Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e342e302f32332d3233203d3e20323632373235.roa
File:                     3138362e3139322e342e302f32332d3233203d3e20323632373235.roa (raw, json)
Hash identifier:          wqruWz7ufuPdtiRbzbDwx1zhjHbIxnIpmAMSZHfNp18=
Subject key identifier:   05:14:1A:9D:FB:08:AF:6D:07:77:28:CD:BA:82:CA:1B:38:81:96:9C
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       2AAA8AD03E0553A265CF7D3F6DDAFD9CC489B762
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e342e302f32332d3233203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:50 +0000
ROA not before:           Mon 11 Nov 2024 20:56:50 +0000
ROA not after:            Mon 10 Nov 2025 21:01:50 +0000
asID:                     262725
IP address blocks:        186.192.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:aa:8a:d0:3e:05:53:a2:65:cf:7d:3f:6d:da:fd:9c:c4:89:b7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:50 2024 GMT
            Not After : Nov 10 21:01:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:f0:1e:04:ef:bf:a2:25:d4:2f:8b:3e:61:
                    4e:13:dd:9a:f3:0c:d2:3f:d5:36:dc:b1:85:9e:34:
                    9a:2e:33:e1:90:b7:d5:b8:60:1b:ab:74:a6:c9:43:
                    9c:3a:f4:e1:5c:7a:d8:cb:17:3c:ad:2b:c2:60:59:
                    05:1c:02:43:bf:58:b4:03:60:d4:15:e2:4d:f1:80:
                    4c:69:83:23:34:e9:1b:81:89:14:06:33:72:92:99:
                    7f:7f:9a:08:2f:4a:ce:76:f5:e3:d3:8c:f8:ef:22:
                    31:81:0c:21:5e:2a:df:e6:e2:e3:91:0e:16:b0:af:
                    df:c8:ca:e3:f4:b4:16:2f:c1:bc:45:e2:7f:25:ee:
                    fd:f5:f5:8b:1a:e6:64:17:e0:89:cd:c6:f2:65:f4:
                    0e:6b:63:90:6c:ee:cd:36:5f:cf:70:36:6a:64:94:
                    19:26:d8:91:1e:a7:80:95:92:36:a5:b3:f7:0d:71:
                    df:d0:43:ff:94:3b:2e:2d:4f:ee:ef:72:9f:dc:a5:
                    6c:27:a6:e9:b0:7f:81:a5:56:bc:62:2f:5e:17:31:
                    a1:fc:ec:d0:b7:20:1c:61:d2:b3:9d:a5:aa:3a:bb:
                    a7:27:8b:da:85:34:62:a7:8f:81:52:9c:cb:b8:fa:
                    ff:9b:f3:2d:88:c4:23:ee:e8:e6:f1:16:06:3d:b9:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:14:1A:9D:FB:08:AF:6D:07:77:28:CD:BA:82:CA:1B:38:81:96:9C
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e342e302f32332d3233203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:51:b7:e6:2e:e1:30:b4:6b:24:1f:db:b5:34:97:6b:5b:
         8d:b9:cd:f2:17:7a:07:57:90:a4:5e:bc:e1:d1:c5:38:e6:22:
         ca:aa:a3:25:8d:9b:5b:55:eb:3e:e9:5c:ee:c7:a8:85:12:61:
         69:01:c3:51:f9:6c:4d:72:4a:a0:9c:23:eb:e6:d2:7f:df:78:
         80:49:7a:39:2a:57:36:a6:be:74:7e:81:8b:c9:af:c8:e1:99:
         2e:b2:17:c3:48:d3:c9:9d:36:be:7f:73:3f:66:60:b4:aa:df:
         c3:19:cd:4a:9f:e4:82:26:b2:54:50:70:b9:30:b3:4a:ba:89:
