Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3132382e302f31382d3332203d3e203238363135.roa
File:                     3230312e34362e3132382e302f31382d3332203d3e203238363135.roa (raw, json)
Hash identifier:          QeLiG1fzFThDeZdm90rLOjJN2uBzazKcTK52iSp93+E=
Subject key identifier:   36:D7:24:9F:9B:72:26:3E:90:10:50:15:15:D1:39:D9:85:D1:5C:76
Certificate issuer:       /CN=3F2F047713EE5C35F02ED01388508451431B1C44
Certificate serial:       2BE7FDEC0944FFFAA24A5B8790F0D209A9CA4A4B
Authority key identifier: 3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3132382e302f31382d3332203d3e203238363135.roa
Signing time:             Tue 02 Apr 2024 13:13:27 +0000
ROA not before:           Tue 02 Apr 2024 13:08:27 +0000
ROA not after:            Tue 01 Apr 2025 13:13:27 +0000
asID:                     28615
IP address blocks:        201.46.128.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e7:fd:ec:09:44:ff:fa:a2:4a:5b:87:90:f0:d2:09:a9:ca:4a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F2F047713EE5C35F02ED01388508451431B1C44
        Validity
            Not Before: Apr  2 13:08:27 2024 GMT
            Not After : Apr  1 13:13:27 2025 GMT
        Subject: CN=36D7249F9B72263E9010501515D139D985D15C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:c4:3c:30:56:36:4c:e6:1a:15:45:55:ec:
                    43:03:b4:6a:42:ce:73:82:63:e8:53:3c:99:f2:ff:
                    62:a3:b5:83:62:fc:7e:a8:98:b0:05:62:fb:19:70:
                    ac:a2:94:4c:9a:67:a8:e3:3d:f4:1e:99:10:5e:48:
                    c1:b6:be:91:7b:50:7a:b6:37:cb:bc:4f:ba:33:c4:
                    5c:fa:c8:2b:75:d6:79:20:4e:7e:1e:cb:6a:a2:77:
                    2e:34:31:b7:c7:83:62:09:1e:39:85:5e:b1:90:28:
                    8c:b6:75:a1:39:85:18:25:d9:b6:2a:fc:bd:b3:37:
                    c7:dc:fa:75:85:f4:14:73:0d:28:d0:19:5e:f0:d6:
                    a5:ff:30:3e:e6:1d:b2:71:18:e2:f4:72:58:85:51:
                    20:72:31:1c:7a:93:95:e6:b4:a8:3e:7a:01:4f:d0:
                    7c:db:85:62:88:ac:c7:f0:25:f5:94:36:1a:51:a6:
                    20:86:eb:3c:20:7d:33:82:8e:bd:60:87:f1:e8:20:
                    53:f1:a5:99:3a:64:3f:11:b9:19:c4:a9:60:c7:75:
                    de:34:b6:48:69:b4:f2:46:57:4d:9c:2f:63:6e:4b:
                    e5:8d:08:04:5f:84:c0:5b:2c:b3:99:cf:44:1e:4b:
                    45:b5:fa:a3:1d:2a:52:71:2a:2b:56:73:60:cb:71:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D7:24:9F:9B:72:26:3E:90:10:50:15:15:D1:39:D9:85:D1:5C:76
            X509v3 Authority Key Identifier:
                keyid:3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3F2F047713EE5C35F02ED01388508451431B1C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3132382e302f31382d3332203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:c5:fd:90:41:5a:5f:47:20:ab:4b:37:c4:b8:0d:a4:11:90:
