Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa
File:                     3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          O1xtvu+idAXquIVSMkqDqKkc6UmXJgYQv0zlUf9Wagw=
Subject key identifier:   12:54:19:A4:92:18:DF:F1:BC:31:C3:96:E5:48:33:F6:65:C5:7B:C2
Certificate issuer:       /CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
Certificate serial:       14BB7648C404C4DF8A69F2AD48F9B0DCA1C3F073
Authority key identifier: BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa
Signing time:             Thu 24 Aug 2023 20:00:00 +0000
ROA not before:           Thu 24 Aug 2023 19:55:00 +0000
ROA not after:            Thu 22 Aug 2024 20:00:00 +0000
asID:                     262903
IP address blocks:        186.251.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bb:76:48:c4:04:c4:df:8a:69:f2:ad:48:f9:b0:dc:a1:c3:f0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
        Validity
            Not Before: Aug 24 19:55:00 2023 GMT
            Not After : Aug 22 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:7b:b8:70:91:f8:40:56:6b:c4:25:b8:87:
                    46:63:51:6a:3e:57:ce:84:b1:6a:2d:8a:ef:85:35:
                    e4:1b:51:26:f2:7e:c6:d3:b1:ad:b0:a2:b6:ae:fc:
                    ab:7b:21:55:06:78:b5:26:07:47:0b:99:c2:a4:f7:
                    93:1c:61:13:92:3b:ab:03:d9:89:c2:f9:80:38:02:
                    75:61:84:23:25:be:0b:0b:d8:0a:94:df:d0:39:73:
                    be:af:3e:cc:c7:51:ca:4d:44:94:78:4d:4c:c1:26:
                    d1:ac:ea:eb:78:e6:66:bb:4e:1d:37:3e:cc:10:92:
                    86:98:73:c4:17:f0:89:61:1a:12:62:ad:a9:67:ad:
                    74:7f:e4:89:4c:94:6f:48:5e:e1:be:1b:48:19:62:
                    76:3e:d9:45:b0:e8:55:8d:36:c9:46:44:bc:74:ea:
                    50:fb:81:18:7a:65:40:f2:c6:69:a5:be:aa:45:5b:
                    26:78:4d:0f:17:56:0d:4c:cb:b2:06:a3:b5:25:80:
                    14:53:13:ea:a6:dd:e2:6f:4e:27:fb:06:e2:3f:0b:
                    c7:79:91:8f:08:88:75:fb:01:84:9a:9b:4d:fa:9f:
                    84:29:6b:d4:d0:fe:1f:55:de:e4:e6:18:14:76:2a:
                    44:06:d9:56:61:3e:ce:0b:78:74:c6:64:45:3d:65:
                    9d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:54:19:A4:92:18:DF:F1:BC:31:C3:96:E5:48:33:F6:65:C5:7B:C2
            X509v3 Authority Key Identifier:
                keyid:BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:de:26:a8:30:82:1f:32:81:bb:e2:31:bd:3c:79:7f:d1:98:
         a2:73:f8:6c:5f:b8:24:2d:90:ef:c1:9e:29:e3:56:d2:d7:40:
         f5:2b:aa:68:2e:0b:63:87:c0:11:48:0a:b0:e4:41:32:56:ae:
         c7:73:2a:3c:3f:75:af:ae:07:83:78:8b:59:8c:d7:a3:b3:20:
         5d:6f:cf:77:03:bb:66:fc:31:d9:bb:d2:05:57:1b:bb:5b:67:
         fb:d7:1e:e8:19:fe:fd:54:5c:c3:b0:67:bb:a6:86:ad:c4:8c:
         fc:8b:cd:29:e9:65:17:0a:98:db:6f:c0:45:ea:65:c5:95:95:
         1a:ed:fd:3e:61:92:da:a1:ea:34:b7:9c:a3:98:41:5a:d9:b0:
         b7:05:9c:27:7a:46:71:44:26:d6:81:31:e5:20:90:ef:94:65:
         5a:e3:a6:cf:46:1a:29:0e:d3:19:2d:08:4b:be:46:66:4b:01:
         a8:c7:2f:f2:83:c2:c0:35:c7:5a:b8:9f:f1:8d:43:9c:c4:1f:
         ce:4f:2b:0e:89:ff:c3:26:2b:f4:38:bb:d2:b3:c6:fb:4e:78:
         62:f0:26:99:cd:74:7a:f5:ab:68:f0:a4:38:e3:73:0d:38:9a:
         e4:a8:89:99:4a:fc:fe:13:0b:01:ce:1b:9f:7c:55:bf:e4:86:
         08:c0:36:f8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUFLt2SMQExN+KafKtSPmw3KHD8HMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkExREI0OTU2RDhGNUVGQUYwOTcwRjE3MUQ2NzYzQTI4
NjYzM0M0RjAeFw0yMzA4MjQxOTU1MDBaFw0yNDA4MjIyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkVBRjdCQjg3MDkxRjg0MDU2
NkJDNDI1Qjg4NzQ2NjM1MTZBM0U1N0NFODRCMTZBMkQ4QUVGODUzNUU0MUI1MTI2
RjI3RUM2RDNCMUFEQjBBMkI2QUVGQ0FCN0IyMTU1MDY3OEI1MjYwNzQ3MEI5OUMy
QTRGNzkzMUM2MTEzOTIzQkFCMDNEOTg5QzJGOTgwMzgwMjc1NjE4NDIzMjVCRTBC
MEJEODBBOTRERkQwMzk3M0JFQUYzRUNDQzc1MUNBNEQ0NDk0Nzg0RDRDQzEyNkQx
QUNFQUVCNzhFNjY2QkI0RTFEMzczRUNDMTA5Mjg2OTg3M0M0MTdGMDg5NjExQTEy
NjJBREE5NjdBRDc0N0ZFNDg5NEM5NDZGNDg1RUUxQkUxQjQ4MTk2Mjc2M0VEOTQ1
QjBFODU1OEQzNkM5NDY0NEJDNzRFQTUwRkI4MTE4N0E2NTQwRjJDNjY5QTVCRUFB
NDU1QjI2Nzg0RDBGMTc1NjBENENDQkIyMDZBM0I1MjU4MDE0NTMxM0VBQTZEREUy
NkY0RTI3RkIwNkUyM0YwQkM3Nzk5MThGMDg4ODc1RkIwMTg0OUE5QjRERkE5Rjg0
Mjk2QkQ0RDBGRTFGNTVERUU0RTYxODE0NzYyQTQ0MDZEOTU2NjEzRUNFMEI3ODc0
QzY2NDQ1M0Q2NTlEQjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvq97uHCR+EBWa8QluIdGY1FqPlfOhLFqLYrvhTXkG1Em8n7G07Gt
sKK2rvyreyFVBni1JgdHC5nCpPeTHGETkjurA9mJwvmAOAJ1YYQjJb4LC9gKlN/Q
OXO+rz7Mx1HKTUSUeE1MwSbRrOrreOZmu04dNz7MEJKGmHPEF/CJYRoSYq2pZ610
f+SJTJRvSF7hvhtIGWJ2PtlFsOhVjTbJRkS8dOpQ+4EYemVA8sZppb6qRVsmeE0P
F1YNTMuyBqO1JYAUUxPqpt3ib04n+wbiPwvHeZGPCIh1+wGEmptN+p+EKWvU0P4f
Vd7k5hgUdipEBtlWYT7OC3h0xmRFPWWdswIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FBJUGaSSGN/xvDHDluVIM/ZlxXvCMB8GA1UdIwQYMBaAFLodtJVtj1768JcPFx1n
Y6KGYzxPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ5YVB2QUh5OW85SjVM
Q29aNHlpaWpQNjVNNVNLRkZ6ZmVUd2h3REROZTR2LzAvQkExREI0OTU2RDhGNUVG
QUYwOTcwRjE3MUQ2NzYzQTI4NjYzM0M0Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQTFEQjQ5NTZEOEY1RUZBRjA5NzBGMTcxRDY3NjNBMjg2NjMz
QzRGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80OWFQdkFIeTlvOUo1TENvWjR5
aWlqUDY1TTVTS0ZGemZlVHdod0RETmU0di8wLzMxMzgzNjJlMzIzNTMxMmUzNTM2
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
uvs4MA0GCSqGSIb3DQEBCwUAA4IBAQB63iaoMIIfMoG74jG9PHl/0Ziic/hsX7gk
LZDvwZ4p41bS10D1K6poLgtjh8ARSAqw5EEyVq7Hcyo8P3WvrgeDeItZjNejsyBd
b893A7tm/DHZu9IFVxu7W2f71x7oGf79VFzDsGe7poatxIz8i80p6WUXCpjbb8BF
6mXFlZUa7f0+YZLaoeo0t5yjmEFa2bC3BZwnekZxRCbWgTHlIJDvlGVa46bPRhop
DtMZLQhLvkZmSwGoxy/yg8LANcdauJ/xjUOcxB/OTysOif/DJiv0OLvSs8b7Tnhi
8CaZzXR69ato8KQ443MNOJrkqImZSvz+EwsBzhuffFW/5IYIwDb4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org