         21:ed:ca:3a:b0:90:ae:76:58:ee:ee:df:aa:43:7d:f4:16:71:
         00:5e:81:0a:60:1e:c9:b7:db:4e:26:0c:8e:81:5d:71:1f:ec:
         fe:02:a9:65:47:28:79:de:a3:33:b7:06:2b:b4:8c:f1:99:4e:
         b3:69:a4:df:fe:3f:6e:20:b1:55:70:9f:2c:b8:db:f8:7b:7d:
         c9:3a:74:ad:9c:74:4e:3a:5c:1d:1c:1f:f7:8e:20:12:3d:1f:
         8a:fb:95:08:01:ae:2a:ab:ec:20:81:be:b4:9d:b3:98:a4:ba:
         e3:37:38:9c:dc:80:50:71:d5:1f:70:e8:3f:ce:6a:b1:89:7b:
         03:2f:ed:ef
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUKqqK0D4FU6Jlz30/bdr9nMSJt2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBERTBFNkUzRDYyMUY4MzE3MzAyNTg0OEE3ODIxNkE3
NUU1MDJDQzAeFw0yNDExMTEyMDU2NTBaFw0yNTExMTAyMTAxNTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0JCREYwMUUwNEVGQkZBMjI1
RDQyRjhCM0U2MTRFMTNERDlBRjMwQ0QyM0ZENTM2RENCMTg1OUUzNDlBMkUzM0Ux
OTBCN0Q1Qjg2MDFCQUI3NEE2Qzk0MzlDM0FGNEUxNUM3QUQ4Q0IxNzNDQUQyQkMy
NjA1OTA1MUMwMjQzQkY1OEI0MDM2MEQ0MTVFMjRERjE4MDRDNjk4MzIzMzRFOTFC
ODE4OTE0MDYzMzcyOTI5OTdGN0Y5QTA4MkY0QUNFNzZGNUUzRDM4Q0Y4RUYyMjMx
ODEwQzIxNUUyQURGRTZFMkUzOTEwRTE2QjBBRkRGQzhDQUUzRjRCNDE2MkZDMUJD
NDVFMjdGMjVFRUZERjVGNThCMUFFNjY0MTdFMDg5Q0RDNkYyNjVGNDBFNkI2Mzkw
NkNFRUNEMzY1RkNGNzAzNjZBNjQ5NDE5MjZEODkxMUVBNzgwOTU5MjM2QTVCM0Y3
MEQ3MURGRDA0M0ZGOTQzQjJFMkQ0RkVFRUY3MjlGRENBNTZDMjdBNkU5QjA3Rjgx
QTU1NkJDNjIyRjVFMTczMUExRkNFQ0QwQjcyMDFDNjFEMkIzOURBNUFBM0FCQkE3
Mjc4QkRBODUzNDYyQTc4RjgxNTI5Q0NCQjhGQUZGOUJGMzJEODhDNDIzRUVFOEU2
RjExNjA2M0RCOUE2NDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy73wHgTvv6Il1C+LPmFOE92a8wzSP9U23LGFnjSaLjPhkLfVuGAb
q3SmyUOcOvThXHrYyxc8rSvCYFkFHAJDv1i0A2DUFeJN8YBMaYMjNOkbgYkUBjNy
kpl/f5oIL0rOdvXj04z47yIxgQwhXirf5uLjkQ4WsK/fyMrj9LQWL8G8ReJ/Je79
9fWLGuZkF+CJzcbyZfQOa2OQbO7NNl/PcDZqZJQZJtiRHqeAlZI2pbP3DXHf0EP/
lDsuLU/u73Kf3KVsJ6bpsH+BpVa8Yi9eFzGh/OzQtyAcYdKznaWqOrunJ4vahTRi
p4+BUpzLuPr/m/MtiMQj7ujm8RYGPbmmRQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAUUGp37CK9tB3cozbqCyhs4gZacMB8GA1UdIwQYMBaAFCDeDm49Yh+DFzAlhIp4
IWp15QLMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAvMjBERTBFNkUzRDYyMUY4
MzE3MzAyNTg0OEE3ODIxNkE3NUU1MDJDQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMERFMEU2RTNENjIxRjgzMTczMDI1ODQ4QTc4MjE2QTc1RTUw
MkNDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8wLzMxMzgzNjJlMzEzOTMyMmUzNDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM3MzIzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrA
BDANBgkqhkiG9w0BAQsFAAOCAQEAd41Rt+Yu4TC0ayQf27U0l2tbjbnN8hd6B1eQ
pF684dHFOOYiyqqjJY2bW1XrPulc7seohRJhaQHDUflsTXJKoJwj6+bSf994gEl6
OSpXNqa+dH6Bi8mvyOGZLrIXw0jTyZ02vn9zP2ZgtKrfwxnNSp/kgiayVFBwuTCz
SrqJIe3KOrCQrnZY7u7fqkN99BZxAF6BCmAeybfbTiYMjoFdcR/s/gKpZUcoed6j
M7cGK7SM8ZlOs2mk3/4/biCxVXCfLLjb+Ht9yTp0rZx0TjpcHRwf944gEj0fivuV
CAGuKqvsIIG+tJ2zmKS64zc4nNyAUHHVH3DoP85qsYl7Ay/t7w==
-----END CERTIFICATE-----
Generated at Tue Nov 12 19:19:58 2024 by rpki-client on console-ams.rpki-client.org