Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa
File:                     3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa (raw, json)
Hash identifier:          Xa61TUQLxfICpupT5WWtAHNQX+yzYM9CWAINZUUR+vA=
Subject key identifier:   AB:97:28:80:E4:11:A0:09:6A:3C:62:3E:F0:9C:CC:AC:9A:8C:77:34
Certificate issuer:       /CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
Certificate serial:       72912F95A4C3EA5349F55A16C6181070FEC13F73
Authority key identifier: A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa
Signing time:             Wed 10 Apr 2024 13:48:43 +0000
ROA not before:           Wed 10 Apr 2024 13:43:43 +0000
ROA not after:            Wed 09 Apr 2025 13:48:43 +0000
asID:                     270811
IP address blocks:        200.219.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:91:2f:95:a4:c3:ea:53:49:f5:5a:16:c6:18:10:70:fe:c1:3f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
        Validity
            Not Before: Apr 10 13:43:43 2024 GMT
            Not After : Apr  9 13:48:43 2025 GMT
        Subject: CN=AB972880E411A0096A3C623EF09CCCAC9A8C7734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:d8:89:e4:97:78:db:f7:ef:b2:e2:5a:56:
                    fc:54:fa:4f:31:f2:70:d3:25:96:d4:6f:66:61:62:
                    e0:25:0c:b5:72:38:85:10:70:b9:9f:19:c5:d5:0d:
                    cf:4e:b2:41:59:8d:cb:b6:34:d6:e2:4b:c2:8d:d7:
                    b1:54:64:64:21:bc:de:9e:db:ff:cb:fe:d9:4e:e7:
                    88:63:83:6a:6a:cc:80:8f:5f:35:df:37:29:42:e6:
                    95:74:23:ea:9c:8e:2b:05:5a:5f:e1:2e:80:fa:fa:
                    29:fe:84:6c:2f:df:ff:26:c5:f7:61:da:f2:96:c7:
                    34:e5:da:bf:01:e3:a8:43:28:1d:d2:f0:07:e9:05:
                    08:a5:fe:13:49:45:93:98:dd:6c:69:ae:8a:3a:3d:
                    c9:00:08:f9:41:df:46:fc:7b:1a:e3:10:05:64:64:
                    59:f4:a5:90:46:f9:b3:45:25:1e:96:72:52:60:68:
                    40:49:42:14:54:46:29:15:dc:93:89:03:ab:c5:eb:
                    69:1a:3e:34:20:7e:13:ec:76:da:9f:34:68:56:31:
                    14:1a:f2:6e:49:31:78:c0:e1:cb:d8:d7:6c:51:19:
                    1a:53:f6:af:ae:95:82:cb:b7:ac:2c:d9:3b:5b:ed:
                    0b:0f:9e:72:4f:74:54:a1:d8:29:08:8f:2c:a4:05:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:97:28:80:E4:11:A0:09:6A:3C:62:3E:F0:9C:CC:AC:9A:8C:77:34
            X509v3 Authority Key Identifier:
                keyid:A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:ca:fe:32:2f:45:70:b0:55:2e:07:45:b2:2c:a7:60:f1:
         82:cb:5e:63:9a:c6:4a:d0:e4:51:7e:91:87:9d:1b:45:a0:48:
