Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32342e302f32322d3234203d3e203631383233.roa
File:                     3230312e3232322e32342e302f32322d3234203d3e203631383233.roa (raw, json)
Hash identifier:          Hjw/mXRrIRdz7CUwRDhrn6X9dzyN8xJVylt3rOcW8k0=
Subject key identifier:   66:49:3F:B7:2F:5F:2C:40:64:D4:36:95:58:48:ED:FD:23:28:FB:16
Certificate issuer:       /CN=5DE402DEF22CC80D10C5FDA1AD410D09E0FE5EAB
Certificate serial:       53C460AB5C681B2B237F76F3B88DD69EDB371FDF
Authority key identifier: 5D:E4:02:DE:F2:2C:C8:0D:10:C5:FD:A1:AD:41:0D:09:E0:FE:5E:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DE402DEF22CC80D10C5FDA1AD410D09E0FE5EAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32342e302f32322d3234203d3e203631383233.roa
Signing time:             Thu 01 Jun 2023 18:34:10 +0000
ROA not before:           Thu 01 Jun 2023 18:29:10 +0000
ROA not after:            Thu 30 May 2024 18:34:10 +0000
asID:                     61823
IP address blocks:        201.222.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c4:60:ab:5c:68:1b:2b:23:7f:76:f3:b8:8d:d6:9e:db:37:1f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DE402DEF22CC80D10C5FDA1AD410D09E0FE5EAB
        Validity
            Not Before: Jun  1 18:29:10 2023 GMT
            Not After : May 30 18:34:10 2024 GMT
        Subject: CN=66493FB72F5F2C4064D436955848EDFD2328FB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:f7:2d:5c:12:2d:de:1d:56:2c:e3:2e:88:
                    10:69:a7:a4:6b:ea:8f:eb:6e:02:c8:20:ec:28:9e:
                    d9:62:ea:9d:70:1a:03:f6:01:b1:81:8d:21:6c:14:
                    3b:07:00:71:1e:b5:28:30:61:5a:a7:c5:bd:15:0e:
                    66:8d:a7:ed:bb:52:ea:b1:f7:20:71:88:da:6a:91:
                    99:6c:c3:db:2f:39:1a:56:8c:a0:e8:85:51:cc:b1:
                    20:65:20:78:91:1a:3c:21:59:0f:0d:64:25:08:0e:
                    00:98:42:9a:0d:a8:c8:55:ed:77:11:a5:04:22:55:
                    ab:e2:0b:5c:1d:ad:10:cb:c9:4f:ab:ec:85:7e:a2:
                    cb:c3:c8:70:ad:4e:df:74:41:20:8a:e9:a4:65:d9:
                    f0:97:f1:7a:9a:b2:cc:9f:e1:99:ce:1a:7c:ac:d9:
                    9b:43:ee:ce:d7:20:1c:06:7c:cc:71:ac:cc:d4:74:
                    61:47:23:7e:90:f5:39:a7:ac:93:86:8c:ca:76:57:
                    0f:ee:92:dd:8e:e2:8c:45:77:1b:ff:ee:5d:e7:dd:
                    ab:19:dc:af:27:c6:99:e9:d2:ac:48:16:4e:dc:52:
                    69:8e:10:98:28:b0:2c:c9:75:28:9a:f0:d7:d9:83:
                    8c:ea:02:46:87:82:4f:90:2a:e4:5c:73:5a:f7:ee:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:49:3F:B7:2F:5F:2C:40:64:D4:36:95:58:48:ED:FD:23:28:FB:16
            X509v3 Authority Key Identifier:
