Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32332e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32332e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          xYzeBX2TXm4dfRRK8oGTBHGj58iiN5hySBXeWzKXe9s=
Subject key identifier:   EE:43:14:7A:61:8C:35:0A:F2:37:C9:71:25:A3:72:2C:86:30:08:D4
Certificate issuer:       /CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
Certificate serial:       30318DEFBC0AE9BAD560254331C1A579F6753E2B
Authority key identifier: A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32332e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 10 Apr 2024 13:48:43 +0000
ROA not before:           Wed 10 Apr 2024 13:43:43 +0000
ROA not after:            Wed 09 Apr 2025 13:48:43 +0000
asID:                     270811
IP address blocks:        200.219.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:31:8d:ef:bc:0a:e9:ba:d5:60:25:43:31:c1:a5:79:f6:75:3e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
        Validity
            Not Before: Apr 10 13:43:43 2024 GMT
            Not After : Apr  9 13:48:43 2025 GMT
        Subject: CN=EE43147A618C350AF237C97125A3722C863008D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:31:41:c4:a5:08:4e:b9:50:6a:4b:77:9b:
                    b1:2c:89:b2:ce:49:fc:41:8b:d3:88:f9:15:4b:e9:
                    28:fb:12:de:b4:69:3a:b8:7f:a2:fd:e6:20:a6:2d:
                    f0:b7:9d:0c:50:41:79:d8:0f:82:9d:5d:10:38:b2:
                    88:fd:07:d6:08:c0:69:d6:5c:1d:81:89:dd:9f:b0:
                    6d:20:34:6d:b0:82:1c:40:e2:c5:cf:07:a7:bf:b9:
                    10:dc:ce:f0:47:83:a0:62:58:09:5d:47:48:7b:fa:
                    1a:67:ab:12:88:5a:f2:79:9e:b3:e8:6e:23:cf:18:
                    04:9d:d9:cb:b8:31:4e:c6:44:56:67:dc:5b:82:18:
                    8f:bf:e3:d9:72:25:38:a3:d7:30:94:1d:64:44:e9:
                    ca:19:f6:7f:04:da:c8:b0:7d:87:41:8e:e9:05:8a:
                    71:8d:e3:60:e8:93:fb:03:fd:4d:f9:98:c8:8f:f3:
                    f0:40:e7:62:2c:fd:bd:46:c6:89:b3:2f:bc:06:fa:
                    f3:f8:12:8c:67:4c:e0:29:78:c7:f2:c0:9c:10:14:
                    ac:a2:2b:b0:97:27:77:42:49:0b:29:68:a1:18:df:
                    96:c5:b0:16:45:3f:93:f7:52:49:99:32:01:70:e3:
                    ec:57:e3:f1:2c:9e:b5:71:29:c7:7a:75:2f:25:85:
                    9d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:43:14:7A:61:8C:35:0A:F2:37:C9:71:25:A3:72:2C:86:30:08:D4
            X509v3 Authority Key Identifier:
                keyid:A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/3230302e3231392e32332e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:29:ff:d9:43:ca:85:bf:2b:85:7b:cc:76:ab:63:d3:30:32:
