Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32312d3231203d3e203533303631.roa
File:                     3138372e38352e3132382e302f32312d3231203d3e203533303631.roa (raw, json)
Hash identifier:          7FlsDvjG0XvBiP+zIxgRHp78BROTFgIUH/2brh30ZxY=
Subject key identifier:   D1:8D:DA:69:37:32:B9:02:4F:7D:9A:25:5F:17:46:8F:A5:F8:9F:8A
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       15CFFAE5574F8469FC4949881DC1F43F5EA29EC9
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32312d3231203d3e203533303631.roa
Signing time:             Thu 05 May 2022 18:45:51 +0000
ROA not before:           Thu 05 May 2022 18:40:51 +0000
ROA not after:            Thu 04 May 2023 18:45:51 +0000
asID:                     53061
IP address blocks:        187.85.128.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cf:fa:e5:57:4f:84:69:fc:49:49:88:1d:c1:f4:3f:5e:a2:9e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: May  5 18:40:51 2022 GMT
            Not After : May  4 18:45:51 2023 GMT
        Subject: CN=D18DDA693732B9024F7D9A255F17468FA5F89F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:63:13:13:3e:a5:f5:8e:78:6d:7b:14:3b:
                    96:9d:d9:ec:6e:57:0f:57:51:a3:9f:34:e7:11:c0:
                    1e:98:84:4a:04:c7:1b:83:ce:97:e7:91:6e:7f:a0:
                    48:9c:ae:52:53:77:35:23:06:92:ee:af:94:98:a0:
                    54:61:79:3a:b8:2b:06:7b:62:ee:89:86:4b:a9:fd:
                    2d:e9:b5:29:5e:c5:10:d5:d7:f9:0a:8d:da:08:c6:
                    ec:25:a6:78:92:91:9b:38:45:86:9b:39:0d:33:5a:
                    0b:14:51:18:02:e7:3e:02:5e:dd:03:4c:25:f5:e6:
                    4e:fc:9c:45:37:7e:dd:5d:d4:d5:18:2d:9a:63:22:
                    c1:e8:f4:4d:71:ae:1a:36:fc:c6:f7:06:20:c1:e7:
                    0d:41:49:b3:94:ba:be:09:07:1e:85:2b:30:de:4e:
                    6a:59:58:6e:06:95:76:84:13:d1:5f:02:bf:2f:1b:
                    60:8a:94:71:a5:85:50:7b:14:89:c0:fb:81:35:8b:
                    44:b5:d2:49:10:11:77:8c:8c:81:c3:e2:56:56:25:
                    b8:b5:62:b1:ab:29:74:7c:6f:12:40:29:f2:e3:ff:
                    ab:2d:19:c2:8d:51:be:aa:0b:24:43:39:83:a0:1c:
                    77:82:bb:b9:76:2e:12:f9:5a:df:e1:40:7c:e4:fa:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8D:DA:69:37:32:B9:02:4F:7D:9A:25:5F:17:46:8F:A5:F8:9F:8A
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32312d3231203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:cd:e9:e4:df:3d:01:4f:e9:03:15:52:b9:41:80:c4:49:fd:
         e0:d0:72:80:d0:11:7d:e5:5e:eb:e8:38:c3:8b:02:a7:ec:52:
