Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e382e302f32322d3232203d3e20323632373235.roa
File:                     3138362e3139322e382e302f32322d3232203d3e20323632373235.roa (raw, json)
Hash identifier:          4MrH61b7gzSnXaYkK4v4Exv/9M++fh6K3nJmwxEj3CQ=
Subject key identifier:   CD:DD:15:D9:10:33:F6:B3:44:D9:63:47:C3:3F:07:33:30:4E:A2:AB
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       5608F16B73901A2EFA136D4BCD255CB0DD3C9F38
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e382e302f32322d3232203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:51 +0000
ROA not before:           Mon 11 Nov 2024 20:56:51 +0000
ROA not after:            Mon 10 Nov 2025 21:01:51 +0000
asID:                     262725
IP address blocks:        186.192.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:08:f1:6b:73:90:1a:2e:fa:13:6d:4b:cd:25:5c:b0:dd:3c:9f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:51 2024 GMT
            Not After : Nov 10 21:01:51 2025 GMT
        Subject: CN=3082010A0282010100AF536C3808E2F74228CB1104C42AAE5618FD85EC04949C733EF605163618B41B14B627C10EF1498BF92F2F582228E3FD597A17BE79C186889F20CA6B787A58DAF559EFBDCEE2012991B40DF2A2A3A1A72559BC0A3035D2FB54FF463F272B3FC6DE63BC180717C425FC4E7963D809BA03E7413377E6CA2137DAF04F24839C64863D11203BD5B3D1581D0BDCB6985EF541090A09EF15F99FE911AA395E4D305691267E4235EF76120038D2110C875E217DA7DE2DB7F43CFD8575855967CCA5E4FFECAC3064297CB04C2D57C000FF2B2CC41E96DDBBBAA7FCC84CA52CA64353FFC3F44393125540B17819EE1142697148860C78FD32B4F3534C838847B2CEE406210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:6c:38:08:e2:f7:42:28:cb:11:04:c4:2a:
                    ae:56:18:fd:85:ec:04:94:9c:73:3e:f6:05:16:36:
                    18:b4:1b:14:b6:27:c1:0e:f1:49:8b:f9:2f:2f:58:
                    22:28:e3:fd:59:7a:17:be:79:c1:86:88:9f:20:ca:
                    6b:78:7a:58:da:f5:59:ef:bd:ce:e2:01:29:91:b4:
                    0d:f2:a2:a3:a1:a7:25:59:bc:0a:30:35:d2:fb:54:
                    ff:46:3f:27:2b:3f:c6:de:63:bc:18:07:17:c4:25:
                    fc:4e:79:63:d8:09:ba:03:e7:41:33:77:e6:ca:21:
                    37:da:f0:4f:24:83:9c:64:86:3d:11:20:3b:d5:b3:
                    d1:58:1d:0b:dc:b6:98:5e:f5:41:09:0a:09:ef:15:
                    f9:9f:e9:11:aa:39:5e:4d:30:56:91:26:7e:42:35:
                    ef:76:12:00:38:d2:11:0c:87:5e:21:7d:a7:de:2d:
                    b7:f4:3c:fd:85:75:85:59:67:cc:a5:e4:ff:ec:ac:
                    30:64:29:7c:b0:4c:2d:57:c0:00:ff:2b:2c:c4:1e:
                    96:dd:bb:ba:a7:fc:c8:4c:a5:2c:a6:43:53:ff:c3:
                    f4:43:93:12:55:40:b1:78:19:ee:11:42:69:71:48:
                    86:0c:78:fd:32:b4:f3:53:4c:83:88:47:b2:ce:e4:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DD:15:D9:10:33:F6:B3:44:D9:63:47:C3:3F:07:33:30:4E:A2:AB
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e382e302f32322d3232203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:e9:85:2a:b6:9a:40:4e:2a:d8:e9:4d:97:b4:78:a1:0a:81:
         1f:33:f9:02:2f:d9:d7:09:74:44:47:f7:87:d6:dd:ed:0f:59:
         b5:eb:a3:a4:1e:b8:93:55:9f:3e:28:9f:3a:28:43:1c:d1:03:
         ad:f0:74:ac:89:94:ac:ff:01:03:08:2e:1c:37:e2:fe:a1:30:
