Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133312e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3133312e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          aSYBa7QvmR7sYY/rnba9Dd67AOxrEa1jFIqfwYebB7g=
Subject key identifier:   1F:02:CA:80:36:BE:0D:CD:5A:63:F3:39:06:AD:F9:9C:A9:C1:ED:B8
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       7C69B98CC35B5F26DFDDEDFD65A14A0B57C6FD15
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133312e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 05 May 2022 18:45:49 +0000
ROA not before:           Thu 05 May 2022 18:40:49 +0000
ROA not after:            Thu 04 May 2023 18:45:49 +0000
asID:                     53061
IP address blocks:        187.85.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:69:b9:8c:c3:5b:5f:26:df:dd:ed:fd:65:a1:4a:0b:57:c6:fd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: May  5 18:40:49 2022 GMT
            Not After : May  4 18:45:49 2023 GMT
        Subject: CN=1F02CA8036BE0DCD5A63F33906ADF99CA9C1EDB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3a:18:36:d5:50:bc:c2:5a:e6:6d:c2:36:4c:
                    b6:98:28:53:55:3c:7c:2f:60:11:15:1d:4b:fa:b6:
                    43:de:e7:06:15:26:c2:13:03:a8:00:e6:f8:e2:80:
                    92:5b:b1:f6:f2:eb:60:a5:47:a0:6a:af:7b:63:f3:
                    c1:63:3a:18:84:be:2f:1f:88:5b:65:bf:7f:4c:84:
                    0e:a8:08:40:dc:1f:d0:99:e0:a7:2f:47:c0:37:72:
                    fd:2e:0d:b0:4b:7b:e2:35:46:74:25:1f:39:0d:5b:
                    90:54:81:72:38:6e:16:7d:0b:ef:f2:ba:0b:93:38:
                    d6:5d:06:5e:21:e4:c2:d6:b0:2d:6e:7c:a8:7a:b1:
                    6f:c8:4d:e0:5a:39:d5:cd:10:19:7c:f6:07:91:e1:
                    a3:f2:53:5a:51:71:4a:7f:43:7d:7a:1f:b0:42:54:
                    c5:ed:f9:77:16:23:45:e5:7a:3e:83:10:26:ce:1f:
                    00:bf:34:cf:bd:40:1a:b8:1c:4d:6d:54:62:ee:44:
                    8c:84:e9:eb:1e:1d:0d:3f:7d:3d:54:1d:74:29:4b:
                    31:71:cd:40:85:bc:86:79:b3:e8:eb:40:e1:f7:e1:
                    9f:a1:19:17:00:7d:47:f9:bc:fb:09:14:a6:e4:c8:
                    ba:36:00:de:34:23:01:cd:a1:59:ee:46:41:3e:0b:
                    1c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:02:CA:80:36:BE:0D:CD:5A:63:F3:39:06:AD:F9:9C:A9:C1:ED:B8
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133312e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:24:55:f4:ec:37:1e:0e:db:b9:3f:28:6c:f3:2a:6c:ec:aa:
         70:f4:62:93:06:5e:a2:6e:e5:67:11:7d:bd:ae:eb:67:98:d4:
         5f:33:d7:45:40:e3:d2:97:d0:aa:c6:46:9a:72:ab:ee:f3:a6:
         18:5b:a5:d1:dd:97:66:63:e6:46:bc:33:f1:16:45:ff:3a:e1:
         77:3c:51:cf:d3:84:55:da:44:21:31:97:2d:9c:56:1b:fe:38:
         08:86:04:97:bb:3d:05:e1:16:b3:69:46:4f:13:a4:c0:d7:07:
         50:1d:d0:c5:77:9f:15:f7:00:16:8a:40:df:b4:0c:bb:f2:5a:
         bb:65:ea:49:77:45:fe:22:ad:0a:0d:f9:f8:5c:da:c7:93:a3:
         69:14:b2:f8:83:39:3d:18:84:db:5e:05:f5:c8:1f:bb:93:41:
         42:fc:74:ab:c2:8f:0a:b3:7e:88:ab:08:a6:d8:c6:62:82:4f:
         aa:70:c3:d0:45:71:25:f2:65:32:58:99:53:db:18:0d:4e:d2:
         ad:ff:04:ca:0a:42:70:3d:e0:7c:40:6e:9f:a8:25:93:a2:b0:
         a1:14:76:41:c6:f6:40:5b:1d:36:00:58:dc:d2:2a:51:c1:a9:
         0f:45:07:35:54:94:96:94:f0:a9:44:0b:08:9f:a0:5b:19:2e:
         8f:c8:56:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfGm5jMNbXybf3e39ZaFKC1fG/RUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQwOUMwODBFOTBDRDRERjM0QTJCMjc0MDQ0N0U5NTQ5
OUIyREYxNDAeFw0yMjA1MDUxODQwNDlaFw0yMzA1MDQxODQ1NDlaMDMxMTAvBgNV
BAMTKDFGMDJDQTgwMzZCRTBEQ0Q1QTYzRjMzOTA2QURGOTlDQTlDMUVEQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7Ohg21VC8wlrmbcI2TLaYKFNV
PHwvYBEVHUv6tkPe5wYVJsITA6gA5vjigJJbsfby62ClR6Bqr3tj88FjOhiEvi8f
iFtlv39MhA6oCEDcH9CZ4KcvR8A3cv0uDbBLe+I1RnQlHzkNW5BUgXI4bhZ9C+/y
uguTONZdBl4h5MLWsC1ufKh6sW/ITeBaOdXNEBl89geR4aPyU1pRcUp/Q316H7BC
VMXt+XcWI0Xlej6DECbOHwC/NM+9QBq4HE1tVGLuRIyE6eseHQ0/fT1UHXQpSzFx
zUCFvIZ5s+jrQOH34Z+hGRcAfUf5vPsJFKbkyLo2AN40IwHNoVnuRkE+Cxz/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHwLKgDa+Dc1aY/M5Bq35nKnB7bgwHwYDVR0j
BBgwFoAUZAnAgOkM1N80orJ0BEfpVJmy3xQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JabldkNlkzNWN0YzNhWGR4V1V4dmZBNTFyVDFDajhENXpIdHVLNzJ0
OWMvMC82NDA5QzA4MEU5MENENERGMzRBMkIyNzQwNDQ3RTk1NDk5QjJERjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0MDlDMDgwRTkwQ0Q0REYz
NEEyQjI3NDA0NDdFOTU0OTlCMkRGMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiWm5XZDZZMzVjdGMzYVhkeFdVeHZmQTUxclQxQ2o4RDV6SHR1SzcydDljLzAv
MzEzODM3MmUzODM1MmUzMTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAu1WDMA0GCSqGSIb3DQEBCwUAA4IBAQB1JFX07Dce
Dtu5Pyhs8yps7Kpw9GKTBl6ibuVnEX29rutnmNRfM9dFQOPSl9Cqxkaacqvu86YY
W6XR3ZdmY+ZGvDPxFkX/OuF3PFHP04RV2kQhMZctnFYb/jgIhgSXuz0F4RazaUZP
E6TA1wdQHdDFd58V9wAWikDftAy78lq7ZepJd0X+Iq0KDfn4XNrHk6NpFLL4gzk9
GITbXgX1yB+7k0FC/HSrwo8Ks36Iqwim2MZigk+qcMPQRXEl8mUyWJlT2xgNTtKt
/wTKCkJwPeB8QG6fqCWTorChFHZBxvZAWx02AFjc0ipRwakPRQc1VJSWlPCpRAsI
n6BbGS6PyFam
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org