         3c:4d:f7:3c:01:d6:c7:c9:ef:1c:12:2c:86:cf:84:94:35:c9:
         09:95:e2:93:8e:c8:a2:0f:ff:ed:db:aa:b5:ea:19:03:05:6c:
         08:53:eb:df:b4:4e:0b:70:5e:20:3a:4a:58:01:50:76:ba:b8:
         34:f5:3e:d5:11:42:d3:64:e7:74:7a:4d:fd:14:e8:d2:f4:fa:
         cb:7c:68:93:ee:39:00:34:f9:d0:6c:1d:c2:56:39:03:5a:7b:
         32:62:1b:7a:b9:58:e8:49:f2:50:d1:8f:a4:9d:5f:d1:27:67:
         a9:21:4a:84:44:7a:30:f2:97:3e:1b:e4:ea:97:da:2b:3a:01:
         17:d1:17:38:16:0a:99:37:35:bc:75:13:52:ec:04:48:78:fa:
         5d:14:57:32:96:ba:72:0d:26:76:22:41:87:0d:fa:b6:8c:92:
         6d:f7:d9:99:d0:11:30:e8:a1:33:c4:f7:30:0c:13:2b:39:24:
         ca:9d:07:44:04:6d:cb:83:ac:b9:b1:dd:b1:10:ca:f6:78:2d:
         7e:0b:4a:e9:34:36:80:b0:a1:0d:91:15:62:d1:3d:b7:94:5f:
         39:72:fb:7f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFc/65VdPhGn8SUmIHcH0P16inskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQwOUMwODBFOTBDRDRERjM0QTJCMjc0MDQ0N0U5NTQ5
OUIyREYxNDAeFw0yMjA1MDUxODQwNTFaFw0yMzA1MDQxODQ1NTFaMDMxMTAvBgNV
BAMTKEQxOEREQTY5MzczMkI5MDI0RjdEOUEyNTVGMTc0NjhGQTVGODlGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUGMTEz6l9Y54bXsUO5ad2exu
Vw9XUaOfNOcRwB6YhEoExxuDzpfnkW5/oEicrlJTdzUjBpLur5SYoFRheTq4KwZ7
Yu6Jhkup/S3ptSlexRDV1/kKjdoIxuwlpniSkZs4RYabOQ0zWgsUURgC5z4CXt0D
TCX15k78nEU3ft1d1NUYLZpjIsHo9E1xrho2/Mb3BiDB5w1BSbOUur4JBx6FKzDe
TmpZWG4GlXaEE9FfAr8vG2CKlHGlhVB7FInA+4E1i0S10kkQEXeMjIHD4lZWJbi1
YrGrKXR8bxJAKfLj/6stGcKNUb6qCyRDOYOgHHeCu7l2LhL5Wt/hQHzk+t5JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0Y3aaTcyuQJPfZolXxdGj6X4n4owHwYDVR0j
BBgwFoAUZAnAgOkM1N80orJ0BEfpVJmy3xQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JabldkNlkzNWN0YzNhWGR4V1V4dmZBNTFyVDFDajhENXpIdHVLNzJ0
OWMvMC82NDA5QzA4MEU5MENENERGMzRBMkIyNzQwNDQ3RTk1NDk5QjJERjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0MDlDMDgwRTkwQ0Q0REYz
NEEyQjI3NDA0NDdFOTU0OTlCMkRGMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiWm5XZDZZMzVjdGMzYVhkeFdVeHZmQTUxclQxQ2o4RDV6SHR1SzcydDljLzAv
MzEzODM3MmUzODM1MmUzMTMyMzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMz
MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDu1WAMA0GCSqGSIb3DQEBCwUAA4IBAQCBzenk3z0B
T+kDFVK5QYDESf3g0HKA0BF95V7r6DjDiwKn7FI8Tfc8AdbHye8cEiyGz4SUNckJ
leKTjsiiD//t26q16hkDBWwIU+vftE4LcF4gOkpYAVB2urg09T7VEULTZOd0ek39
FOjS9PrLfGiT7jkANPnQbB3CVjkDWnsyYht6uVjoSfJQ0Y+knV/RJ2epIUqERHow
8pc+G+Tql9orOgEX0Rc4FgqZNzW8dRNS7ARIePpdFFcylrpyDSZ2IkGHDfq2jJJt
99mZ0BEw6KEzxPcwDBMrOSTKnQdEBG3Lg6y5sd2xEMr2eC1+C0rpNDaAsKENkRVi
0T23lF85cvt/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org