Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e3233362e302e302f31392d3234203d3e203130383831.roa
File:                     3230302e3233362e302e302f31392d3234203d3e203130383831.roa (raw, json)
Hash identifier:          weSIZ+nvikhpJVkaCJu4WewOQHXXPkhlnO92tHfvYhc=
Subject key identifier:   79:45:E9:79:BB:6C:9B:9F:E0:DE:D1:59:BC:87:65:22:71:DD:BD:25
Certificate issuer:       /CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
Certificate serial:       0EF113326C505CCF945FC930CC009B770F76F47E
Authority key identifier: BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e3233362e302e302f31392d3234203d3e203130383831.roa
Signing time:             Mon 01 Apr 2024 17:08:49 +0000
ROA not before:           Mon 01 Apr 2024 17:03:49 +0000
ROA not after:            Mon 31 Mar 2025 17:08:49 +0000
asID:                     10881
IP address blocks:        200.236.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f1:13:32:6c:50:5c:cf:94:5f:c9:30:cc:00:9b:77:0f:76:f4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
        Validity
            Not Before: Apr  1 17:03:49 2024 GMT
            Not After : Mar 31 17:08:49 2025 GMT
        Subject: CN=7945E979BB6C9B9FE0DED159BC87652271DDBD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:04:58:ee:c5:49:60:e2:9a:41:04:ae:83:
                    4c:c3:7e:63:4f:94:93:f2:ac:fb:b6:d2:7d:ee:6e:
                    b5:3b:7c:60:b3:47:1c:b0:b1:df:b8:1e:82:f2:38:
                    0c:24:f2:db:2f:90:9e:cb:74:6e:e6:66:1c:2a:2d:
                    85:86:c4:69:fb:22:37:02:b8:c9:68:d8:e8:a3:74:
                    d1:58:41:d3:04:54:e1:da:4b:34:57:c9:fa:cb:4e:
                    57:a1:ef:07:bf:46:b2:7c:7e:88:3c:78:2e:4f:1e:
                    5e:ef:13:6d:01:9f:3c:09:dc:b0:c7:c0:b6:99:c1:
                    e5:d3:58:7b:6e:66:97:34:03:e9:00:29:29:b5:62:
                    71:93:f8:63:e9:22:9f:c6:d0:84:48:59:3f:5f:3f:
                    1c:9e:24:40:34:6d:9d:0c:41:48:0b:64:9b:23:99:
                    44:ae:06:d3:80:a4:37:f4:21:2c:16:f5:f0:7c:ac:
                    d0:70:a3:55:98:dd:2d:dd:c8:d8:f0:15:9b:6f:ee:
                    08:31:32:e3:d5:4a:b4:d4:82:42:91:0c:6c:1f:23:
                    31:f1:16:15:b6:78:12:44:bc:13:1e:c8:8b:e9:d1:
                    2b:05:0d:90:1b:4b:67:da:3e:5f:01:c6:3b:c4:20:
                    d7:f6:6b:a5:c3:2a:4d:db:57:5d:6f:40:f8:2b:a0:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:45:E9:79:BB:6C:9B:9F:E0:DE:D1:59:BC:87:65:22:71:DD:BD:25
            X509v3 Authority Key Identifier:
                keyid:BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e3233362e302e302f31392d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:99:16:a6:db:ec:5d:e9:6c:2e:77:d9:99:8a:19:4a:50:20:
