Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230312e37312e36342e302f31382d3138203d3e203237363532.roa
File:                     3230312e37312e36342e302f31382d3138203d3e203237363532.roa (raw, json)
Hash identifier:          x1PaRf72BxF0fTMuJ5WKBifWYLPue44ITuDYghOv7XI=
Subject key identifier:   89:31:80:D8:09:A0:8E:82:D9:D8:AF:D0:A8:89:99:0D:C3:FA:33:03
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       5E47100F4956C8C38A80739A9E3E0844C2E1FAC1
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230312e37312e36342e302f31382d3138203d3e203237363532.roa
Signing time:             Wed 17 Aug 2022 18:12:50 +0000
ROA not before:           Wed 17 Aug 2022 18:07:50 +0000
ROA not after:            Wed 16 Aug 2023 18:12:50 +0000
asID:                     27652
IP address blocks:        201.71.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:47:10:0f:49:56:c8:c3:8a:80:73:9a:9e:3e:08:44:c2:e1:fa:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Aug 17 18:07:50 2022 GMT
            Not After : Aug 16 18:12:50 2023 GMT
        Subject: CN=3082010A0282010100BB19D026E3120090D4DAB18413A6F5FED5575B91D44B7CB3FC3A256E525AA4C8410D91C5194F723929D9AB8DE746CDC0038A61289AFD29F77CC437DBCA05A0F78B40257EA5C5280732F48F47C7CBD7149B2E5E2D5A7FAAFEBF1F045C9099DA8440CE0C6E083CD0075BECDB10C7FE950835CFC6965F97BD9E45B9326F47D4E03FF1A9D5F982758EAE6026E3B057FDC478F653197D8C3150C7C8CE4AEFD63041FF8A2A90BFC4DFA8065DAC0A96021CC5CEA749D33444B06405B42FB93BD2FBE538B112FEFC57DADDC6E45EEF8E97B50470D6C14CDC7EC36D834C5E527082E84E919D922240D45F86CB44ED7585CAA172B275620FCC68DE2AB824C708DC24D11D110203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:d0:26:e3:12:00:90:d4:da:b1:84:13:a6:
                    f5:fe:d5:57:5b:91:d4:4b:7c:b3:fc:3a:25:6e:52:
                    5a:a4:c8:41:0d:91:c5:19:4f:72:39:29:d9:ab:8d:
                    e7:46:cd:c0:03:8a:61:28:9a:fd:29:f7:7c:c4:37:
                    db:ca:05:a0:f7:8b:40:25:7e:a5:c5:28:07:32:f4:
                    8f:47:c7:cb:d7:14:9b:2e:5e:2d:5a:7f:aa:fe:bf:
                    1f:04:5c:90:99:da:84:40:ce:0c:6e:08:3c:d0:07:
                    5b:ec:db:10:c7:fe:95:08:35:cf:c6:96:5f:97:bd:
                    9e:45:b9:32:6f:47:d4:e0:3f:f1:a9:d5:f9:82:75:
                    8e:ae:60:26:e3:b0:57:fd:c4:78:f6:53:19:7d:8c:
                    31:50:c7:c8:ce:4a:ef:d6:30:41:ff:8a:2a:90:bf:
                    c4:df:a8:06:5d:ac:0a:96:02:1c:c5:ce:a7:49:d3:
                    34:44:b0:64:05:b4:2f:b9:3b:d2:fb:e5:38:b1:12:
                    fe:fc:57:da:dd:c6:e4:5e:ef:8e:97:b5:04:70:d6:
                    c1:4c:dc:7e:c3:6d:83:4c:5e:52:70:82:e8:4e:91:
                    9d:92:22:40:d4:5f:86:cb:44:ed:75:85:ca:a1:72:
                    b2:75:62:0f:cc:68:de:2a:b8:24:c7:08:dc:24:d1:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:31:80:D8:09:A0:8E:82:D9:D8:AF:D0:A8:89:99:0D:C3:FA:33:03
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230312e37312e36342e302f31382d3138203d3e203237363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:ac:b4:8b:34:4c:52:c6:60:5f:4a:70:24:b7:2d:dd:5f:
         7c:4c:76:39:25:4c:4d:94:62:27:6a:a5:98:96:15:70:c7:57:
