Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133352e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3133352e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          tFoQCQ92+fbanTm5m7y9iJuX6AiBpIfsOBt0MZX1+Hc=
Subject key identifier:   6F:34:3B:8B:22:4E:DD:A7:4B:89:9A:80:C6:50:1C:EA:B8:6B:6E:0F
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       344283D28E3CBAD60965E32A84732ADB8228D8CC
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133352e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:43 +0000
ROA not before:           Thu 06 Apr 2023 19:15:43 +0000
ROA not after:            Thu 04 Apr 2024 19:20:43 +0000
asID:                     53061
IP address blocks:        187.85.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:42:83:d2:8e:3c:ba:d6:09:65:e3:2a:84:73:2a:db:82:28:d8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:43 2023 GMT
            Not After : Apr  4 19:20:43 2024 GMT
        Subject: CN=6F343B8B224EDDA74B899A80C6501CEAB86B6E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:44:0a:37:13:95:b4:10:4d:be:e4:33:70:
                    12:11:8c:19:46:62:72:9f:53:e6:2d:a9:32:c4:8d:
                    cf:02:97:62:d0:80:d4:91:e7:da:67:1e:38:ab:0c:
                    ff:f3:62:aa:5f:c8:2a:c8:b2:31:46:33:30:08:b2:
                    6b:6b:04:49:8c:66:a4:1d:db:69:22:20:f8:66:8a:
                    37:87:e2:41:be:d7:6e:ac:48:c2:cb:15:58:92:6c:
                    c8:00:41:38:02:66:47:86:c5:0e:bb:1b:88:ed:8f:
                    ce:5c:6d:d2:9a:da:28:12:f3:4c:04:ed:66:19:57:
                    d4:cd:c3:65:75:6e:2c:11:0e:e6:ee:95:d6:dd:68:
                    c8:a5:9d:4a:87:20:2e:93:bc:33:6d:20:67:4c:dd:
                    3f:e0:46:3c:cc:2c:44:64:d4:a0:cb:66:24:f1:c4:
                    63:bb:86:dd:b6:95:13:92:07:10:b1:71:00:dc:c8:
                    dc:43:22:e9:78:ed:93:bb:c9:af:99:df:53:bb:93:
                    e7:44:0c:5f:eb:e1:c1:8a:b0:6c:a9:b6:bc:35:10:
                    1b:2e:4a:2d:cb:d0:bc:03:90:21:6e:4d:eb:fa:91:
                    0c:0b:f2:3a:ab:4d:50:db:44:c8:78:b6:15:e8:f2:
                    74:91:b6:ff:b4:46:d5:16:7d:25:15:49:f9:ad:b4:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:34:3B:8B:22:4E:DD:A7:4B:89:9A:80:C6:50:1C:EA:B8:6B:6E:0F
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133352e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:15:79:c1:35:f7:e2:45:45:44:35:df:c4:fd:11:9b:0a:8b:
         5d:a3:1b:d5:7e:51:62:d3:5e:59:cf:15:be:13:de:4c:b2:65:
         c4:39:64:76:df:ea:f0:1e:96:1d:d8:91:23:65:ae:35:7e:ac:
         c7:8f:be:76:b4:61:c5:06:b7:5c:8d:99:1f:76:7d:09:67:01:
         50:ed:fd:e2:dc:b5:5f:9f:b5:d6:17:15:8b:60:8f:ad:a3:e4:
         41:0e:a3:e9:02:0d:1b:77:31:0a:41:37:a0:46:8e:2e:18:1d:
         44:24:94:b3:66:ca:95:c1:8c:68:65:ad:8c:0f:cf:3b:0b:29:
         16:01:76:de:75:44:d8:4f:c6:41:56:18:98:64:89:24:82:56:
         b1:fd:8e:21:df:2e:ba:69:a7:57:b4:62:50:c5:5c:90:67:08:
         5f:e0:58:7c:ec:e4:74:be:4a:49:d1:78:0d:4d:c4:34:24:cb:
         eb:55:0c:d3:1e:d3:cb:76:77:03:da:73:fe:56:15:8c:03:60:
         f3:ce:ef:1b:f6:c3:11:0d:a9:d1:df:17:f8:eb:6d:1b:c6:83:
         e1:66:75:f4:02:bb:b1:45:a1:35:ed:d9:18:63:f5:0d:3c:f8:
         18:72:a1:62:16:0f:d2:86:1a:39:eb:f1:df:19:fb:23:6b:d9:
         3f:8e:7e:5d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNEKD0o48utYJZeMqhHMq24Io2MwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQwOUMwODBFOTBDRDRERjM0QTJCMjc0MDQ0N0U5NTQ5
OUIyREYxNDAeFw0yMzA0MDYxOTE1NDNaFw0yNDA0MDQxOTIwNDNaMDMxMTAvBgNV
BAMTKDZGMzQzQjhCMjI0RUREQTc0Qjg5OUE4MEM2NTAxQ0VBQjg2QjZFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBe0QKNxOVtBBNvuQzcBIRjBlG
YnKfU+YtqTLEjc8Cl2LQgNSR59pnHjirDP/zYqpfyCrIsjFGMzAIsmtrBEmMZqQd
22kiIPhmijeH4kG+126sSMLLFViSbMgAQTgCZkeGxQ67G4jtj85cbdKa2igS80wE
7WYZV9TNw2V1biwRDubuldbdaMilnUqHIC6TvDNtIGdM3T/gRjzMLERk1KDLZiTx
xGO7ht22lROSBxCxcQDcyNxDIul47ZO7ya+Z31O7k+dEDF/r4cGKsGyptrw1EBsu
Si3L0LwDkCFuTev6kQwL8jqrTVDbRMh4thXo8nSRtv+0RtUWfSUVSfmttOH9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbzQ7iyJO3adLiZqAxlAc6rhrbg8wHwYDVR0j
BBgwFoAUZAnAgOkM1N80orJ0BEfpVJmy3xQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JabldkNlkzNWN0YzNhWGR4V1V4dmZBNTFyVDFDajhENXpIdHVLNzJ0
OWMvMC82NDA5QzA4MEU5MENENERGMzRBMkIyNzQwNDQ3RTk1NDk5QjJERjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0MDlDMDgwRTkwQ0Q0REYz
NEEyQjI3NDA0NDdFOTU0OTlCMkRGMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiWm5XZDZZMzVjdGMzYVhkeFdVeHZmQTUxclQxQ2o4RDV6SHR1SzcydDljLzAv
MzEzODM3MmUzODM1MmUzMTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAu1WHMA0GCSqGSIb3DQEBCwUAA4IBAQCRFXnBNffi
RUVENd/E/RGbCotdoxvVflFi015ZzxW+E95MsmXEOWR23+rwHpYd2JEjZa41fqzH
j752tGHFBrdcjZkfdn0JZwFQ7f3i3LVfn7XWFxWLYI+to+RBDqPpAg0bdzEKQTeg
Ro4uGB1EJJSzZsqVwYxoZa2MD887CykWAXbedUTYT8ZBVhiYZIkkglax/Y4h3y66
aadXtGJQxVyQZwhf4Fh87OR0vkpJ0XgNTcQ0JMvrVQzTHtPLdncD2nP+VhWMA2Dz
zu8b9sMRDanR3xf4620bxoPhZnX0AruxRaE17dkYY/UNPPgYcqFiFg/Shho56/Hf
Gfsja9k/jn5d
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org