Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32302e302f32332d3233203d3e20323636313930.roa
File:                     3230302e392e32302e302f32332d3233203d3e20323636313930.roa (raw, json)
Hash identifier:          EVTWiJg6gLlOdCIXtj8eh7CZbd477Cag+Npe2Lu+rIQ=
Subject key identifier:   E1:F6:EA:7E:B7:33:04:9F:9A:79:1B:A7:92:1E:1D:F9:18:14:F5:6A
Certificate issuer:       /CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
Certificate serial:       51AD5A1932809158D7A668CB1D7F320EDEBD7839
Authority key identifier: 44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32302e302f32332d3233203d3e20323636313930.roa
Signing time:             Thu 21 Sep 2023 21:30:10 +0000
ROA not before:           Thu 21 Sep 2023 21:25:10 +0000
ROA not after:            Thu 19 Sep 2024 21:30:10 +0000
asID:                     266190
IP address blocks:        200.9.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ad:5a:19:32:80:91:58:d7:a6:68:cb:1d:7f:32:0e:de:bd:78:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
        Validity
            Not Before: Sep 21 21:25:10 2023 GMT
            Not After : Sep 19 21:30:10 2024 GMT
        Subject: CN=E1F6EA7EB733049F9A791BA7921E1DF91814F56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:30:16:f7:a4:cd:b2:07:a1:dc:22:da:26:
                    ab:59:11:db:39:26:20:96:dd:da:01:e8:56:f2:2f:
                    41:5c:86:40:c2:d2:1f:2f:62:99:e0:40:51:e2:32:
                    39:5b:20:bf:ee:3c:f0:f3:20:37:34:3b:99:0f:61:
                    e8:6d:38:f7:ca:32:3b:68:cc:df:cb:1d:da:62:ad:
                    ec:1b:c7:ae:dc:b4:09:71:a8:0e:a4:af:d6:38:9d:
                    ad:24:b0:b3:f4:b4:68:83:57:82:1e:68:42:ff:46:
                    f7:e9:3c:06:d2:1a:c9:ed:f5:d9:8e:cb:4b:34:75:
                    cb:85:59:53:9f:a5:14:f6:d2:81:a6:18:6f:03:3b:
                    51:01:04:bb:87:b0:fe:a2:31:59:5b:bd:39:b9:d2:
                    75:83:8d:16:f3:5a:5b:a4:a9:7d:e5:8f:1f:86:8d:
                    29:95:86:32:ae:0a:cd:46:52:fb:79:c0:15:a0:29:
                    4b:4c:44:59:c1:6c:7c:08:b6:00:61:ba:61:21:93:
                    6e:6e:a3:a6:6d:39:8b:9b:a8:c0:2a:f7:51:34:c9:
                    d2:47:fa:5a:51:59:7a:8d:e8:5e:24:33:92:cb:d3:
                    b4:22:1f:d6:5f:13:ee:6b:db:96:70:36:0a:d4:c4:
                    ce:ff:3c:8e:28:ac:98:cd:98:0b:dc:a8:22:c2:05:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F6:EA:7E:B7:33:04:9F:9A:79:1B:A7:92:1E:1D:F9:18:14:F5:6A
            X509v3 Authority Key Identifier:
                keyid:44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32302e302f32332d3233203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:84:1f:84:3a:7d:78:40:48:74:72:47:b1:1e:7d:ee:e9:e6:
         4f:f8:50:cd:45:22:52:7a:61:58:17:69:75:a7:6f:c7:b4:dd:
         e6:e4:d4:81:72:71:87:39:53:22:cb:85:14:e3:c5:5b:16:4c:
         84:d3:b7:4f:da:7d:08:17:6e:ad:cd:5f:74:b5:cc:7f:3c:42:
         c9:47:e4:bb:d6:02:db:2e:ed:fd:b1:0a:f1:7e:45:73:e1:9b:
         df:76:ce:94:56:c8:1b:03:8a:cf:7b:34:d5:bb:30:6e:34:a5:
         ed:26:bc:2a:c9:2c:64:37:66:b6:9c:f3:23:3a:20:a2:b5:25:
         6a:c6:77:a7:e3:5b:e7:60:fa:77:5b:03:fc:79:3f:d1:29:38:
         a0:6b:96:29:14:77:2f:ac:ca:fc:f0:58:2a:10:0e:0f:53:8a:
         2b:86:bc:dc:5e:06:16:fb:e0:55:dd:b2:99:07:bc:85:4e:3c:
         ac:cd:9b:18:40:96:f7:21:bc:4e:3e:e5:aa:a7:a5:e3:d7:e0:
         a0:8b:a9:5c:6c:dc:4a:d6:b0:54:2e:96:bd:7b:c5:53:ba:3e:
         a7:cf:49:0c:66:53:a4:b0:0c:7c:8f:45:a1:f2:da:7a:76:08:
         9a:89:5b:07:ea:7d:81:9b:1d:8f:e8:5e:74:f7:e0:70:42:ae:
         21:3a:eb:36
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUa1aGTKAkVjXpmjLHX8yDt69eDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzQzUyQTFFMUIzRTE3NTc4MDk0QUVCNTJCNDYwMEU2
NjUwQ0RENTAeFw0yMzA5MjEyMTI1MTBaFw0yNDA5MTkyMTMwMTBaMDMxMTAvBgNV
BAMTKEUxRjZFQTdFQjczMzA0OUY5QTc5MUJBNzkyMUUxREY5MTgxNEY1NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2DAW96TNsgeh3CLaJqtZEds5
JiCW3doB6FbyL0FchkDC0h8vYpngQFHiMjlbIL/uPPDzIDc0O5kPYehtOPfKMjto
zN/LHdpirewbx67ctAlxqA6kr9Y4na0ksLP0tGiDV4IeaEL/RvfpPAbSGsnt9dmO
y0s0dcuFWVOfpRT20oGmGG8DO1EBBLuHsP6iMVlbvTm50nWDjRbzWlukqX3ljx+G
jSmVhjKuCs1GUvt5wBWgKUtMRFnBbHwItgBhumEhk25uo6ZtOYubqMAq91E0ydJH
+lpRWXqN6F4kM5LL07QiH9ZfE+5r25ZwNgrUxM7/PI4orJjNmAvcqCLCBdtbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4fbqfrczBJ+aeRunkh4d+RgU9WowHwYDVR0j
BBgwFoAURDxSoeGz4XV4CUrrUrRgDmZQzdUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWN2cHlBWXFVZE02cmNZYkhDOXdQVU01WnpyTUpQUGFnSHpKZUxSVkJ4
RFYvMC80NDNDNTJBMUUxQjNFMTc1NzgwOTRBRUI1MkI0NjAwRTY2NTBDREQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0M0M1MkExRTFCM0UxNzU3
ODA5NEFFQjUyQjQ2MDBFNjY1MENERDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VjdnB5QVlxVWRNNnJjWWJIQzl3UFVNNVp6ck1KUFBhZ0h6SmVMUlZCeERWLzAv
MzIzMDMwMmUzOTJlMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMx
MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcgJFDANBgkqhkiG9w0BAQsFAAOCAQEAeIQfhDp9eEBI
dHJHsR597unmT/hQzUUiUnphWBdpdadvx7Td5uTUgXJxhzlTIsuFFOPFWxZMhNO3
T9p9CBdurc1fdLXMfzxCyUfku9YC2y7t/bEK8X5Fc+Gb33bOlFbIGwOKz3s01bsw
bjSl7Sa8KsksZDdmtpzzIzogorUlasZ3p+Nb52D6d1sD/Hk/0Sk4oGuWKRR3L6zK
/PBYKhAOD1OKK4a83F4GFvvgVd2ymQe8hU48rM2bGECW9yG8Tj7lqqel49fgoIup
XGzcStawVC6WvXvFU7o+p89JDGZTpLAMfI9FofLaenYImolbB+p9gZsdj+hedPfg
cEKuITrrNg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:21 2024 by rpki-client on console.sobornost.net