Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa
File:                     3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          wASGt3k20ajmXs0gaqx6PthtMzFNXvq2qx6CjcPi8vU=
Subject key identifier:   8D:3C:23:12:86:70:82:C1:94:D1:BF:40:48:11:00:F0:DF:5E:48:7E
Certificate issuer:       /CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
Certificate serial:       7AF2B549CACF061FDB25431A7F65D87D8E7A9D78
Authority key identifier: 3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa
Signing time:             Sat 24 Feb 2024 13:02:39 +0000
ROA not before:           Sat 24 Feb 2024 12:57:39 +0000
ROA not after:            Sat 22 Feb 2025 13:02:39 +0000
asID:                     28279
IP address blocks:        186.208.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f2:b5:49:ca:cf:06:1f:db:25:43:1a:7f:65:d8:7d:8e:7a:9d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
        Validity
            Not Before: Feb 24 12:57:39 2024 GMT
            Not After : Feb 22 13:02:39 2025 GMT
        Subject: CN=8D3C2312867082C194D1BF40481100F0DF5E487E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:04:ed:c2:26:7a:13:2c:74:88:64:0b:ea:
                    f2:e0:2f:24:2b:69:0e:81:d2:b1:4b:62:be:2c:e2:
                    93:9f:05:58:db:13:01:a0:73:38:61:61:cc:9d:9f:
                    cf:f7:cd:83:e0:de:56:fe:00:3a:23:be:27:9d:06:
                    17:84:a0:4c:df:93:c0:0c:f0:d1:1b:95:fc:c1:25:
                    5c:7b:89:f0:6d:91:5e:c7:05:dc:ef:47:52:e6:4d:
                    3e:2a:bc:e8:62:a1:0a:e2:6f:b4:59:8e:b7:46:23:
                    ee:2a:d6:5d:84:13:ac:55:6f:06:a7:8f:b3:a7:5e:
                    cd:e7:f8:ff:8d:ed:0d:39:21:e9:dc:b2:f3:7c:cd:
                    2f:fe:54:32:00:0e:b1:ac:79:e9:96:a7:e8:cf:1f:
                    32:9a:72:e6:cc:4f:e6:e0:9c:4d:fb:50:da:35:28:
                    0d:0a:12:e6:df:67:11:43:56:63:45:68:40:4c:4b:
                    1f:26:61:b3:c7:95:fc:00:9c:b9:09:c2:26:da:c2:
                    aa:b0:9d:94:0c:3b:a6:c3:fb:78:72:24:97:1e:63:
                    0b:f1:34:ab:b5:a7:d3:21:02:3c:dc:ac:e7:ea:18:
                    23:d9:e0:10:65:6e:91:9f:1b:28:41:05:0a:85:b2:
                    22:9b:0e:f0:53:44:9f:51:06:ed:ce:39:e8:8c:da:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3C:23:12:86:70:82:C1:94:D1:BF:40:48:11:00:F0:DF:5E:48:7E
            X509v3 Authority Key Identifier:
                keyid:3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:c4:ba:9e:83:4a:4c:14:1c:20:52:63:86:9e:7c:ca:1c:f7:
         38:60:45:74:b1:9a:ac:4e:60:45:05:a1:af:ab:d8:12:c6:6c:
