Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/3230302e3230322e302e302f31392d3234203d3e203130373333.roa
File:                     3230302e3230322e302e302f31392d3234203d3e203130373333.roa (raw, json)
Hash identifier:          IR73Yu/z2nYDII6GmEh9DmKBOuMjqYiWd4SFNZlhrrs=
Subject key identifier:   57:3F:19:59:09:BF:F9:90:91:C7:25:4E:4D:D0:E4:55:77:9F:B9:B7
Certificate issuer:       /CN=A955974547A0FE776FE59842FE4095486B6693E2
Certificate serial:       2EBC2C7FCF290179C365F78B3463E115385D3FB8
Authority key identifier: A9:55:97:45:47:A0:FE:77:6F:E5:98:42:FE:40:95:48:6B:66:93:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A955974547A0FE776FE59842FE4095486B6693E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/3230302e3230322e302e302f31392d3234203d3e203130373333.roa
Signing time:             Mon 04 Sep 2023 23:00:30 +0000
ROA not before:           Mon 04 Sep 2023 22:55:30 +0000
ROA not after:            Mon 02 Sep 2024 23:00:30 +0000
asID:                     10733
IP address blocks:        200.202.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bc:2c:7f:cf:29:01:79:c3:65:f7:8b:34:63:e1:15:38:5d:3f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955974547A0FE776FE59842FE4095486B6693E2
        Validity
            Not Before: Sep  4 22:55:30 2023 GMT
            Not After : Sep  2 23:00:30 2024 GMT
        Subject: CN=573F195909BFF99091C7254E4DD0E455779FB9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2a:4b:88:a4:11:ce:17:a2:28:16:e1:8e:d1:
                    bc:75:59:ce:e2:1a:43:ab:a4:94:ec:7e:1c:9f:17:
                    df:a7:d5:9a:ea:13:92:3d:39:13:97:0b:55:25:ec:
                    42:f9:4e:3f:ce:b8:04:4a:39:62:85:73:8a:9f:db:
                    04:80:a4:dc:81:a9:bc:69:39:cb:26:2f:0c:4f:c2:
                    65:2c:04:fa:76:98:69:05:9f:18:42:59:71:ea:df:
                    3d:16:89:a0:59:1f:1b:36:f6:52:18:86:c6:6d:6d:
                    6e:44:25:18:f5:4c:f9:c1:2c:6f:ef:6d:c8:94:6b:
                    fa:d7:9c:b5:f4:27:fb:3f:38:43:ca:7c:22:e7:0d:
                    08:a5:d0:fa:1d:bd:3e:89:08:90:70:93:a3:ac:36:
                    4c:ff:f1:03:df:f7:a0:0d:79:39:c8:8a:c2:e4:ab:
                    7d:96:68:30:81:6e:b0:3e:77:20:6e:e0:5c:77:07:
                    ab:f0:f9:58:1d:d5:45:ff:b7:a2:cc:94:b9:1a:13:
                    25:d1:fd:24:64:0c:92:c8:69:8e:00:d7:6b:66:47:
                    37:4d:68:b8:01:1e:ff:39:86:4e:58:ea:07:0d:a5:
                    a5:3e:96:d8:61:86:43:71:12:1c:0b:13:5f:a4:70:
                    ec:b7:d6:94:3f:68:de:b5:1e:91:4d:7d:22:d8:96:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3F:19:59:09:BF:F9:90:91:C7:25:4E:4D:D0:E4:55:77:9F:B9:B7
            X509v3 Authority Key Identifier:
