Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138362e3231362e3230382e302f32332d3233203d3e20323632393839.roa
File:                     3138362e3231362e3230382e302f32332d3233203d3e20323632393839.roa (raw, json)
Hash identifier:          uFPIEugkrK/MXQdvv0hC/CLnzW0G2z0tYmBOjl30I2E=
Subject key identifier:   74:AB:5A:83:AB:99:66:0C:EA:80:A0:A0:55:D6:FC:13:B7:1B:ED:F5
Certificate issuer:       /CN=207EB381959B83F7299D680B4544AE4668DCFE56
Certificate serial:       138ED777732A8DEED09CA77D7C1BCBD4C0F86B46
Authority key identifier: 20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138362e3231362e3230382e302f32332d3233203d3e20323632393839.roa
Signing time:             Fri 25 Aug 2023 16:32:47 +0000
ROA not before:           Fri 25 Aug 2023 16:27:47 +0000
ROA not after:            Fri 23 Aug 2024 16:32:47 +0000
asID:                     262989
IP address blocks:        186.216.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8e:d7:77:73:2a:8d:ee:d0:9c:a7:7d:7c:1b:cb:d4:c0:f8:6b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207EB381959B83F7299D680B4544AE4668DCFE56
        Validity
            Not Before: Aug 25 16:27:47 2023 GMT
            Not After : Aug 23 16:32:47 2024 GMT
        Subject: CN=74AB5A83AB99660CEA80A0A055D6FC13B71BEDF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:fa:14:d5:ae:8e:65:e4:fb:cf:99:dc:16:
                    49:54:50:01:29:88:39:56:5a:d7:ba:8a:74:dc:c6:
                    49:a7:97:f1:a5:7e:36:c3:72:c4:3e:01:e6:eb:9a:
                    00:36:1e:b7:bb:ac:a3:37:d3:83:35:95:60:4b:08:
                    5f:7a:f1:a6:03:e2:2b:ba:5d:59:03:3a:fb:34:e4:
                    55:97:ad:5b:55:a9:7e:b3:d1:52:3b:45:f5:0e:b2:
                    e4:c2:87:ea:42:6b:9a:4e:1d:52:68:81:c1:3a:ee:
                    e4:1d:b4:e2:17:fd:a2:c0:99:96:ad:9b:f4:f3:66:
                    11:22:f7:1b:e8:c4:e4:0d:d8:1e:a9:c9:ee:93:68:
                    68:42:08:1f:aa:1a:4f:98:ac:d3:68:02:df:64:44:
                    cc:f1:03:9d:87:15:c5:5b:0a:46:5d:2e:32:65:be:
                    b7:e0:11:fa:e9:44:4f:85:be:08:51:5d:9b:da:b8:
                    56:df:00:9b:5c:a1:ed:43:6a:2a:d9:64:a8:c2:22:
                    69:76:7b:30:48:5f:70:2c:0f:61:b7:3c:bd:e5:f4:
                    e7:ef:96:c2:ff:79:be:31:56:39:62:e3:c7:2e:96:
                    2d:50:30:aa:95:78:03:a6:7a:fa:83:fc:8a:9f:1c:
                    64:7a:c9:d0:16:54:de:1e:1d:a7:43:0f:b3:0c:94:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:5A:83:AB:99:66:0C:EA:80:A0:A0:55:D6:FC:13:B7:1B:ED:F5
            X509v3 Authority Key Identifier:
                keyid:20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/207EB381959B83F7299D680B4544AE4668DCFE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138362e3231362e3230382e302f32332d3233203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:ad:e7:48:31:c8:34:92:c1:9a:58:cb:16:83:f7:58:12:85:
         da:01:81:0b:62:37:4d:37:a8:d3:ca:d6:e3:88:9e:e2:d4:9b:
         49:d1:c1:3a:1d:48:87:51:10:c7:45:5f:53:2c:9a:74:04:2c:
         68:e4:bb:f1:28:e7:5e:0f:4f:b5:64:1f:e0:62:82:8e:8e:ef:
         bf:48:77:20:4c:59:8b:19:80:29:93:ab:9e:ab:46:40:c1:1d:
         2c:41:10:4f:51:88:38:b9:11:9f:e7:24:5a:57:74:97:38:40:
         17:39:8b:c6:bf:8d:42:cc:71:68:57:0b:89:4f:69:16:cc:58:
         60:a6:37:67:0f:19:69:53:78:a6:16:08:24:65:e8:99:cb:23:
         ea:b6:6c:a8:f7:bf:91:e8:94:f8:b6:77:9f:9e:69:7d:04:5d:
         30:38:ad:e9:e7:55:2e:c8:12:c9:b7:88:36:fb:e3:8c:54:03:
         97:55:90:46:88:1f:2f:6a:37:a0:e6:0c:b1:bf:20:6c:c7:d1:
         64:26:8b:47:8f:4c:fd:1c:a6:05:60:e8:28:85:61:98:75:e8:
         dd:1c:db:96:e7:86:7a:16:68:a0:4f:27:02:f5:40:20:f5:42:
         7c:d1:1d:07:d5:1c:d2:c3:2a:6f:33:fc:0d:1a:da:07:90:1b:
         a3:52:b8:db
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUE47Xd3Mqje7QnKd9fBvL1MD4a0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA3RUIzODE5NTlCODNGNzI5OUQ2ODBCNDU0NEFFNDY2
OERDRkU1NjAeFw0yMzA4MjUxNjI3NDdaFw0yNDA4MjMxNjMyNDdaMDMxMTAvBgNV
BAMTKDc0QUI1QTgzQUI5OTY2MENFQTgwQTBBMDU1RDZGQzEzQjcxQkVERjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSPoU1a6OZeT7z5ncFklUUAEp
iDlWWte6inTcxkmnl/GlfjbDcsQ+AebrmgA2Hre7rKM304M1lWBLCF968aYD4iu6
XVkDOvs05FWXrVtVqX6z0VI7RfUOsuTCh+pCa5pOHVJogcE67uQdtOIX/aLAmZat
m/TzZhEi9xvoxOQN2B6pye6TaGhCCB+qGk+YrNNoAt9kRMzxA52HFcVbCkZdLjJl
vrfgEfrpRE+FvghRXZvauFbfAJtcoe1DairZZKjCIml2ezBIX3AsD2G3PL3l9Ofv
lsL/eb4xVjli48culi1QMKqVeAOmevqD/IqfHGR6ydAWVN4eHadDD7MMlGAfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdKtag6uZZgzqgKCgVdb8E7cb7fUwHwYDVR0j
BBgwFoAUIH6zgZWbg/cpnWgLRUSuRmjc/lYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMC8yMDdFQjM4MTk1OUI4M0Y3Mjk5RDY4MEI0NTQ0QUU0NjY4RENGRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwN0VCMzgxOTU5QjgzRjcy
OTlENjgwQjQ1NDRBRTQ2NjhEQ0ZFNTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzAv
MzEzODM2MmUzMjMxMzYyZTMyMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrY0DANBgkqhkiG9w0BAQsFAAOCAQEABK3n
SDHINJLBmljLFoP3WBKF2gGBC2I3TTeo08rW44ie4tSbSdHBOh1Ih1EQx0VfUyya
dAQsaOS78SjnXg9PtWQf4GKCjo7vv0h3IExZixmAKZOrnqtGQMEdLEEQT1GIOLkR
n+ckWld0lzhAFzmLxr+NQsxxaFcLiU9pFsxYYKY3Zw8ZaVN4phYIJGXomcsj6rZs
qPe/keiU+LZ3n55pfQRdMDit6edVLsgSybeINvvjjFQDl1WQRogfL2o3oOYMsb8g
bMfRZCaLR49M/RymBWDoKIVhmHXo3RzblueGehZooE8nAvVAIPVCfNEdB9Uc0sMq
bzP8DRraB5Abo1K42w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org