         96:bb:f7:aa:39:44:96:ee:ae:c9:48:0b:ff:d4:ae:dd:b0:d5:
         89:fb:42:f6:02:ce:b3:f8:92:84:af:17:e6:64:c7:51:62:5a:
         f9:94:84:d1:34:28:3e:29:51:a6:c6:b9:4d:83:4a:53:85:ed:
         09:56:66:ee:24:01:6a:2f:35:89:de:de:3f:3e:b4:bd:c7:9f:
         68:0b:b1:87:ee:d8:6d:66:f9:f9:45:ce:0a:94:0f:fe:c6:72:
         e3:67:43:5c:36:7a:3d:94:57:20:17:27:00:72:92:a7:64:3b:
         73:ac:b5:fe:59:66:ed:f7:2e:ae:28:4f:cd:32:62:eb:e2:18:
         b6:c8:10:a3:f8:09:a9:b1:40:85:dc:a1:af:b3:44:ba:2b:98:
         ee:a6:98:93:c8:f9:ed:78:d8:d5:1b:36:47:b4:c2:bb:9d:1a:
         ff:e3:86:bf:e0:27:85:11:c9:a3:70:4c:b1:2e:02:d9:e5:0a:
         4a:d8:e6:37:9d:ee:cf:f1:c2:7f:be:0f:99:24:e5:5f:ff:eb:
         03:de:e1:c3:39:7a:b8:b8:89:74:e5:88:12:ee:45:df:2f:c9:
         8b:4e:6e:c4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUcpEvlaTD6lNJ9VoWxhgQcP7BP3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE0RjYzMTA3NUQwQzVBRjhBMDVCNEU4Q0U4QUVBQzgz
QUY3MTJCRDAeFw0yNDA0MTAxMzQzNDNaFw0yNTA0MDkxMzQ4NDNaMDMxMTAvBgNV
BAMTKEFCOTcyODgwRTQxMUEwMDk2QTNDNjIzRUYwOUNDQ0FDOUE4Qzc3MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEldiJ5Jd42/fvsuJaVvxU+k8x
8nDTJZbUb2ZhYuAlDLVyOIUQcLmfGcXVDc9OskFZjcu2NNbiS8KN17FUZGQhvN6e
2//L/tlO54hjg2pqzICPXzXfNylC5pV0I+qcjisFWl/hLoD6+in+hGwv3/8mxfdh
2vKWxzTl2r8B46hDKB3S8AfpBQil/hNJRZOY3Wxproo6PckACPlB30b8exrjEAVk
ZFn0pZBG+bNFJR6WclJgaEBJQhRURikV3JOJA6vF62kaPjQgfhPsdtqfNGhWMRQa
8m5JMXjA4cvY12xRGRpT9q+ulYLLt6ws2Ttb7QsPnnJPdFSh2CkIjyykBaItAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUq5cogOQRoAlqPGI+8JzMrJqMdzQwHwYDVR0j
BBgwFoAUoU9jEHXQxa+KBbTozorqyDr3Er0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9jVG5BcWJxTEpUVVlSNUpXanh0SzVnaFVIZ0hxNkJYdDVvckJrRVBBZHI2
LzAvQTE0RjYzMTA3NUQwQzVBRjhBMDVCNEU4Q0U4QUVBQzgzQUY3MTJCRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9BMTRGNjMxMDc1RDBDNUFGOEEw
NUI0RThDRThBRUFDODNBRjcxMkJELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9j
VG5BcWJxTEpUVVlSNUpXanh0SzVnaFVIZ0hxNkJYdDVvckJrRVBBZHI2LzAvMzIz
MDMwMmUzMjMxMzkyZTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzAz
ODMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAHI2xQwDQYJKoZIhvcNAQELBQADggEBAF9fyv4yL0Vw
sFUuB0WyLKdg8YLLXmOaxkrQ5FF+kYedG0WgSJa796o5RJburslIC//Urt2w1Yn7
QvYCzrP4koSvF+Zkx1FiWvmUhNE0KD4pUabGuU2DSlOF7QlWZu4kAWovNYne3j8+
tL3Hn2gLsYfu2G1m+flFzgqUD/7GcuNnQ1w2ej2UVyAXJwBykqdkO3Ostf5ZZu33
Lq4oT80yYuviGLbIEKP4CamxQIXcoa+zRLormO6mmJPI+e142NUbNke0wrudGv/j
hr/gJ4URyaNwTLEuAtnlCkrY5jed7s/xwn++D5kk5V//6wPe4cM5eri4iXTliBLu
Rd8vyYtObsQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org