Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3138372e38372e32382e302f32322d3234203d3e203631363130.roa
File:                     3138372e38372e32382e302f32322d3234203d3e203631363130.roa (raw, json)
Hash identifier:          iH93TG9+/feEwWM5N/Zq8MRQsC4scalYocgKzg9JNr0=
Subject key identifier:   6E:3E:17:DF:50:3D:8C:5B:EF:82:92:D7:F4:53:B9:63:52:57:14:D5
Certificate issuer:       /CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
Certificate serial:       4A5DB9512A4BF5EC57A46B4DB95E71EDA6B30153
Authority key identifier: D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3138372e38372e32382e302f32322d3234203d3e203631363130.roa
Signing time:             Tue 25 Jul 2023 17:48:54 +0000
ROA not before:           Tue 25 Jul 2023 17:43:54 +0000
ROA not after:            Tue 23 Jul 2024 17:48:54 +0000
asID:                     61610
IP address blocks:        187.87.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5d:b9:51:2a:4b:f5:ec:57:a4:6b:4d:b9:5e:71:ed:a6:b3:01:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
        Validity
            Not Before: Jul 25 17:43:54 2023 GMT
            Not After : Jul 23 17:48:54 2024 GMT
        Subject: CN=6E3E17DF503D8C5BEF8292D7F453B963525714D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:6a:2d:a5:bc:78:ad:b2:ff:79:f8:72:12:
                    48:49:78:c3:e3:c4:a2:85:16:fe:e8:81:34:c6:a6:
                    a2:bf:70:8b:8a:85:c5:36:81:7b:03:f0:80:1b:bd:
                    ce:ec:60:26:8b:70:8d:e2:bd:72:22:d5:c7:21:cc:
                    f4:a0:76:37:0b:77:26:00:26:8a:b6:43:66:61:b7:
                    6e:e8:29:72:72:40:88:ce:41:06:e1:97:e3:a0:10:
                    0e:1a:dd:8c:4f:b7:2c:bf:3a:28:d2:2f:27:e2:df:
                    f7:10:df:6f:1a:fa:c7:49:6f:09:b0:5a:55:52:f4:
                    c1:b0:73:a6:ee:d6:ce:72:ae:52:f8:d8:ee:de:df:
                    dd:cd:7e:d0:38:d1:8f:27:01:56:d4:12:2c:83:e5:
                    b8:f6:10:0e:37:bb:af:1d:ec:f6:cb:52:68:ba:f7:
                    3b:4a:12:41:48:31:68:be:bd:ad:06:00:49:22:9d:
                    b3:52:06:69:36:e5:53:17:62:13:62:43:c6:a6:f8:
                    18:1f:f8:d6:23:2b:2c:cf:99:90:ce:44:53:cd:97:
                    48:71:d8:c5:83:d5:da:72:2f:eb:ca:1a:01:08:ef:
                    6d:e2:57:f4:fb:ee:c0:57:3f:8b:e0:84:7b:42:50:
                    65:a3:46:cd:b7:92:7e:4a:cd:82:59:b6:ae:3a:a6:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3E:17:DF:50:3D:8C:5B:EF:82:92:D7:F4:53:B9:63:52:57:14:D5
            X509v3 Authority Key Identifier:
                keyid:D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3138372e38372e32382e302f32322d3234203d3e203631363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:ea:f6:75:e2:44:fd:28:f7:89:00:cc:4b:fd:30:a2:fd:97:
         b9:9c:94:ad:e5:d4:df:90:ae:d6:5d:4f:45:75:ff:bb:5e:b5:
         89:fb:b9:c8:2d:ab:7b:2f:e8:0b:ee:c3:d1:38:0f:f2:e0:e9:
         77:03:06:f2:6e:ff:eb:2f:8b:28:4a:bf:34:e3:c5:2e:7e:e8:
         e4:60:cd:08:a2:65:79:61:f3:92:aa:09:97:32:14:7e:1f:47:
         38:b0:6f:11:a2:19:d3:b8:36:cc:bf:cd:a3:45:1f:42:c7:40:
         26:85:a2:a2:11:c8:75:53:30:37:24:d6:24:73:7f:ae:1c:b7:
         c9:36:d6:a5:ed:3e:fc:15:06:6a:ea:06:96:ef:b5:6f:52:7c:
         e5:11:81:1d:d1:88:4c:1c:48:73:ab:d1:62:16:37:33:47:68:
         d9:10:72:22:69:1d:4c:e3:55:8b:f6:fc:a5:2e:90:3e:38:7e:
         ad:04:e2:e8:c2:f2:e1:8d:d5:dc:5a:ca:55:cf:22:f1:1f:ed:
         fe:f6:78:fb:2b:e7:63:48:ef:60:c5:74:b0:bb:77:4b:35:5c:
         f9:a3:d5:4f:b6:37:12:33:4a:b8:50:1b:21:2d:85:48:68:38:
         aa:a8:b1:08:43:12:f5:a4:f4:9c:f9:96:9a:58:2c:4d:4e:04:
         33:50:fd:ca
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSl25USpL9exXpGtNuV5x7aazAVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCRDZCQzNENEY3MEVDRDBCOEM5QjgwREE0MDkxRUE3
NENFM0UzNDAeFw0yMzA3MjUxNzQzNTRaFw0yNDA3MjMxNzQ4NTRaMDMxMTAvBgNV
BAMTKDZFM0UxN0RGNTAzRDhDNUJFRjgyOTJEN0Y0NTNCOTYzNTI1NzE0RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2Gotpbx4rbL/efhyEkhJeMPj
xKKFFv7ogTTGpqK/cIuKhcU2gXsD8IAbvc7sYCaLcI3ivXIi1cchzPSgdjcLdyYA
Joq2Q2Zht27oKXJyQIjOQQbhl+OgEA4a3YxPtyy/OijSLyfi3/cQ328a+sdJbwmw
WlVS9MGwc6bu1s5yrlL42O7e393NftA40Y8nAVbUEiyD5bj2EA43u68d7PbLUmi6
9ztKEkFIMWi+va0GAEkinbNSBmk25VMXYhNiQ8am+Bgf+NYjKyzPmZDORFPNl0hx
2MWD1dpyL+vKGgEI723iV/T77sBXP4vghHtCUGWjRs23kn5KzYJZtq46piTVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUbj4X31A9jFvvgpLX9FO5Y1JXFNUwHwYDVR0j
BBgwFoAU2L1rw9T3Ds0LjJuA2kCR6nTOPjQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51
RlcvMC9EOEJENkJDM0Q0RjcwRUNEMEI4QzlCODBEQTQwOTFFQTc0Q0UzRTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4QkQ2QkMzRDRGNzBFQ0Qw
QjhDOUI4MERBNDA5MUVBNzRDRTNFMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1dEFtNW55TEx2U3JVZGdSdDQ0VFBZNXZSOXFUYnl6Rk1SRFVhVFZOdUZXLzAv
MzEzODM3MmUzODM3MmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM2
MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArtXHDANBgkqhkiG9w0BAQsFAAOCAQEAcur2deJE/Sj3
iQDMS/0wov2XuZyUreXU35Cu1l1PRXX/u161ifu5yC2rey/oC+7D0TgP8uDpdwMG
8m7/6y+LKEq/NOPFLn7o5GDNCKJleWHzkqoJlzIUfh9HOLBvEaIZ07g2zL/No0Uf
QsdAJoWiohHIdVMwNyTWJHN/rhy3yTbWpe0+/BUGauoGlu+1b1J85RGBHdGITBxI
c6vRYhY3M0do2RByImkdTONVi/b8pS6QPjh+rQTi6MLy4Y3V3FrKVc8i8R/t/vZ4
+yvnY0jvYMV0sLt3SzVc+aPVT7Y3EjNKuFAbIS2FSGg4qqixCEMS9aT0nPmWmlgs
TU4EM1D9yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org