         21:0a:8e:66:23:c3:7d:53:50:bb:0c:16:78:d1:12:25:63:70:
         95:19:f8:63:7f:9b:25:a3:75:a7:9f:eb:2b:a0:ee:cc:89:6c:
         07:84:e7:e6:e8:e4:0c:cc:d5:dc:26:ff:7c:fd:d2:28:18:95:
         9b:57:2a:26:4f:9c:72:49:10:7f:52:ae:65:bc:10:25:06:a9:
         f9:6e:de:a0:6d:39:7c:c5:77:78:b3:a4:43:88:06:76:e9:0a:
         02:61:9a:e1:77:45:fc:bd:fc:75:89:8c:2c:d6:bf:e1:07:32:
         4b:67:f3:ad:8d:c6:e0:c8:0a:1b:56:18:e6:33:b3:43:eb:8a:
         77:32:26:68:58:08:db:fa:02:04:cf:c9:12:64:36:70:df:b8:
         f8:c7:8b:24:7a:52:2d:61:08:20:a7:26:83:fb:e0:8c:c7:a6:
         68:9c:4e:4a:45:09:5a:72:49:27:5d:53:66:9a:4d:ec:b7:eb:
         66:fa:4b:c7
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUVgjxa3OQGi76E21LzSVcsN08nzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBERTBFNkUzRDYyMUY4MzE3MzAyNTg0OEE3ODIxNkE3
NUU1MDJDQzAeFw0yNDExMTEyMDU2NTFaFw0yNTExMTAyMTAxNTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUY1MzZDMzgwOEUyRjc0MjI4
Q0IxMTA0QzQyQUFFNTYxOEZEODVFQzA0OTQ5QzczM0VGNjA1MTYzNjE4QjQxQjE0
QjYyN0MxMEVGMTQ5OEJGOTJGMkY1ODIyMjhFM0ZENTk3QTE3QkU3OUMxODY4ODlG
MjBDQTZCNzg3QTU4REFGNTU5RUZCRENFRTIwMTI5OTFCNDBERjJBMkEzQTFBNzI1
NTlCQzBBMzAzNUQyRkI1NEZGNDYzRjI3MkIzRkM2REU2M0JDMTgwNzE3QzQyNUZD
NEU3OTYzRDgwOUJBMDNFNzQxMzM3N0U2Q0EyMTM3REFGMDRGMjQ4MzlDNjQ4NjNE
MTEyMDNCRDVCM0QxNTgxRDBCRENCNjk4NUVGNTQxMDkwQTA5RUYxNUY5OUZFOTEx
QUEzOTVFNEQzMDU2OTEyNjdFNDIzNUVGNzYxMjAwMzhEMjExMEM4NzVFMjE3REE3
REUyREI3RjQzQ0ZEODU3NTg1NTk2N0NDQTVFNEZGRUNBQzMwNjQyOTdDQjA0QzJE
NTdDMDAwRkYyQjJDQzQxRTk2RERCQkJBQTdGQ0M4NENBNTJDQTY0MzUzRkZDM0Y0
NDM5MzEyNTU0MEIxNzgxOUVFMTE0MjY5NzE0ODg2MEM3OEZEMzJCNEYzNTM0Qzgz
ODg0N0IyQ0VFNDA2MjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr1NsOAji90IoyxEExCquVhj9hewElJxzPvYFFjYYtBsUtifBDvFJ
i/kvL1giKOP9WXoXvnnBhoifIMpreHpY2vVZ773O4gEpkbQN8qKjoaclWbwKMDXS
+1T/Rj8nKz/G3mO8GAcXxCX8Tnlj2Am6A+dBM3fmyiE32vBPJIOcZIY9ESA71bPR
WB0L3LaYXvVBCQoJ7xX5n+kRqjleTTBWkSZ+QjXvdhIAONIRDIdeIX2n3i239Dz9
hXWFWWfMpeT/7KwwZCl8sEwtV8AA/yssxB6W3bu6p/zITKUspkNT/8P0Q5MSVUCx
eBnuEUJpcUiGDHj9MrTzU0yDiEeyzuQGIQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FM3dFdkQM/azRNljR8M/BzMwTqKrMB8GA1UdIwQYMBaAFCDeDm49Yh+DFzAlhIp4
IWp15QLMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNLWGthbjFQMXhjN0pO
Smp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAvMjBERTBFNkUzRDYyMUY4
MzE3MzAyNTg0OEE3ODIxNkE3NUU1MDJDQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMERFMEU2RTNENjIxRjgzMTczMDI1ODQ4QTc4MjE2QTc1RTUw
MkNDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS1hrYW4xUDF4YzdKTkpqdFBl
TFRtc0dHUXQ4aWZSdFZaUFlUdXJpM05VUi8wLzMxMzgzNjJlMzEzOTMyMmUzODJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjM3MzIzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArrA
CDANBgkqhkiG9w0BAQsFAAOCAQEAUemFKraaQE4q2OlNl7R4oQqBHzP5Ai/Z1wl0
REf3h9bd7Q9ZteujpB64k1WfPiifOihDHNEDrfB0rImUrP8BAwguHDfi/qEwIQqO
ZiPDfVNQuwwWeNESJWNwlRn4Y3+bJaN1p5/rK6DuzIlsB4Tn5ujkDMzV3Cb/fP3S
KBiVm1cqJk+cckkQf1KuZbwQJQap+W7eoG05fMV3eLOkQ4gGdukKAmGa4XdF/L38
dYmMLNa/4QcyS2fzrY3G4MgKG1YY5jOzQ+uKdzImaFgI2/oCBM/JEmQ2cN+4+MeL
JHpSLWEIIKcmg/vgjMemaJxOSkUJWnJJJ11TZppN7LfrZvpLxw==
-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:11 2024 by rpki-client on console-fra.rpki-client.org