Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/3230312e37312e3136302e302f31392d3234203d3e203238363335.roa
File:                     3230312e37312e3136302e302f31392d3234203d3e203238363335.roa (raw, json)
Hash identifier:          ebum5oSwBBnThQ7adpXjdrDcMXhIeQ5oZhFfQ3ZbaBE=
Subject key identifier:   9E:C9:5D:43:5F:A0:58:D6:36:C3:EF:4E:F8:72:04:E3:C0:7F:0A:32
Certificate issuer:       /CN=587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C
Certificate serial:       619F6939D655E2E6948CF41F9F4946EE87C70248
Authority key identifier: 58:7F:EA:F9:EE:A6:66:A8:97:5B:25:C9:71:AE:DC:6A:BA:D7:1C:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/3230312e37312e3136302e302f31392d3234203d3e203238363335.roa
Signing time:             Sun 08 Jan 2023 21:00:00 +0000
ROA not before:           Sun 08 Jan 2023 20:55:00 +0000
ROA not after:            Mon 08 Jan 2024 21:00:00 +0000
asID:                     28635
IP address blocks:        201.71.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9f:69:39:d6:55:e2:e6:94:8c:f4:1f:9f:49:46:ee:87:c7:02:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C
        Validity
            Not Before: Jan  8 20:55:00 2023 GMT
            Not After : Jan  8 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:19:14:73:2e:5a:c9:7b:c8:04:22:6e:af:
                    1d:50:5c:4b:dd:76:b1:a4:d1:ff:a7:ec:cd:85:bb:
                    55:5c:8d:2a:1a:2e:fb:2b:8e:0c:f9:f9:ed:b3:82:
                    2f:14:8d:b1:d8:95:c2:b5:29:16:10:f8:27:bb:0c:
                    de:b1:69:e0:d9:99:48:d3:02:63:5d:68:2f:81:81:
                    c3:e5:ac:bb:10:7d:78:29:60:cc:55:da:67:4f:26:
                    b6:1a:9a:27:fe:6b:ba:d9:36:4c:75:05:f4:2e:40:
                    2a:a1:4f:0a:b4:6d:57:91:80:11:2e:61:f3:e6:10:
                    24:df:e5:1f:ad:a7:06:25:ec:7b:95:55:a7:d4:59:
                    32:f2:64:d4:de:89:64:0a:05:76:f3:df:94:9f:50:
                    b7:c7:64:84:d0:97:df:f5:a0:8f:13:16:f4:8b:e1:
                    e2:ec:dd:94:7a:b9:ad:b4:16:00:f4:c5:b3:45:06:
                    d2:63:e3:ac:46:d7:20:c4:9c:75:2c:22:59:f0:47:
                    e8:3b:73:81:32:8b:c6:5d:8d:b8:b3:33:2e:8b:b2:
                    08:94:62:5c:04:57:28:ce:e2:36:05:4f:b7:45:e1:
                    7a:5f:f4:cb:6b:da:0f:a0:98:5c:ae:2e:68:1e:f4:
                    ba:14:9e:e0:9c:b8:e9:b4:d7:5f:8f:e2:26:48:22:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C9:5D:43:5F:A0:58:D6:36:C3:EF:4E:F8:72:04:E3:C0:7F:0A:32
            X509v3 Authority Key Identifier:
                keyid:58:7F:EA:F9:EE:A6:66:A8:97:5B:25:C9:71:AE:DC:6A:BA:D7:1C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/587FEAF9EEA666A8975B25C971AEDC6ABAD71C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/3230312e37312e3136302e302f31392d3234203d3e203238363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bd:18:03:c3:2e:c0:7f:a8:04:30:0d:d5:dc:52:60:17:5b:83:
         41:ad:5b:6d:9d:8e:cf:1e:2b:65:b4:d0:9d:ba:fb:9f:9e:3b:
         93:8f:ae:ef:3d:b2:3d:e6:53:cb:12:e1:8a:f9:85:8e:72:b6:
         35:35:2f:5c:ac:a0:b3:14:30:77:a0:32:f5:e2:4a:3c:28:03:
