Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3132302e302f32322d3232203d3e203533313235.roa
File:                     3138372e3130382e3132302e302f32322d3232203d3e203533313235.roa (raw, json)
Hash identifier:          3LWUxhpFYbk9xDcqQP1huMlAW8+8KqpRcqBvqlwmVeI=
Subject key identifier:   6D:6F:FA:FA:D2:01:64:1B:F0:D5:62:FC:BE:D2:E3:B7:77:71:B4:96
Certificate issuer:       /CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
Certificate serial:       0F38D3AA6AE716A37144FBD78CEE762915B87896
Authority key identifier: 4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3132302e302f32322d3232203d3e203533313235.roa
Signing time:             Tue 31 Oct 2023 21:00:00 +0000
ROA not before:           Tue 31 Oct 2023 20:55:00 +0000
ROA not after:            Tue 29 Oct 2024 21:00:00 +0000
asID:                     53125
IP address blocks:        187.108.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:38:d3:aa:6a:e7:16:a3:71:44:fb:d7:8c:ee:76:29:15:b8:78:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
        Validity
            Not Before: Oct 31 20:55:00 2023 GMT
            Not After : Oct 29 21:00:00 2024 GMT
        Subject: CN=6D6FFAFAD201641BF0D562FCBED2E3B77771B496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:a9:bb:2c:61:ef:e4:b3:de:6a:9a:bd:ec:
                    78:96:d9:b0:53:bf:05:b2:ba:4b:ca:66:99:0a:ed:
                    b1:8a:f8:d1:9c:de:6b:40:f6:8b:fb:f7:53:1d:12:
                    fc:07:5a:9f:44:77:71:1e:41:31:4e:1a:7e:ff:c2:
                    71:1b:1f:d7:46:a3:77:00:cd:39:54:d0:2f:f7:f9:
                    9a:56:de:93:87:d1:e7:ca:dd:55:10:6a:60:f4:cc:
                    4b:92:cd:3e:4c:f3:c1:88:8e:69:eb:95:b5:09:fd:
                    70:20:4a:e7:b0:4b:83:24:be:29:f0:91:f2:51:09:
                    99:56:c7:75:d1:ec:ce:13:07:5e:b4:30:54:45:2c:
                    f0:b1:65:d1:2a:36:56:a8:07:e5:82:0c:1d:3f:a6:
                    18:f3:4f:2d:21:53:53:8b:9f:c1:1a:7f:56:8a:7f:
                    df:9c:10:6a:35:65:8a:e4:a9:cc:a3:ca:36:8e:74:
                    d5:3f:a2:ef:14:c9:1b:53:bb:9f:cf:52:71:42:ca:
                    c0:2f:0c:af:37:0c:ba:52:0a:aa:db:05:96:b3:99:
                    84:06:95:03:0a:4c:2f:10:4a:41:6e:b7:67:29:45:
                    0c:5c:24:7e:a4:ac:cf:4a:bd:b8:bb:92:2a:cb:d0:
                    1a:24:db:63:61:fd:80:fe:cd:f3:66:52:21:8d:53:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6F:FA:FA:D2:01:64:1B:F0:D5:62:FC:BE:D2:E3:B7:77:71:B4:96
            X509v3 Authority Key Identifier:
                keyid:4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3132302e302f32322d3232203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:82:dc:31:4a:ee:d4:2a:b1:a7:3f:e1:64:91:b3:09:0e:
         54:48:d0:e9:64:30:ba:ef:ab:42:88:af:59:0e:39:3d:06:56:
         bc:cf:f6:84:68:be:dc:07:6c:a5:8b:34:ca:a5:2b:f0:e0:95:
         52:f6:e7:6e:db:36:32:2c:21:d9:4c:9d:70:1c:fc:78:19:91:
         cd:41:8b:f0:2f:26:bf:b2:de:1c:b0:06:a6:2c:03:55:3f:2e:
         fb:fe:dc:cf:85:41:ed:7b:5e:34:2d:45:0b:67:92:f7:93:3f:
         81:6d:30:1f:84:e8:59:66:55:fb:19:90:a2:08:77:68:1b:ff:
         7e:90:77:70:ce:d4:f1:e4:2d:f5:46:53:42:8c:3f:6a:91:a7:
         ef:99:94:35:7b:a6:d3:76:1c:53:85:ab:50:27:a5:0f:64:38:
         c2:88:48:a0:61:d7:85:9b:56:f0:b9:6f:9a:31:69:bd:76:42:
         9e:f6:fa:07:b5:9e:2d:56:5b:fa:e9:82:58:bb:8f:f9:f2:c9:
         b7:74:8c:60:27:48:39:6d:87:f3:84:56:96:a0:77:d8:f8:e0:
         3e:96:fb:14:db:a1:7b:53:db:cf:94:c3:ab:2e:03:d4:a5:fa:
         17:db:e6:7c:1f:8c:7a:15:5a:62:55:59:50:09:8b:52:8a:c0:
         85:8a:13:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDzjTqmrnFqNxRPvXjO52KRW4eJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFFNEU1N0Y3RTBEQjNBMjBGOTIwNTk5QTI4NkE2NzJF
RTc2MUFGMzAeFw0yMzEwMzEyMDU1MDBaFw0yNDEwMjkyMTAwMDBaMDMxMTAvBgNV
BAMTKDZENkZGQUZBRDIwMTY0MUJGMEQ1NjJGQ0JFRDJFM0I3Nzc3MUI0OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Sqm7LGHv5LPeapq97HiW2bBT
vwWyukvKZpkK7bGK+NGc3mtA9ov791MdEvwHWp9Ed3EeQTFOGn7/wnEbH9dGo3cA
zTlU0C/3+ZpW3pOH0efK3VUQamD0zEuSzT5M88GIjmnrlbUJ/XAgSuewS4Mkvinw
kfJRCZlWx3XR7M4TB160MFRFLPCxZdEqNlaoB+WCDB0/phjzTy0hU1OLn8Eaf1aK
f9+cEGo1ZYrkqcyjyjaOdNU/ou8UyRtTu5/PUnFCysAvDK83DLpSCqrbBZazmYQG
lQMKTC8QSkFut2cpRQxcJH6krM9Kvbi7kirL0Bok22Nh/YD+zfNmUiGNU/fTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbW/6+tIBZBvw1WL8vtLjt3dxtJYwHwYDVR0j
BBgwFoAUSuTlf34Ns6IPkgWZooamcu52GvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlliSnpRVzVMTTlKWGdLSmc3QkFwN25CQ25CRldrNlRYU3hSN2h3Q05C
NGMvMC80QUU0RTU3RjdFMERCM0EyMEY5MjA1OTlBMjg2QTY3MkVFNzYxQUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBRTRFNTdGN0UwREIzQTIw
RjkyMDU5OUEyODZBNjcyRUU3NjFBRjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZZYkp6UVc1TE05SlhnS0pnN0JBcDduQkNuQkZXazZUWFN4Ujdod0NOQjRjLzAv
MzEzODM3MmUzMTMwMzgyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzMzMTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7bHgwDQYJKoZIhvcNAQELBQADggEBAFuugtwx
Su7UKrGnP+FkkbMJDlRI0OlkMLrvq0KIr1kOOT0GVrzP9oRovtwHbKWLNMqlK/Dg
lVL2527bNjIsIdlMnXAc/HgZkc1Bi/AvJr+y3hywBqYsA1U/Lvv+3M+FQe17XjQt
RQtnkveTP4FtMB+E6FlmVfsZkKIId2gb/36Qd3DO1PHkLfVGU0KMP2qRp++ZlDV7
ptN2HFOFq1AnpQ9kOMKISKBh14WbVvC5b5oxab12Qp72+ge1ni1WW/rpgli7j/ny
ybd0jGAnSDlth/OEVpagd9j44D6W+xTboXtT28+Uw6suA9Sl+hfb5nwfjHoVWmJV
WVAJi1KKwIWKE9Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org