                keyid:A9:55:97:45:47:A0:FE:77:6F:E5:98:42:FE:40:95:48:6B:66:93:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/A955974547A0FE776FE59842FE4095486B6693E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A955974547A0FE776FE59842FE4095486B6693E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/0/3230302e3230322e302e302f31392d3234203d3e203130373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:16:e2:67:00:36:bd:4f:61:73:81:b4:e8:40:45:98:a7:9f:
         0e:69:a3:c5:63:d9:f7:06:7b:9f:a2:96:83:10:bc:e0:4d:17:
         56:86:26:3d:f9:10:e2:b7:01:d4:90:63:43:29:01:20:f9:c3:
         a7:31:ba:9c:30:f3:32:c0:84:0d:47:2f:1e:b6:0b:ed:0b:7b:
         59:72:4c:e2:fb:d7:02:e8:78:3a:e7:c4:e4:04:d9:1e:6c:d7:
         d4:4e:78:d8:15:fe:03:f4:12:73:57:50:e1:91:f5:fc:ce:41:
         ae:64:a8:67:13:21:0e:c5:4b:19:f1:10:3d:fa:ed:ba:19:37:
         b1:f8:89:ab:21:89:ed:16:a8:ac:18:82:82:e9:d0:f8:e9:84:
         f1:7e:b1:09:68:fb:24:1f:cd:cb:84:d4:c6:51:e6:c9:c6:0c:
         05:82:4c:09:42:82:24:99:cc:fe:5d:e6:7c:ff:93:e7:e1:27:
         c2:1f:5b:00:dc:dc:b2:52:d6:dd:60:fc:73:71:38:0f:75:47:
         a9:b8:a0:16:d2:f0:7a:3b:60:56:8f:73:8e:12:2e:f7:da:76:
         bb:ae:b1:1f:31:ea:d9:bc:e5:27:34:d9:81:79:ee:f0:f1:2c:
         6d:44:b8:6f:8c:07:36:a8:98:95:71:2f:44:a9:b9:71:36:ff:
         9b:22:0b:e0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULrwsf88pAXnDZfeLNGPhFThdP7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk1NTk3NDU0N0EwRkU3NzZGRTU5ODQyRkU0MDk1NDg2
QjY2OTNFMjAeFw0yMzA5MDQyMjU1MzBaFw0yNDA5MDIyMzAwMzBaMDMxMTAvBgNV
BAMTKDU3M0YxOTU5MDlCRkY5OTA5MUM3MjU0RTRERDBFNDU1Nzc5RkI5QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbKkuIpBHOF6IoFuGO0bx1Wc7i
GkOrpJTsfhyfF9+n1ZrqE5I9OROXC1Ul7EL5Tj/OuARKOWKFc4qf2wSApNyBqbxp
OcsmLwxPwmUsBPp2mGkFnxhCWXHq3z0WiaBZHxs29lIYhsZtbW5EJRj1TPnBLG/v
bciUa/rXnLX0J/s/OEPKfCLnDQil0PodvT6JCJBwk6OsNkz/8QPf96ANeTnIisLk
q32WaDCBbrA+dyBu4Fx3B6vw+Vgd1UX/t6LMlLkaEyXR/SRkDJLIaY4A12tmRzdN
aLgBHv85hk5Y6gcNpaU+lthhhkNxEhwLE1+kcOy31pQ/aN61HpFNfSLYlvs5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUVz8ZWQm/+ZCRxyVOTdDkVXefubcwHwYDVR0j
BBgwFoAUqVWXRUeg/ndv5ZhC/kCVSGtmk+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2MxVTEzWnl0ZXVmSk5aaFdNMW1MWUNlMmtoaUpOa0hvc2RabmhxNEFB
TVUvMC9BOTU1OTc0NTQ3QTBGRTc3NkZFNTk4NDJGRTQwOTU0ODZCNjY5M0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E5NTU5NzQ1NDdBMEZFNzc2
RkU1OTg0MkZFNDA5NTQ4NkI2NjkzRTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NjMVUxM1p5dGV1ZkpOWmhXTTFtTFlDZTJraGlKTmtIb3NkWm5ocTRBQU1VLzAv
MzIzMDMwMmUzMjMwMzIyZTMwMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzMDM3
MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBcjKADANBgkqhkiG9w0BAQsFAAOCAQEAiRbiZwA2vU9h
c4G06EBFmKefDmmjxWPZ9wZ7n6KWgxC84E0XVoYmPfkQ4rcB1JBjQykBIPnDpzG6
nDDzMsCEDUcvHrYL7Qt7WXJM4vvXAuh4OufE5ATZHmzX1E542BX+A/QSc1dQ4ZH1
/M5BrmSoZxMhDsVLGfEQPfrtuhk3sfiJqyGJ7RaorBiCgunQ+OmE8X6xCWj7JB/N
y4TUxlHmycYMBYJMCUKCJJnM/l3mfP+T5+Enwh9bANzcslLW3WD8c3E4D3VHqbig
FtLwejtgVo9zjhIu99p2u66xHzHq2bzlJzTZgXnu8PEsbUS4b4wHNqiYlXEvRKm5
cTb/myIL4A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:15 2024 by rpki-client on console.sobornost.net