         ec:e3:fc:24:10:74:fb:d1:6a:6a:42:a8:ce:09:14:1a:a4:2e:
         a9:d6:30:dd:47:f9:d7:cb:23:50:4e:6f:c1:68:b7:c1:f0:67:
         b1:fd:85:94:ae:71:2b:c5:d3:c7:c2:e6:6a:94:ac:37:c4:f4:
         85:ec:6a:75:f9:93:6e:6a:1e:9b:73:46:13:8d:09:53:5e:f4:
         75:9e:e2:6b:c6:8c:aa:87:ef:e6:25:f0:e4:6b:7c:7a:4a:7c:
         47:17:1d:d4:02:34:29:bf:f5:ef:79:68:86:4f:8c:97:ff:98:
         27:99:c4:90:94:b4:8e:ed:5f:6f:16:13:9e:9a:4e:60:e6:95:
         60:5a:4e:26:ba:5f:48:31:71:18:bb:b7:2d:48:99:d1:6e:60:
         03:1a:ba:68:0b:17:45:f9:b2:4b:3e:20:49:ce:61:8f:f2:da:
         20:5e:f1:a6:e9:7b:a2:f2:25:a9:29:73:ca:2b:8c:ea:a6:00:
         5a:1d:36:89
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUYZ9pOdZV4uaUjPQfn0lG7ofHAkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg3RkVBRjlFRUE2NjZBODk3NUIyNUM5NzFBRURDNkFC
QUQ3MUM2QzAeFw0yMzAxMDgyMDU1MDBaFw0yNDAxMDgyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc2MTE5MTQ3MzJFNUFDOTdC
QzgwNDIyNkVBRjFENTA1QzRCREQ3NkIxQTREMUZGQTdFQ0NEODVCQjU1NUM4RDJB
MUEyRUZCMkI4RTBDRjlGOUVEQjM4MjJGMTQ4REIxRDg5NUMyQjUyOTE2MTBGODI3
QkIwQ0RFQjE2OUUwRDk5OTQ4RDMwMjYzNUQ2ODJGODE4MUMzRTVBQ0JCMTA3RDc4
Mjk2MENDNTVEQTY3NEYyNkI2MUE5QTI3RkU2QkJBRDkzNjRDNzUwNUY0MkU0MDJB
QTE0RjBBQjQ2RDU3OTE4MDExMkU2MUYzRTYxMDI0REZFNTFGQURBNzA2MjVFQzdC
OTU1NUE3RDQ1OTMyRjI2NEQ0REU4OTY0MEEwNTc2RjNERjk0OUY1MEI3Qzc2NDg0
RDA5N0RGRjVBMDhGMTMxNkY0OEJFMUUyRUNERDk0N0FCOUFEQjQxNjAwRjRDNUIz
NDUwNkQyNjNFM0FDNDZENzIwQzQ5Qzc1MkMyMjU5RjA0N0U4M0I3MzgxMzI4QkM2
NUQ4REI4QjMzMzJFOEJCMjA4OTQ2MjVDMDQ1NzI4Q0VFMjM2MDU0RkI3NDVFMTdB
NUZGNENCNkJEQTBGQTA5ODVDQUUyRTY4MUVGNEJBMTQ5RUUwOUNCOEU5QjRENzVG
OEZFMjI2NDgyMjlBMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt2EZFHMuWsl7yAQibq8dUFxL3XaxpNH/p+zNhbtVXI0qGi77K44M
+fnts4IvFI2x2JXCtSkWEPgnuwzesWng2ZlI0wJjXWgvgYHD5ay7EH14KWDMVdpn
Tya2Gpon/mu62TZMdQX0LkAqoU8KtG1XkYARLmHz5hAk3+UfracGJex7lVWn1Fky
8mTU3olkCgV289+Un1C3x2SE0Jff9aCPExb0i+Hi7N2UermttBYA9MWzRQbSY+Os
RtcgxJx1LCJZ8EfoO3OBMovGXY24szMui7IIlGJcBFcozuI2BU+3ReF6X/TLa9oP
oJhcri5oHvS6FJ7gnLjptNdfj+ImSCKaCQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJ7JXUNfoFjWNsPvTvhyBOPAfwoyMB8GA1UdIwQYMBaAFFh/6vnupmaol1slyXGu
3Gq61xxsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcyOHU1blhKZmRLOW9n
UUwxYll2THNmOEJxVFZ5akI1MTFBMTRUd1E3QWtrLzAvNTg3RkVBRjlFRUE2NjZB
ODk3NUIyNUM5NzFBRURDNkFCQUQ3MUM2Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81ODdGRUFGOUVFQTY2NkE4OTc1QjI1Qzk3MUFFREM2QUJBRDcx
QzZDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83Mjh1NW5YSmZkSzlvZ1FMMWJZ
dkxzZjhCcVRWeWpCNTExQTE0VHdRN0Fray8wLzMyMzAzMTJlMzczMTJlMzEzNjMw
MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzODM2MzMzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBclH
oDANBgkqhkiG9w0BAQsFAAOCAQEAvRgDwy7Af6gEMA3V3FJgF1uDQa1bbZ2Ozx4r
ZbTQnbr7n547k4+u7z2yPeZTyxLhivmFjnK2NTUvXKygsxQwd6Ay9eJKPCgD7OP8
JBB0+9FqakKozgkUGqQuqdYw3Uf518sjUE5vwWi3wfBnsf2FlK5xK8XTx8LmapSs
N8T0hexqdfmTbmoem3NGE40JU170dZ7ia8aMqofv5iXw5Gt8ekp8Rxcd1AI0Kb/1
73lohk+Ml/+YJ5nEkJS0ju1fbxYTnppOYOaVYFpOJrpfSDFxGLu3LUiZ0W5gAxq6
aAsXRfmySz4gSc5hj/LaIF7xpul7ovIlqSlzyiuM6qYAWh02iQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org