         8d:9b:7d:39:db:fd:73:8f:e4:af:29:b9:e4:1b:66:80:9e:51:
         0f:23:3a:13:d7:2a:ba:3b:fd:11:83:a3:bb:f2:fc:d6:b9:d9:
         81:57:36:b5:4c:36:df:bc:69:22:ea:db:3f:fe:60:63:b2:95:
         97:35:fa:bf:26:9f:3f:37:68:ca:aa:53:6a:40:01:5d:17:29:
         62:76:e4:bb:b0:22:1c:58:2e:ec:2e:c8:6c:4a:81:4d:5b:37:
         81:fa:12:73:0f:c9:91:4e:51:dc:1d:d7:0b:7c:a4:ed:37:03:
         6c:3d:91:52:28:5b:ce:07:30:9b:ea:02:ee:54:aa:39:f9:a9:
         fa:72:4c:04:0f:45:71:72:df:c0:13:96:0c:e3:58:f9:93:05:
         f9:8f:2b:13:88:c2:e9:9e:63:55:f9:7b:83:3c:4d:19:8a:b8:
         97:d6:61:7e:0b:2e:07:e3:60:a9:5c:6f:b3:bf:24:f5:9f:90:
         6a:e6:7c:ff:7b:98:37:1d:a2:48:cb:f2:c3:6e:ac:7f:b5:d8:
         7e:30:d9:06:5c:f1:60:96:3f:2c:5b:7c:12:ab:f8:82:49:e8:
         61:0a:f0:65
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUevK1ScrPBh/bJUMaf2XYfY56nXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I2NTBBRTEzMDIxN0RDMTkxRUE0NEEwMjJCQUJGMkVF
Q0U2QkEzNzAeFw0yNDAyMjQxMjU3MzlaFw0yNTAyMjIxMzAyMzlaMDMxMTAvBgNV
BAMTKDhEM0MyMzEyODY3MDgyQzE5NEQxQkY0MDQ4MTEwMEYwREY1RTQ4N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXBQTtwiZ6Eyx0iGQL6vLgLyQr
aQ6B0rFLYr4s4pOfBVjbEwGgczhhYcydn8/3zYPg3lb+ADojviedBheEoEzfk8AM
8NEblfzBJVx7ifBtkV7HBdzvR1LmTT4qvOhioQrib7RZjrdGI+4q1l2EE6xVbwan
j7OnXs3n+P+N7Q05IencsvN8zS/+VDIADrGseemWp+jPHzKacubMT+bgnE37UNo1
KA0KEubfZxFDVmNFaEBMSx8mYbPHlfwAnLkJwibawqqwnZQMO6bD+3hyJJceYwvx
NKu1p9MhAjzcrOfqGCPZ4BBlbpGfGyhBBQqFsiKbDvBTRJ9RBu3OOeiM2ia5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUjTwjEoZwgsGU0b9ASBEA8N9eSH4wHwYDVR0j
BBgwFoAUO2UK4TAhfcGR6kSgIrq/LuzmujcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9jUXZ4a1dkakM1dnZ2WlVuWjQyQWRMWVFWcTg4ZXJzYmRVdm96bXROdE04
LzAvM0I2NTBBRTEzMDIxN0RDMTkxRUE0NEEwMjJCQUJGMkVFQ0U2QkEzNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8zQjY1MEFFMTMwMjE3REMxOTFF
QTQ0QTAyMkJBQkYyRUVDRTZCQTM3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9j
UXZ4a1dkakM1dnZ2WlVuWjQyQWRMWVFWcTg4ZXJzYmRVdm96bXROdE04LzAvMzEz
ODM2MmUzMjMwMzgyZTMxMzkzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgz
MjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAS60MAwDQYJKoZIhvcNAQELBQADggEBALjEup6DSkwU
HCBSY4aefMoc9zhgRXSxmqxOYEUFoa+r2BLGbI2bfTnb/XOP5K8pueQbZoCeUQ8j
OhPXKro7/RGDo7vy/Na52YFXNrVMNt+8aSLq2z/+YGOylZc1+r8mnz83aMqqU2pA
AV0XKWJ25LuwIhxYLuwuyGxKgU1bN4H6EnMPyZFOUdwd1wt8pO03A2w9kVIoW84H
MJvqAu5Uqjn5qfpyTAQPRXFy38ATlgzjWPmTBfmPKxOIwumeY1X5e4M8TRmKuJfW
YX4LLgfjYKlcb7O/JPWfkGrmfP97mDcdokjL8sNurH+12H4w2QZc8WCWPyxbfBKr
+IJJ6GEK8GU=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org