Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133302e302f32332d3233203d3e203533303631.roa
File:                     3138372e38352e3133302e302f32332d3233203d3e203533303631.roa (raw, json)
Hash identifier:          Uju+vpakvmljbPsesV6p4Mfo/bSm7Ce6h8eu7aykqDE=
Subject key identifier:   F5:67:77:32:14:AB:1D:AA:83:C8:F8:E9:96:53:4F:C8:CE:EB:D0:48
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       1A3080A253641746AC42D955B6735FCCAA718D1E
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133302e302f32332d3233203d3e203533303631.roa
Signing time:             Thu 31 Aug 2023 18:27:59 +0000
ROA not before:           Thu 31 Aug 2023 18:22:59 +0000
ROA not after:            Thu 29 Aug 2024 18:27:59 +0000
asID:                     53061
IP address blocks:        187.85.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:30:80:a2:53:64:17:46:ac:42:d9:55:b6:73:5f:cc:aa:71:8d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Aug 31 18:22:59 2023 GMT
            Not After : Aug 29 18:27:59 2024 GMT
        Subject: CN=F567773214AB1DAA83C8F8E996534FC8CEEBD048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:73:b1:67:0f:1d:b5:2c:ca:10:1f:9b:1a:
                    0a:b3:41:ba:3a:2e:4f:ee:d9:82:6a:4b:39:8e:ae:
                    97:b5:52:89:ba:ed:72:39:a7:2e:40:9f:72:a0:8a:
                    82:ef:7f:53:bb:1d:fc:9c:3a:ad:4e:6b:d6:19:02:
                    e9:92:57:58:09:31:3f:e7:72:3f:39:78:97:80:a4:
                    be:02:77:64:43:3e:6f:ec:d7:6e:53:6f:cb:7c:33:
                    66:85:a9:16:2d:8f:3d:cd:ed:d2:1e:c4:40:20:1c:
                    c7:0b:2e:77:02:30:6e:b3:07:d4:28:a5:51:eb:76:
                    7f:a3:86:80:cc:8e:36:af:55:79:f0:17:f2:75:11:
                    4b:8e:69:6a:84:98:a0:27:9d:65:b0:c0:bb:08:72:
                    0b:f7:f9:52:b3:51:b4:68:2b:29:78:76:48:dc:38:
                    54:33:fa:36:35:2e:44:07:0b:91:1e:62:03:60:15:
                    8b:24:f3:43:16:68:eb:5f:37:55:2e:80:84:b7:2d:
                    97:22:6b:17:2a:69:f4:47:86:42:85:10:0d:c6:31:
                    7a:14:b8:a9:5d:82:84:7f:dc:59:51:af:34:a6:01:
                    c3:1c:3f:63:c2:90:c5:6d:1d:9c:db:6c:17:9b:94:
                    e9:a0:ff:7c:d7:6b:04:45:4a:98:5c:4e:68:48:d1:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:77:32:14:AB:1D:AA:83:C8:F8:E9:96:53:4F:C8:CE:EB:D0:48
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133302e302f32332d3233203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:88:a5:27:57:fa:1b:4c:e9:fc:5e:e3:3c:20:95:95:7d:12:
         ee:f1:f9:b5:c2:d5:fe:7f:cf:7e:5b:80:46:a8:19:4d:f0:22:
         4e:bc:08:9c:dc:32:4b:ce:5f:be:7b:4d:c4:4c:bc:74:9e:32:
         d2:d6:f4:f0:2a:7a:49:54:78:42:11:3e:59:73:db:6c:32:f6:
         34:3e:d3:1e:87:7b:00:e6:08:8c:2c:4b:5b:5a:a8:6e:5a:f8:
         ea:dc:bf:e3:93:eb:8a:b9:8a:65:9d:7c:ad:14:34:87:f0:9a:
         4f:3b:ed:26:ba:c0:ad:4d:23:87:7a:36:d6:05:5f:e0:17:eb:
         b9:e5:79:22:d6:7b:0b:96:54:e0:76:76:0b:2d:79:9b:70:53:
         57:44:15:4f:5e:26:7e:5b:f9:29:4f:19:ab:b4:ae:b7:1b:d6:
         fd:f9:28:3c:e8:04:7b:a5:4a:88:d6:cd:cc:9f:3d:cc:08:df:
         3b:a1:6a:7e:81:ab:f4:3f:27:7f:cb:1b:5a:c6:4f:0f:b3:58:
         f0:dd:39:22:1b:01:dd:9c:e7:b3:ba:e3:53:5d:df:4a:70:43:
         9a:a3:27:c7:25:f6:12:9b:d4:ee:d3:55:c3:17:03:af:c2:a6:
         a0:ca:b0:8b:cd:17:61:3f:d6:31:3d:30:cc:45:a7:c9:e8:51:
         56:88:3d:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGjCAolNkF0asQtlVtnNfzKpxjR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQwOUMwODBFOTBDRDRERjM0QTJCMjc0MDQ0N0U5NTQ5
OUIyREYxNDAeFw0yMzA4MzExODIyNTlaFw0yNDA4MjkxODI3NTlaMDMxMTAvBgNV
BAMTKEY1Njc3NzMyMTRBQjFEQUE4M0M4RjhFOTk2NTM0RkM4Q0VFQkQwNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7HOxZw8dtSzKEB+bGgqzQbo6
Lk/u2YJqSzmOrpe1Uom67XI5py5An3KgioLvf1O7HfycOq1Oa9YZAumSV1gJMT/n
cj85eJeApL4Cd2RDPm/s125Tb8t8M2aFqRYtjz3N7dIexEAgHMcLLncCMG6zB9Qo
pVHrdn+jhoDMjjavVXnwF/J1EUuOaWqEmKAnnWWwwLsIcgv3+VKzUbRoKyl4dkjc
OFQz+jY1LkQHC5EeYgNgFYsk80MWaOtfN1UugIS3LZciaxcqafRHhkKFEA3GMXoU
uKldgoR/3FlRrzSmAcMcP2PCkMVtHZzbbBeblOmg/3zXawRFSphcTmhI0RFbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9Wd3MhSrHaqDyPjpllNPyM7r0EgwHwYDVR0j
BBgwFoAUZAnAgOkM1N80orJ0BEfpVJmy3xQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JabldkNlkzNWN0YzNhWGR4V1V4dmZBNTFyVDFDajhENXpIdHVLNzJ0
OWMvMC82NDA5QzA4MEU5MENENERGMzRBMkIyNzQwNDQ3RTk1NDk5QjJERjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0MDlDMDgwRTkwQ0Q0REYz
NEEyQjI3NDA0NDdFOTU0OTlCMkRGMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiWm5XZDZZMzVjdGMzYVhkeFdVeHZmQTUxclQxQ2o4RDV6SHR1SzcydDljLzAv
MzEzODM3MmUzODM1MmUzMTMzMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBu1WCMA0GCSqGSIb3DQEBCwUAA4IBAQBRiKUnV/ob
TOn8XuM8IJWVfRLu8fm1wtX+f89+W4BGqBlN8CJOvAic3DJLzl++e03ETLx0njLS
1vTwKnpJVHhCET5Zc9tsMvY0PtMeh3sA5giMLEtbWqhuWvjq3L/jk+uKuYplnXyt
FDSH8JpPO+0musCtTSOHejbWBV/gF+u55Xki1nsLllTgdnYLLXmbcFNXRBVPXiZ+
W/kpTxmrtK63G9b9+Sg86AR7pUqI1s3Mnz3MCN87oWp+gav0Pyd/yxtaxk8Ps1jw
3TkiGwHdnOezuuNTXd9KcEOaoyfHJfYSm9Tu01XDFwOvwqagyrCLzRdhP9YxPTDM
RafJ6FFWiD0D
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org