Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3232203d3e203532383733.roa
File:                     3230302e3232392e3232302e302f32322d3232203d3e203532383733.roa (raw, json)
Hash identifier:          L7GmU/CDZaeZ5yPQoEbO76AdI5GT2mrq3munLQwmxdM=
Subject key identifier:   05:B1:08:88:88:73:AB:01:28:A4:16:4B:71:DA:86:DA:6E:71:C5:05
Certificate issuer:       /CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Certificate serial:       19F01F6A97196542FB1D62539BD6D7F4C3DE22FA
Authority key identifier: BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3232203d3e203532383733.roa
Signing time:             Mon 04 Sep 2023 19:55:28 +0000
ROA not before:           Mon 04 Sep 2023 19:50:28 +0000
ROA not after:            Mon 02 Sep 2024 19:55:28 +0000
asID:                     52873
IP address blocks:        200.229.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f0:1f:6a:97:19:65:42:fb:1d:62:53:9b:d6:d7:f4:c3:de:22:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
        Validity
            Not Before: Sep  4 19:50:28 2023 GMT
            Not After : Sep  2 19:55:28 2024 GMT
        Subject: CN=05B108888873AB0128A4164B71DA86DA6E71C505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:e4:39:15:e0:6f:26:25:ea:c5:63:de:97:
                    cb:82:05:10:4e:f3:c9:bb:0a:95:85:30:9b:d5:fd:
                    d9:f8:d6:17:55:78:28:ea:24:4e:07:c5:a8:f7:86:
                    35:dd:93:2f:8b:40:58:0b:7c:e6:03:0a:36:b1:1d:
                    fd:88:1a:f2:30:4b:d4:cf:73:81:51:f3:7d:e5:c9:
                    f9:e7:e8:33:bb:63:00:93:cf:97:04:10:bc:d0:7d:
                    6f:d0:a8:f8:70:82:36:6c:e4:bb:7a:f8:d1:e6:85:
                    e0:31:a3:fb:ed:38:76:86:7c:41:86:26:55:7b:b7:
                    2b:5d:ea:17:be:d3:95:da:63:10:1c:7f:ce:84:a2:
                    68:e4:28:f8:1e:8d:7a:6c:b0:b7:bc:16:bb:67:22:
                    78:73:cd:0f:2b:58:3d:eb:e0:7f:27:63:84:e3:d2:
                    4b:c3:61:b0:87:5b:9f:7a:b3:7a:05:c0:a5:65:4f:
                    98:3f:cb:67:f2:81:d5:ae:14:6d:19:7c:10:24:f6:
                    70:b1:be:bd:f6:0a:b2:60:ba:e6:d0:44:bf:0a:3e:
                    52:90:93:30:a7:7e:40:51:11:8a:61:e6:8d:cc:44:
                    a6:e4:fb:69:79:dd:73:c7:f4:71:a3:e7:69:99:94:
                    99:45:d8:87:2c:7e:33:c4:8b:c9:45:a7:f0:b4:de:
                    6a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:08:88:88:73:AB:01:28:A4:16:4B:71:DA:86:DA:6E:71:C5:05
            X509v3 Authority Key Identifier:
                keyid:BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3232203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:9e:87:f7:56:42:d1:c7:c8:26:59:4e:ad:9e:72:fc:38:
         2a:0c:78:96:cb:38:d6:66:aa:7c:fb:9b:7c:c7:13:ef:21:86:
         9e:e1:44:64:97:fc:a2:ba:e8:e4:b6:5e:29:ca:5b:d9:3d:29:
         79:24:d3:08:ac:93:47:ac:56:0e:18:c1:75:5a:3f:e4:80:9d:
         e9:34:8c:1d:e7:d7:e0:90:35:4e:22:05:6a:a4:30:8b:af:4b:
         74:4c:dd:d0:75:8b:27:61:48:f5:04:1d:1c:36:a9:d1:89:0f:
         f4:bc:92:b8:8c:23:a9:1a:23:5c:4b:fa:ad:17:cb:93:d9:a4:
         02:dd:c4:45:fc:12:bf:93:39:29:ab:0a:ee:6a:42:4b:6a:50:
         d1:65:52:26:79:7f:e8:ea:a7:86:bd:1c:84:d1:96:86:89:7c:
         78:b0:dd:83:31:10:90:ab:29:61:a9:c2:2e:e4:44:d6:f4:75:
         4f:c6:94:55:83:94:6a:43:41:b2:9e:31:87:f8:0e:f4:97:9e:
         c3:44:ef:c5:b1:04:a1:87:91:fa:c3:ac:d3:ac:cf:90:84:88:
         ca:dd:54:e7:ad:89:e6:d0:d0:f5:da:a6:0d:a9:09:e0:45:90:
         39:fa:a3:38:9e:47:dd:4b:4a:2a:19:2e:83:df:2f:cc:83:72:
         ea:e0:e0:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGfAfapcZZUL7HWJTm9bX9MPeIvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGNUEzMUNDOEFCRDYwNDNEMzUwMzRGNEQyNzE5NDE1
NDg3RUJBMjAeFw0yMzA5MDQxOTUwMjhaFw0yNDA5MDIxOTU1MjhaMDMxMTAvBgNV
BAMTKDA1QjEwODg4ODg3M0FCMDEyOEE0MTY0QjcxREE4NkRBNkU3MUM1MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjuQ5FeBvJiXqxWPel8uCBRBO
88m7CpWFMJvV/dn41hdVeCjqJE4Hxaj3hjXdky+LQFgLfOYDCjaxHf2IGvIwS9TP
c4FR833lyfnn6DO7YwCTz5cEELzQfW/QqPhwgjZs5Lt6+NHmheAxo/vtOHaGfEGG
JlV7tytd6he+05XaYxAcf86EomjkKPgejXpssLe8FrtnInhzzQ8rWD3r4H8nY4Tj
0kvDYbCHW596s3oFwKVlT5g/y2fygdWuFG0ZfBAk9nCxvr32CrJguubQRL8KPlKQ
kzCnfkBREYph5o3MRKbk+2l53XPH9HGj52mZlJlF2IcsfjPEi8lFp/C03mplAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBbEIiIhzqwEopBZLcdqG2m5xxQUwHwYDVR0j
BBgwFoAUvfWjHMir1gQ9NQNPTScZQVSH66IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC9CREY1QTMxQ0M4QUJENjA0M0QzNTAzNEY0RDI3MTk0MTU0ODdFQkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JERjVBMzFDQzhBQkQ2MDQz
RDM1MDM0RjREMjcxOTQxNTQ4N0VCQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI5dwwDQYJKoZIhvcNAQELBQADggEBAHd+nof3
VkLRx8gmWU6tnnL8OCoMeJbLONZmqnz7m3zHE+8hhp7hRGSX/KK66OS2XinKW9k9
KXkk0wisk0esVg4YwXVaP+SAnek0jB3n1+CQNU4iBWqkMIuvS3RM3dB1iydhSPUE
HRw2qdGJD/S8kriMI6kaI1xL+q0Xy5PZpALdxEX8Er+TOSmrCu5qQktqUNFlUiZ5
f+jqp4a9HITRloaJfHiw3YMxEJCrKWGpwi7kRNb0dU/GlFWDlGpDQbKeMYf4DvSX
nsNE78WxBKGHkfrDrNOsz5CEiMrdVOetiebQ0PXapg2pCeBFkDn6ozieR91LSioZ
LoPfL8yDcurg4JM=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net