MDQyOThBNEUyQTg3
RkRGMTk0MEY5QTlDOTdCQ0FFNTBDMDM0Q0MwQzkzREUyRjNCQzE1QTA5RkQ5NUFD
MzY2NDdGMDg0OEQ0ODE3RTZCMUZCNTlDQUU3RTY3RDdCRDVBNzRCQkU0MTU5QzFC
MTA4NUY5MjBBRTQ0NjVEREJFMDgwNDE3OTBBMEJFRTdGNkRERkIyN0FDNDYzMTg3
NEYyNDAyRDYyRjc3Q0FERTNFMkEyMENFNzM5NDg3MzYzRUQyOTRFODlCOTU4RjZB
RDdFRDA3NTQyNkM3OEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsoMSHgZr+uE46T+XHo9znXUhzDyxjraS/pvM6gDshsRB/lutZYbe
QiNy0mnBYfLGdaP9zR8PAMSA3hrcSTQmCryvoqjqOG9VQByiE/jWHkkILKneYGLZ
usUXM0hPY9/ghIF5d/Vexi7uUuelciUBclIboZI7V6p6ZDg13Zsknc+x1pK6lC1m
Ob2huRNhhVIccO02BCmKTiqH/fGUD5qcl7yuUMA0zAyT3i87wVoJ/ZWsNmR/CEjU
gX5rH7Wcrn5n171adLvkFZwbEIX5IK5EZd2+CAQXkKC+5/bd+yesRjGHTyQC1i93
yt4+KiDOc5SHNj7SlOiblY9q1+0HVCbHjwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FLy0Cy6J/eTx5X5QVYHp/kIKRgY+MB8GA1UdIwQYMBaAFK1yqfRs9Xm9n1perq4p
zU2GbifEMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnRTRmV29qTkJYYWlt
Y0xXVkxScXY0ajU5aHZnYzk4NjZQdG9UUHRHa0oyLzEvQUQ3MkE5RjQ2Q0Y1NzlC
RDlGNUE1RUFFQUUyOUNENEQ4NjZFMjdDNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRDcyQTlGNDZDRjU3OUJEOUY1QTVFQUVBRTI5Q0Q0RDg2NkUy
N0M0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZ0U0Zldvak5CWGFpbWNMV1ZM
UnF2NGo1OWh2Z2M5ODY2UHRvVFB0R2tKMi8xLzMyMzAzMDJlMzEzMzJlMzgzNTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDM0MzQzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgN
VTANBgkqhkiG9w0BAQsFAAOCAQEAP/JnVAAezb4ljXz+43zuOcg+fZc4L91eF7KE
FT781OChBRKwE9NW+V3PGuCRpYU0YwTUevflL1DMntj8AQW07YI1mfv0WZqvoFqp
eiyIpLevQI7ab37o7H6CNTgqW7s3OXW94F74UMOQlmzEV3I49aLPL6nnU4DY+LJO
ZIPrmw+1C2g7VGnNIcEBctwnXiXAEWI7LyPbuCgYzfyE9Kui45GDqpg3z5hHkwmZ
9GX6U3gWsHSSkTCJyH5XK8IptMPj6qI2VYcCu+B0dahzzZmZexenZXKke9tbFhmH
fuR566DuupfSbqVy51HW/HuSodDGJxTZr1u+Q9KfepA2cQrB/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org