         b4:a4:97:72:0b:9e:35:e7:7a:0c:87:af:66:c0:bc:66:af:5a:
         5a:dc:ff:a7:17:ad:88:3d:5d:80:52:24:13:fc:19:6f:18:97:
         9e:5d:7b:00:3d:51:79:98:5f:ff:56:21:32:58:43:8f:aa:cb:
         7a:73:61:4a:82:b1:11:b7:bc:1a:4d:bf:bc:25:31:73:ad:40:
         ad:16:34:ee:ba:a7:a0:e6:0d:b7:c1:55:38:0a:7b:83:d6:35:
         cb:0e:76:d6:68:b5:a7:85:6d:32:37:18:41:7b:fa:14:53:5b:
         33:ea:d7:a7:e5:6e:51:49:37:92:58:93:c2:03:b8:5d:be:c8:
         18:6f:4d:91:ba:37:71:96:4d:99:76:90:22:10:25:27:3c:64:
         a7:08:7c:a5:5f:d3:49:58:f1:ab:57:4a:12:c2:c8:53:a7:a1:
         32:46:c4:32:86:08:7a:ea:2e:61:55:e9:8f:4e:ae:99:0e:ec:
         02:ae:07:e6:28:28:1e:96:05:42:65:fa:5f:64:45:63:b3:15:
         8a:fb:de:a4:64:6d:1f:52:1b:8f:4e:0c:a3:97:f4:a3:93:9d:
         9a:00:cc:0d:16:82:d1:c0:64:5a:b3:f1:e7:b0:a7:ac:31:c6:
         e3:dc:7e:6c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUMDGN77wK6brVYCVDMcGlefZ1PiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE0RjYzMTA3NUQwQzVBRjhBMDVCNEU4Q0U4QUVBQzgz
QUY3MTJCRDAeFw0yNDA0MTAxMzQzNDNaFw0yNTA0MDkxMzQ4NDNaMDMxMTAvBgNV
BAMTKEVFNDMxNDdBNjE4QzM1MEFGMjM3Qzk3MTI1QTM3MjJDODYzMDA4RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOTFBxKUITrlQakt3m7EsibLO
SfxBi9OI+RVL6Sj7Et60aTq4f6L95iCmLfC3nQxQQXnYD4KdXRA4soj9B9YIwGnW
XB2Bid2fsG0gNG2wghxA4sXPB6e/uRDczvBHg6BiWAldR0h7+hpnqxKIWvJ5nrPo
biPPGASd2cu4MU7GRFZn3FuCGI+/49lyJTij1zCUHWRE6coZ9n8E2siwfYdBjukF
inGN42Dok/sD/U35mMiP8/BA52Is/b1GxomzL7wG+vP4EoxnTOApeMfywJwQFKyi
K7CXJ3dCSQspaKEY35bFsBZFP5P3UkmZMgFw4+xX4/EsnrVxKcd6dS8lhZ35AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU7kMUemGMNQryN8lxJaNyLIYwCNQwHwYDVR0j
BBgwFoAUoU9jEHXQxa+KBbTozorqyDr3Er0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9jVG5BcWJxTEpUVVlSNUpXanh0SzVnaFVIZ0hxNkJYdDVvckJrRVBBZHI2
LzAvQTE0RjYzMTA3NUQwQzVBRjhBMDVCNEU4Q0U4QUVBQzgzQUY3MTJCRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9BMTRGNjMxMDc1RDBDNUFGOEEw
NUI0RThDRThBRUFDODNBRjcxMkJELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9j
VG5BcWJxTEpUVVlSNUpXanh0SzVnaFVIZ0hxNkJYdDVvckJrRVBBZHI2LzAvMzIz
MDMwMmUzMjMxMzkyZTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAz
ODMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADI2xcwDQYJKoZIhvcNAQELBQADggEBAAsp/9lDyoW/
K4V7zHarY9MwMrSkl3ILnjXnegyHr2bAvGavWlrc/6cXrYg9XYBSJBP8GW8Yl55d
ewA9UXmYX/9WITJYQ4+qy3pzYUqCsRG3vBpNv7wlMXOtQK0WNO66p6DmDbfBVTgK
e4PWNcsOdtZotaeFbTI3GEF7+hRTWzPq16flblFJN5JYk8IDuF2+yBhvTZG6N3GW
TZl2kCIQJSc8ZKcIfKVf00lY8atXShLCyFOnoTJGxDKGCHrqLmFV6Y9OrpkO7AKu
B+YoKB6WBUJl+l9kRWOzFYr73qRkbR9SG49ODKOX9KOTnZoAzA0WgtHAZFqz8eew
p6wxxuPcfmw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org