         17:e4:ea:cd:aa:eb:10:b8:14:13:b1:bc:7b:39:34:0c:60:55:
         fd:27:57:b2:3f:db:84:7f:51:c4:99:e9:9e:77:26:cf:be:81:
         1e:dd:24:d7:2a:e4:6f:1b:54:d7:b6:54:33:ac:13:ff:d9:b2:
         0f:53:33:85:cf:14:a0:f0:8a:a9:80:c8:fb:0a:6b:47:ec:20:
         6e:d5:5b:13:0e:ef:65:b1:9c:02:21:bb:43:bc:46:2c:41:cf:
         a6:c1:93:b7:6d:64:d3:2a:36:d3:4b:9f:d0:5c:75:3e:69:b1:
         0c:38:88:9e:38:6e:ef:c8:b6:bb:5f:ca:ec:52:99:e1:10:e0:
         3b:b9:c5:19:40:c4:4a:60:78:47:e3:e7:9c:1d:27:09:d4:6c:
         b1:c7:4e:db:46:4d:8b:6c:0e:96:28:ad:c0:db:cc:1f:b2:68:
         c6:7f:8f:0d:d0:da:ef:8e:76:50:47:be:a4:17:a6:16:5f:03:
         8b:8e:0d:b7:ae:9b:91:7d:1b:e5:57:70:56:e5:15:69:b2:40:
         99:39:59:cb:e0:a3:10:25:f3:e7:96:2f:d2:4f:36:72:61:0f:
         11:b4:b4:1e:76:e3:57:ae:75:4b:b2:30:e8:8e:6c:83:3a:d3:
         8a:3e:a9:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK+f97AlE//qiSluHkPDSCanKSkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YyRjA0NzcxM0VFNUMzNUYwMkVEMDEzODg1MDg0NTE0
MzFCMUM0NDAeFw0yNDA0MDIxMzA4MjdaFw0yNTA0MDExMzEzMjdaMDMxMTAvBgNV
BAMTKDM2RDcyNDlGOUI3MjI2M0U5MDEwNTAxNTE1RDEzOUQ5ODVEMTVDNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv98Q8MFY2TOYaFUVV7EMDtGpC
znOCY+hTPJny/2KjtYNi/H6omLAFYvsZcKyilEyaZ6jjPfQemRBeSMG2vpF7UHq2
N8u8T7ozxFz6yCt11nkgTn4ey2qidy40MbfHg2IJHjmFXrGQKIy2daE5hRgl2bYq
/L2zN8fc+nWF9BRzDSjQGV7w1qX/MD7mHbJxGOL0cliFUSByMRx6k5XmtKg+egFP
0HzbhWKIrMfwJfWUNhpRpiCG6zwgfTOCjr1gh/HoIFPxpZk6ZD8RuRnEqWDHdd40
tkhptPJGV02cL2NuS+WNCARfhMBbLLOZz0QeS0W1+qMdKlJxKitWc2DLcYGtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNtckn5tyJj6QEFAVFdE52YXRXHYwHwYDVR0j
BBgwFoAUPy8EdxPuXDXwLtATiFCEUUMbHEQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FYa3VTZ054QjdKQUxFank0S1ZDc0xSRjl2Sk5UNG5xQk1xdGNZTjJq
SjIvMC8zRjJGMDQ3NzEzRUU1QzM1RjAyRUQwMTM4ODUwODQ1MTQzMUIxQzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGMkYwNDc3MTNFRTVDMzVG
MDJFRDAxMzg4NTA4NDUxNDMxQjFDNDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRWGt1U2dOeEI3SkFMRWp5NEtWQ3NMUkY5dkpOVDRucUJNcXRjWU4yakoyLzAv
MzIzMDMxMmUzNDM2MmUzMTMyMzgyZTMwMmYzMTM4MmQzMzMyMjAzZDNlMjAzMjM4
MzYzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQGyS6AMA0GCSqGSIb3DQEBCwUAA4IBAQAFxf2QQVpf
RyCrSzfEuA2kEZAX5OrNqusQuBQTsbx7OTQMYFX9J1eyP9uEf1HEmemedybPvoEe
3STXKuRvG1TXtlQzrBP/2bIPUzOFzxSg8IqpgMj7CmtH7CBu1VsTDu9lsZwCIbtD
vEYsQc+mwZO3bWTTKjbTS5/QXHU+abEMOIieOG7vyLa7X8rsUpnhEOA7ucUZQMRK
YHhH4+ecHScJ1Gyxx07bRk2LbA6WKK3A28wfsmjGf48N0NrvjnZQR76kF6YWXwOL
jg23rpuRfRvlV3BW5RVpskCZOVnL4KMQJfPnli/STzZyYQ8RtLQeduNXrnVLsjDo
jmyDOtOKPqmx
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org