         6f:92:7f:07:77:1c:47:67:19:5e:3f:c6:13:cd:c6:79:6d:66:
         9a:24:7e:de:0e:c5:f7:51:ed:50:09:c3:dd:1b:73:87:ec:61:
         1f:e9:f1:2b:8e:10:3c:7a:b4:72:26:62:30:e0:68:cc:02:c4:
         8a:d8:db:c0:21:3a:5e:c2:d7:68:52:39:ed:9b:d5:14:fc:dc:
         85:71:b0:ea:ba:c1:5a:08:7a:c6:28:46:bf:24:0a:f2:e4:83:
         a2:0d:23:f1:38:84:71:bf:af:b9:27:77:da:82:b2:f4:6c:26:
         43:80:05:eb:10:1b:af:fe:77:6b:1b:5f:0f:87:54:b7:14:72:
         c1:81:df:90:74:a9:cc:53:ee:8d:27:30:78:67:58:06:42:f6:
         2e:08:21:dc:28:49:6b:b9:2a:b9:03:37:cf:b9:cc:2a:17:3f:
         5d:7e:28:f2:ba:6f:6a:f3:46:7c:d0:76:85:ec:26:f6:c4:29:
         09:4b:fa:9e:a4:5a:32:09:ee:13:7b:23:f0:17:91:12:c9:73:
         c3:2a:48:ba:fd:e4:4d:33:a2:9d:4e:7a:51:35:7b:25:90:a9:
         93:67:76:10:2a:ad:91:c0:c1:22:bd:ae:2c:3b:81:7d:58:e1:
         26:c9:79:7c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDvETMmxQXM+UX8kwzACbdw929H4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE2N0EyNkYyOTk1MUIwNDRENDI2QTBCNjYxNUM2NkNB
MUFCRTBEQjAeFw0yNDA0MDExNzAzNDlaFw0yNTAzMzExNzA4NDlaMDMxMTAvBgNV
BAMTKDc5NDVFOTc5QkI2QzlCOUZFMERFRDE1OUJDODc2NTIyNzFEREJEMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebARY7sVJYOKaQQSug0zDfmNP
lJPyrPu20n3ubrU7fGCzRxywsd+4HoLyOAwk8tsvkJ7LdG7mZhwqLYWGxGn7IjcC
uMlo2OijdNFYQdMEVOHaSzRXyfrLTleh7we/RrJ8fog8eC5PHl7vE20BnzwJ3LDH
wLaZweXTWHtuZpc0A+kAKSm1YnGT+GPpIp/G0IRIWT9fPxyeJEA0bZ0MQUgLZJsj
mUSuBtOApDf0ISwW9fB8rNBwo1WY3S3dyNjwFZtv7ggxMuPVSrTUgkKRDGwfIzHx
FhW2eBJEvBMeyIvp0SsFDZAbS2faPl8BxjvEINf2a6XDKk3bV11vQPgroKRTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUeUXpebtsm5/g3tFZvIdlInHdvSUwHwYDVR0j
BBgwFoAUumeibymVGwRNQmoLZhXGbKGr4NswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdXamlhV2hmeTl6MTNKNHJ3UjdIcWR2bXo3TkY0RkR0aWZzMUJmU2g0
UHgvMC9CQTY3QTI2RjI5OTUxQjA0NEQ0MjZBMEI2NjE1QzY2Q0ExQUJFMERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBNjdBMjZGMjk5NTFCMDQ0
RDQyNkEwQjY2MTVDNjZDQTFBQkUwREIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHV2ppYVdoZnk5ejEzSjRyd1I3SHFkdm16N05GNEZEdGlmczFCZlNoNFB4LzAv
MzIzMDMwMmUzMjMzMzYyZTMwMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzMDM4
MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBcjsADANBgkqhkiG9w0BAQsFAAOCAQEAcZkWptvsXels
LnfZmYoZSlAgb5J/B3ccR2cZXj/GE83GeW1mmiR+3g7F91HtUAnD3Rtzh+xhH+nx
K44QPHq0ciZiMOBozALEitjbwCE6XsLXaFI57ZvVFPzchXGw6rrBWgh6xihGvyQK
8uSDog0j8TiEcb+vuSd32oKy9GwmQ4AF6xAbr/53axtfD4dUtxRywYHfkHSpzFPu
jScweGdYBkL2Lggh3ChJa7kquQM3z7nMKhc/XX4o8rpvavNGfNB2hewm9sQpCUv6
nqRaMgnuE3sj8BeREslzwypIuv3kTTOinU56UTV7JZCpk2d2ECqtkcDBIr2uLDuB
fVjhJsl5fA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org