                keyid:5D:E4:02:DE:F2:2C:C8:0D:10:C5:FD:A1:AD:41:0D:09:E0:FE:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/5DE402DEF22CC80D10C5FDA1AD410D09E0FE5EAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DE402DEF22CC80D10C5FDA1AD410D09E0FE5EAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32342e302f32322d3234203d3e203631383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:09:d9:90:d4:72:bc:b6:a4:36:74:5e:06:f0:84:4d:5f:53:
         fe:63:84:5b:d0:f7:4a:c6:f0:34:7a:e5:d5:1e:c6:7b:10:77:
         25:24:23:a5:fa:95:11:5b:f1:90:bf:dc:e3:87:dd:52:24:25:
         d0:68:d9:b3:c6:ce:bb:00:1c:cb:c0:8e:b3:8b:31:e5:29:82:
         f1:3a:aa:6b:89:42:f2:02:6a:07:13:4f:79:45:bc:e9:bb:8f:
         c8:74:3b:a2:18:e3:5b:91:d0:25:47:0b:74:4e:91:62:ce:fd:
         5a:32:b2:c9:b3:19:d5:d9:31:67:8a:c7:a2:01:86:72:cd:58:
         0a:d8:87:67:b6:b4:57:11:88:cb:28:f4:7a:6a:9e:97:0e:6b:
         74:df:c4:de:73:46:e5:ef:eb:e9:ef:26:6d:6e:d3:e2:f8:04:
         21:58:50:aa:bf:e9:fd:16:71:8b:4e:be:47:78:36:79:4f:bd:
         e7:f6:d5:f7:f3:1d:83:85:a2:00:2b:4a:b4:d2:46:87:bb:ab:
         e8:a3:c2:27:d1:18:40:20:10:de:cd:83:1d:1c:dc:5a:31:fd:
         01:80:17:1d:5b:ce:39:db:db:7d:a1:43:32:0b:00:82:38:7f:
         83:2b:31:f5:00:3b:f6:3f:56:60:7b:1e:45:48:69:02:33:ad:
         cf:38:5a:08
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU8Rgq1xoGysjf3bzuI3Wnts3H98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURFNDAyREVGMjJDQzgwRDEwQzVGREExQUQ0MTBEMDlF
MEZFNUVBQjAeFw0yMzA2MDExODI5MTBaFw0yNDA1MzAxODM0MTBaMDMxMTAvBgNV
BAMTKDY2NDkzRkI3MkY1RjJDNDA2NEQ0MzY5NTU4NDhFREZEMjMyOEZCMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7PctXBIt3h1WLOMuiBBpp6Rr
6o/rbgLIIOwontli6p1wGgP2AbGBjSFsFDsHAHEetSgwYVqnxb0VDmaNp+27Uuqx
9yBxiNpqkZlsw9svORpWjKDohVHMsSBlIHiRGjwhWQ8NZCUIDgCYQpoNqMhV7XcR
pQQiVaviC1wdrRDLyU+r7IV+osvDyHCtTt90QSCK6aRl2fCX8Xqassyf4ZnOGnys
2ZtD7s7XIBwGfMxxrMzUdGFHI36Q9TmnrJOGjMp2Vw/ukt2O4oxFdxv/7l3n3asZ
3K8nxpnp0qxIFk7cUmmOEJgosCzJdSia8NfZg4zqAkaHgk+QKuRcc1r37kh9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZkk/ty9fLEBk1DaVWEjt/SMo+xYwHwYDVR0j
BBgwFoAUXeQC3vIsyA0Qxf2hrUENCeD+XqswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEM0M1BWaWV6bjN2V1JkUDE2a0Z6UkwydGN6cUhKMVNQUkg4UVBXTmNY
alovMC81REU0MDJERUYyMkNDODBEMTBDNUZEQTFBRDQxMEQwOUUwRkU1RUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVERTQwMkRFRjIyQ0M4MEQx
MEM1RkRBMUFENDEwRDA5RTBGRTVFQUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDNDNQVmllem4zdldSZFAxNmtGelJMMnRjenFISjFTUFJIOFFQV05jWGpaLzAv
MzIzMDMxMmUzMjMyMzIyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzgzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyd4YMA0GCSqGSIb3DQEBCwUAA4IBAQCRCdmQ1HK8
tqQ2dF4G8IRNX1P+Y4Rb0PdKxvA0euXVHsZ7EHclJCOl+pURW/GQv9zjh91SJCXQ
aNmzxs67ABzLwI6zizHlKYLxOqpriULyAmoHE095Rbzpu4/IdDuiGONbkdAlRwt0
TpFizv1aMrLJsxnV2TFniseiAYZyzVgK2IdntrRXEYjLKPR6ap6XDmt038Tec0bl
7+vp7yZtbtPi+AQhWFCqv+n9FnGLTr5HeDZ5T73n9tX38x2DhaIAK0q00kaHu6vo
o8In0RhAIBDezYMdHNxaMf0BgBcdW84529t9oUMyCwCCOH+DKzH1ADv2P1Zgex5F
SGkCM63POFoI
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org