         08:eb:90:0f:2c:c7:20:5f:e0:87:24:48:2e:52:07:c3:8a:86:
         07:2e:2d:f5:b3:5a:93:5c:0d:c7:5d:3a:e7:37:86:74:8e:30:
         73:6b:10:ef:7b:0c:30:38:68:cd:fd:b3:0e:db:01:95:19:09:
         65:83:c5:a7:99:74:64:dc:56:9e:5f:1e:56:35:5c:1c:d4:fc:
         4a:df:46:49:60:82:b5:8c:7f:c7:9a:8e:71:40:31:7e:76:17:
         86:47:4b:80:57:4e:5b:8f:2b:c1:b3:ed:e1:33:ad:cb:e8:25:
         81:07:4c:2a:61:6e:57:36:1e:20:0a:2c:3b:19:03:2e:b3:ba:
         7a:d1:89:87:2c:7a:ef:c5:3e:bb:3a:ea:ef:fb:ad:fb:71:67:
         ba:26:d3:fc:8f:ab:6a:d1:d3:29:06:1b:8b:31:80:bb:e1:a7:
         bc:ce:8c:94:43:60:ba:70:d5:05:ef:5c:c1:eb:19:08:f4:95:
         cb:86:b6:3e:63:0e:9e:d9:b9:43:b9:e4:bc:b4:f7:35:7a:db:
         76:73:29:21:d8:41:90:cf:fe:85:e0:d0:8d:67:58:9d:b4:44:
         97:95:fc:60
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUXkcQD0lWyMOKgHOanj4IRMLh+sEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIxNUQwQTI5QkEwMDQxRUI4ODg1OUUxNUE3MDZDOTc4
QjY3NTQ2OTAeFw0yMjA4MTcxODA3NTBaFw0yMzA4MTYxODEyNTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkIxOUQwMjZFMzEyMDA5MEQ0
REFCMTg0MTNBNkY1RkVENTU3NUI5MUQ0NEI3Q0IzRkMzQTI1NkU1MjVBQTRDODQx
MEQ5MUM1MTk0RjcyMzkyOUQ5QUI4REU3NDZDREMwMDM4QTYxMjg5QUZEMjlGNzdD
QzQzN0RCQ0EwNUEwRjc4QjQwMjU3RUE1QzUyODA3MzJGNDhGNDdDN0NCRDcxNDlC
MkU1RTJENUE3RkFBRkVCRjFGMDQ1QzkwOTlEQTg0NDBDRTBDNkUwODNDRDAwNzVC
RUNEQjEwQzdGRTk1MDgzNUNGQzY5NjVGOTdCRDlFNDVCOTMyNkY0N0Q0RTAzRkYx
QTlENUY5ODI3NThFQUU2MDI2RTNCMDU3RkRDNDc4RjY1MzE5N0Q4QzMxNTBDN0M4
Q0U0QUVGRDYzMDQxRkY4QTJBOTBCRkM0REZBODA2NURBQzBBOTYwMjFDQzVDRUE3
NDlEMzM0NDRCMDY0MDVCNDJGQjkzQkQyRkJFNTM4QjExMkZFRkM1N0RBRERDNkU0
NUVFRjhFOTdCNTA0NzBENkMxNENEQzdFQzM2RDgzNEM1RTUyNzA4MkU4NEU5MTlE
OTIyMjQwRDQ1Rjg2Q0I0NEVENzU4NUNBQTE3MkIyNzU2MjBGQ0M2OERFMkFCODI0
QzcwOERDMjREMTFEMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuxnQJuMSAJDU2rGEE6b1/tVXW5HUS3yz/DolblJapMhBDZHFGU9y
OSnZq43nRs3AA4phKJr9Kfd8xDfbygWg94tAJX6lxSgHMvSPR8fL1xSbLl4tWn+q
/r8fBFyQmdqEQM4Mbgg80Adb7NsQx/6VCDXPxpZfl72eRbkyb0fU4D/xqdX5gnWO
rmAm47BX/cR49lMZfYwxUMfIzkrv1jBB/4oqkL/E36gGXawKlgIcxc6nSdM0RLBk
BbQvuTvS++U4sRL+/Ffa3cbkXu+Ol7UEcNbBTNx+w22DTF5ScILoTpGdkiJA1F+G
y0TtdYXKoXKydWIPzGjeKrgkxwjcJNEdEQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FIkxgNgJoI6C2div0KiJmQ3D+jMDMB8GA1UdIwQYMBaAFNIV0KKboAQeuIhZ4Vpw
bJeLZ1RpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzAvRDIxNUQwQTI5QkEwMDQx
RUI4ODg1OUUxNUE3MDZDOTc4QjY3NTQ2OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMjE1RDBBMjlCQTAwNDFFQjg4ODU5RTE1QTcwNkM5NzhCNjc1
NDY5LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IRllxY3JMVnYxSkpXenZVRmdS
OHFaenBpZExRVHRrQmtYWnM2Z2VRZHVpZS8wLzMyMzAzMTJlMzczMTJlMzYzNDJl
MzAyZjMxMzgyZDMxMzgyMDNkM2UyMDMyMzczNjM1MzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbJR0Aw
DQYJKoZIhvcNAQELBQADggEBAHtKrLSLNExSxmBfSnAkty3dX3xMdjklTE2UYidq
pZiWFXDHVwjrkA8sxyBf4IckSC5SB8OKhgcuLfWzWpNcDcddOuc3hnSOMHNrEO97
DDA4aM39sw7bAZUZCWWDxaeZdGTcVp5fHlY1XBzU/ErfRklggrWMf8eajnFAMX52
F4ZHS4BXTluPK8Gz7eEzrcvoJYEHTCphblc2HiAKLDsZAy6zunrRiYcseu/FPrs6
6u/7rftxZ7om0/yPq2rR0ykGG4sxgLvhp7zOjJRDYLpw1QXvXMHrGQj0lcuGtj5j
Dp7ZuUO55Ly09zV623ZzKSHYQZDP/oXg0I1nWJ20RJeV/GA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org