Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e322e302f32342d3234203d3e20323731303137.roa
File:                     3230302e3231392e322e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier:          Q7Xun7sPlbzUJ7lgLbEdOojUMAYBT2KS4qAZ1zzrLM4=
Subject key identifier:   18:67:73:A7:E6:68:77:12:3D:D0:B1:6A:0B:99:4F:9B:4C:F3:4C:DF
Certificate issuer:       /CN=227999345B6825C592F26D792A9A591CD758367B
Certificate serial:       3686C8D3B79765F21D9C5BE447EE005C0C5E0108
Authority key identifier: 22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e322e302f32342d3234203d3e20323731303137.roa
Signing time:             Thu 28 Mar 2024 18:51:21 +0000
ROA not before:           Thu 28 Mar 2024 18:46:21 +0000
ROA not after:            Thu 27 Mar 2025 18:51:21 +0000
asID:                     271017
IP address blocks:        200.219.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:86:c8:d3:b7:97:65:f2:1d:9c:5b:e4:47:ee:00:5c:0c:5e:01:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227999345B6825C592F26D792A9A591CD758367B
        Validity
            Not Before: Mar 28 18:46:21 2024 GMT
            Not After : Mar 27 18:51:21 2025 GMT
        Subject: CN=186773A7E66877123DD0B16A0B994F9B4CF34CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:2e:6c:e8:c2:6e:1f:ac:5d:58:9a:71:b3:
                    de:ba:9b:d6:7c:9d:de:da:3b:a9:0d:8b:bb:b5:73:
                    d6:d6:1a:34:ca:e1:7b:15:e7:5e:10:72:d1:b4:9b:
                    20:d7:96:29:cc:ce:a1:d8:d6:1b:00:7e:f8:e3:6e:
                    df:47:1c:02:e8:84:10:e0:12:d1:ce:0d:a6:9c:21:
                    fb:a3:ae:f0:97:29:cf:81:04:da:46:32:47:58:3a:
                    2e:ff:92:e9:ce:70:b6:be:6c:64:ec:57:0b:5a:50:
                    a0:6a:74:04:50:bc:93:a5:a1:1f:c0:b9:a8:6b:93:
                    ad:e8:a0:61:a9:fc:18:ca:b5:9d:16:71:37:bf:44:
                    5d:b7:1a:9f:7a:ab:5b:de:69:ce:1e:74:51:fa:0b:
                    37:02:e8:74:70:f1:ba:91:e5:4a:91:76:9f:ed:70:
                    74:7b:b9:d2:e7:47:12:0c:49:9c:dd:16:2e:b0:e1:
                    17:c6:28:00:fd:97:7c:80:83:fe:4b:46:28:a2:30:
                    d2:6f:39:aa:53:73:77:f8:45:f4:1a:06:5b:e0:9d:
                    0c:f6:c1:c8:84:44:77:15:f3:c8:a5:7f:d1:81:c5:
                    fa:e1:b2:9a:96:e8:46:96:a5:7d:39:48:9f:40:8e:
                    95:cd:2d:1d:12:31:77:4b:35:9a:15:f6:48:f8:6f:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:67:73:A7:E6:68:77:12:3D:D0:B1:6A:0B:99:4F:9B:4C:F3:4C:DF
            X509v3 Authority Key Identifier:
                keyid:22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/227999345B6825C592F26D792A9A591CD758367B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e322e302f32342d3234203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:21:57:19:c8:f1:99:95:79:02:81:83:6b:83:8b:75:18:d1:
         85:f9:60:da:ce:3b:b0:28:58:18:7b:1d:b5:6b:1e:e3:4e:df:
         f7:eb:b8:c5:b7:6d:65:e2:d8:df:21:ae:b5:7d:40:38:f1:25:
         4a:bf:69:7a:ea:e0:71:64:4e:9d:de:82:2b:c2:18:28:af:ae:
         4f:73:e2:89:7b:8a:d3:19:4d:a1:13:ff:2a:ac:04:40:3b:c6:
         1f:06:b2:1b:1c:bc:65:5b:e3:48:d1:c4:ab:0f:8f:f4:87:d1:
         27:30:35:08:3b:57:a2:c2:4f:6d:8a:a7:4e:91:c3:46:93:59:
         84:79:93:51:f8:12:9e:4f:ed:90:cb:5c:27:a9:12:6e:f7:91:
         84:b0:8c:33:37:08:b8:12:93:40:14:ab:5f:67:6f:fb:24:f9:
         6d:53:2b:96:06:0f:2a:c0:c0:44:3e:fc:4a:7f:e6:0a:13:4a:
         ae:97:1f:4c:c7:50:27:6e:8c:e6:ce:1f:cd:a4:e1:1f:f8:ff:
         66:91:ce:d1:b0:d8:dd:ed:7d:ef:c9:2a:d8:fe:a1:b1:6c:7b:
         69:4f:a6:fd:18:bb:e9:8b:b5:95:d3:01:4a:ed:9d:25:67:8d:
         ba:a7:f6:cd:3e:72:6d:41:78:52:65:93:d2:b8:3b:63:71:99:
         2e:33:0c:cc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNobI07eXZfIdnFvkR+4AXAxeAQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI3OTk5MzQ1QjY4MjVDNTkyRjI2RDc5MkE5QTU5MUNE
NzU4MzY3QjAeFw0yNDAzMjgxODQ2MjFaFw0yNTAzMjcxODUxMjFaMDMxMTAvBgNV
BAMTKDE4Njc3M0E3RTY2ODc3MTIzREQwQjE2QTBCOTk0RjlCNENGMzRDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkyC5s6MJuH6xdWJpxs966m9Z8
nd7aO6kNi7u1c9bWGjTK4XsV514QctG0myDXlinMzqHY1hsAfvjjbt9HHALohBDg
EtHODaacIfujrvCXKc+BBNpGMkdYOi7/kunOcLa+bGTsVwtaUKBqdARQvJOloR/A
uahrk63ooGGp/BjKtZ0WcTe/RF23Gp96q1veac4edFH6CzcC6HRw8bqR5UqRdp/t
cHR7udLnRxIMSZzdFi6w4RfGKAD9l3yAg/5LRiiiMNJvOapTc3f4RfQaBlvgnQz2
wciERHcV88ilf9GBxfrhspqW6EaWpX05SJ9AjpXNLR0SMXdLNZoV9kj4b/zhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGGdzp+ZodxI90LFqC5lPm0zzTN8wHwYDVR0j
BBgwFoAUInmZNFtoJcWS8m15KppZHNdYNnswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJjVWVyYWZodFhZc2JXclpEZzhCVEZnOWM0VkVmNnFvUlNrM3A3TEd0
WjgvMS8yMjc5OTkzNDVCNjgyNUM1OTJGMjZENzkyQTlBNTkxQ0Q3NTgzNjdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIyNzk5OTM0NUI2ODI1QzU5
MkYyNkQ3OTJBOUE1OTFDRDc1ODM2N0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyY1VlcmFmaHRYWXNiV3JaRGc4QlRGZzljNFZFZjZxb1JTazNwN0xHdFo4LzEv
MzIzMDMwMmUzMjMxMzkyZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzAzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyNsCMA0GCSqGSIb3DQEBCwUAA4IBAQAUIVcZyPGZ
lXkCgYNrg4t1GNGF+WDazjuwKFgYex21ax7jTt/367jFt21l4tjfIa61fUA48SVK
v2l66uBxZE6d3oIrwhgor65Pc+KJe4rTGU2hE/8qrARAO8YfBrIbHLxlW+NI0cSr
D4/0h9EnMDUIO1eiwk9tiqdOkcNGk1mEeZNR+BKeT+2Qy1wnqRJu95GEsIwzNwi4
EpNAFKtfZ2/7JPltUyuWBg8qwMBEPvxKf+YKE0qulx9Mx1Anbozmzh/NpOEf+P9m
kc7RsNjd7X3vySrY/qGxbHtpT6b9GLvpi7WV0wFK7Z0lZ426p/bNPnJtQXhSZZPS
uDtjcZkuMwzM
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:01 2024 by rpki-client on console.sobornost.net