Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3138372e37332e3136302e302f32302d3234203d3e203238363534.roa
File:                     3138372e37332e3136302e302f32302d3234203d3e203238363534.roa (raw, json)
Hash identifier:          +DYrRNm8iZ21MSAZzdw5J77g/5Dv0CXy+4RpQhuailw=
Subject key identifier:   FE:FE:5D:8E:DE:30:98:60:CF:25:2C:3A:A0:1D:8F:A7:90:FB:36:A5
Certificate issuer:       /CN=B226225629BE970B76E341C5634BB7CC36079DB0
Certificate serial:       118644E07C3068A8A4240E2472F1094AB689D145
Authority key identifier: B2:26:22:56:29:BE:97:0B:76:E3:41:C5:63:4B:B7:CC:36:07:9D:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B226225629BE970B76E341C5634BB7CC36079DB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3138372e37332e3136302e302f32302d3234203d3e203238363534.roa
Signing time:             Thu 10 Aug 2023 21:04:43 +0000
ROA not before:           Thu 10 Aug 2023 20:59:43 +0000
ROA not after:            Thu 08 Aug 2024 21:04:43 +0000
asID:                     28654
IP address blocks:        187.73.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:86:44:e0:7c:30:68:a8:a4:24:0e:24:72:f1:09:4a:b6:89:d1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B226225629BE970B76E341C5634BB7CC36079DB0
        Validity
            Not Before: Aug 10 20:59:43 2023 GMT
            Not After : Aug  8 21:04:43 2024 GMT
        Subject: CN=FEFE5D8EDE309860CF252C3AA01D8FA790FB36A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:13:b3:95:2f:84:bd:12:3e:9c:f1:90:11:
                    0c:83:6b:f4:dd:57:17:d3:4d:7f:0e:03:df:87:09:
                    47:76:49:b0:e4:74:b8:94:12:e0:98:03:e7:24:8c:
                    b3:15:93:53:d6:51:27:7d:02:4d:89:52:c9:22:b8:
                    92:dc:3f:72:28:e4:8a:18:ff:a1:f3:e0:06:b2:4c:
                    d4:67:ff:3d:c8:54:d3:b8:0d:5a:13:d8:dd:98:99:
                    28:f4:d4:f6:e9:e7:fa:2e:72:b9:4c:16:b5:f5:c1:
                    8d:cb:cf:a6:8c:56:ca:36:b6:b9:9f:99:df:53:d9:
                    3b:68:fd:f1:3f:12:21:7c:d8:25:b7:27:33:17:d7:
                    c4:4b:09:20:c2:20:f9:d0:28:63:c9:c7:6a:72:2f:
                    7e:64:56:bc:1b:03:b1:8a:9e:9e:39:fe:38:d8:68:
                    0f:07:29:4a:41:62:1f:3d:cd:46:94:d2:6d:15:8d:
                    d0:73:5e:0d:33:94:f0:01:42:7b:12:a8:5a:60:f4:
                    74:0a:29:e6:40:b1:18:95:1b:ac:21:1f:6f:55:24:
                    48:50:ed:75:67:33:fb:88:95:d2:00:ff:6b:db:5c:
                    35:54:43:d6:9e:df:3f:58:54:4d:f9:d4:7d:5c:51:
                    da:ea:5b:e5:b1:c4:cd:ea:d3:67:9c:b6:51:fd:c4:
                    a8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:5D:8E:DE:30:98:60:CF:25:2C:3A:A0:1D:8F:A7:90:FB:36:A5
            X509v3 Authority Key Identifier:
                keyid:B2:26:22:56:29:BE:97:0B:76:E3:41:C5:63:4B:B7:CC:36:07:9D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/B226225629BE970B76E341C5634BB7CC36079DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B226225629BE970B76E341C5634BB7CC36079DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3138372e37332e3136302e302f32302d3234203d3e203238363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:89:51:cb:e4:f6:e6:b5:3c:08:37:bb:48:a3:b8:cb:79:fe:
         6d:a7:05:4b:cc:1b:c1:02:e7:fd:b3:45:8e:62:13:f1:09:ee:
         29:8f:73:01:77:dd:d1:61:7d:36:2b:9a:ce:f9:61:83:73:80:
         b9:3c:63:62:ef:a7:dc:0e:27:88:8d:48:55:e6:d7:4e:3a:9e:
         a2:a6:0a:ea:a5:4f:75:fa:23:f4:af:0b:12:db:fe:1f:5a:b8:
         dc:b0:fa:8b:29:63:9b:a4:21:53:03:0f:45:57:6b:2f:52:e9:
         7c:67:86:48:4e:b9:71:ae:c6:84:35:99:7c:88:dd:25:47:03:
         e2:e7:a7:ef:ea:68:df:b6:5d:11:80:74:78:b2:9d:ef:1e:0c:
         e1:0f:f4:4e:b1:8f:64:fe:ea:0e:b9:90:7a:d6:e1:e9:71:5d:
         86:da:c4:58:ac:9c:99:e7:f9:69:4e:3f:68:0c:0d:7b:eb:af:
         7a:b1:e7:c1:9a:01:08:6c:01:0b:ec:f2:b3:f8:a3:ef:4f:70:
         fb:7a:f5:26:50:cf:d4:52:8a:bf:18:58:5f:f5:ee:87:0e:b5:
         83:54:1e:bf:57:d3:43:b5:34:4e:57:5d:7a:a2:2c:16:7b:d6:
         c5:56:de:9b:f6:a7:2e:34:48:ac:84:c0:e3:15:de:56:6e:b8:
         4a:d5:0e:fe
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEYZE4HwwaKikJA4kcvEJSraJ0UUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIyNjIyNTYyOUJFOTcwQjc2RTM0MUM1NjM0QkI3Q0Mz
NjA3OURCMDAeFw0yMzA4MTAyMDU5NDNaFw0yNDA4MDgyMTA0NDNaMDMxMTAvBgNV
BAMTKEZFRkU1RDhFREUzMDk4NjBDRjI1MkMzQUEwMUQ4RkE3OTBGQjM2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXROzlS+EvRI+nPGQEQyDa/Td
VxfTTX8OA9+HCUd2SbDkdLiUEuCYA+ckjLMVk1PWUSd9Ak2JUskiuJLcP3Io5IoY
/6Hz4AayTNRn/z3IVNO4DVoT2N2YmSj01Pbp5/oucrlMFrX1wY3Lz6aMVso2trmf
md9T2Tto/fE/EiF82CW3JzMX18RLCSDCIPnQKGPJx2pyL35kVrwbA7GKnp45/jjY
aA8HKUpBYh89zUaU0m0VjdBzXg0zlPABQnsSqFpg9HQKKeZAsRiVG6whH29VJEhQ
7XVnM/uIldIA/2vbXDVUQ9ae3z9YVE351H1cUdrqW+WxxM3q02ectlH9xKiPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/v5djt4wmGDPJSw6oB2Pp5D7NqUwHwYDVR0j
BBgwFoAUsiYiVim+lwt240HFY0u3zDYHnbAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBQRWR4Y2ZoYUdHM0ZvejNqTXRqRU5QZkc5S25RNUoyRjVzQkpMZXhY
NEovMC9CMjI2MjI1NjI5QkU5NzBCNzZFMzQxQzU2MzRCQjdDQzM2MDc5REIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyMjYyMjU2MjlCRTk3MEI3
NkUzNDFDNTYzNEJCN0NDMzYwNzlEQjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQUEVkeGNmaGFHRzNGb3ozak10akVOUGZHOUtuUTVKMkY1c0JKTGV4WDRKLzAv
MzEzODM3MmUzNzMzMmUzMTM2MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu0mgMA0GCSqGSIb3DQEBCwUAA4IBAQCniVHL5Pbm
tTwIN7tIo7jLef5tpwVLzBvBAuf9s0WOYhPxCe4pj3MBd93RYX02K5rO+WGDc4C5
PGNi76fcDieIjUhV5tdOOp6ipgrqpU91+iP0rwsS2/4fWrjcsPqLKWObpCFTAw9F
V2svUul8Z4ZITrlxrsaENZl8iN0lRwPi56fv6mjftl0RgHR4sp3vHgzhD/ROsY9k
/uoOuZB61uHpcV2G2sRYrJyZ5/lpTj9oDA176696sefBmgEIbAEL7PKz+KPvT3D7
evUmUM/UUoq/GFhf9e6HDrWDVB6/V9NDtTROV116oiwWe9bFVt6b9qcuNEishMDj
Fd5WbrhK1Q7+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org