Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130382e302f32322d3232203d3e203533313036.roa
File:                     3138372e3130382e3130382e302f32322d3232203d3e203533313036.roa (raw, json)
Hash identifier:          t+47YFHvxV5rwfQh2MacGj/bp0aPfl9wSnoR4yXE3UY=
Subject key identifier:   EB:FA:25:29:95:9D:3C:29:C1:6D:53:33:73:9C:9A:47:2D:60:76:8C
Certificate issuer:       /CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
Certificate serial:       51AD7107315A3BE08F8E728220D5CB234E0615D7
Authority key identifier: DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130382e302f32322d3232203d3e203533313036.roa
Signing time:             Wed 05 Jan 2022 15:53:06 +0000
ROA not before:           Wed 05 Jan 2022 15:48:06 +0000
ROA not after:            Wed 04 Jan 2023 15:53:06 +0000
asID:                     53106
IP address blocks:        187.108.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ad:71:07:31:5a:3b:e0:8f:8e:72:82:20:d5:cb:23:4e:06:15:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
        Validity
            Not Before: Jan  5 15:48:06 2022 GMT
            Not After : Jan  4 15:53:06 2023 GMT
        Subject: CN=EBFA2529959D3C29C16D5333739C9A472D60768C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:7b:a3:7f:8c:24:b2:6c:62:40:cf:c5:2a:
                    87:bd:11:d9:c1:99:ef:d8:a7:37:cb:34:34:fb:47:
                    77:f3:35:6e:04:70:ab:71:42:29:0b:38:0b:f9:5e:
                    5a:37:c7:7c:c8:7d:0a:87:06:21:80:8d:fc:b9:cd:
                    c5:11:48:19:19:ea:7e:da:40:b0:aa:0a:fa:eb:35:
                    0c:ea:de:91:3d:3d:34:38:84:dd:27:67:98:a3:eb:
                    aa:b1:6b:a8:ae:10:5c:ee:b6:d5:2e:38:57:dd:50:
                    fe:47:1a:01:89:0e:52:c1:8e:33:89:37:95:fc:2f:
                    d0:29:6c:5e:ae:6c:32:5d:54:83:7d:d1:1c:51:b4:
                    0b:36:6e:63:37:27:b8:93:97:2c:79:82:a7:1e:7b:
                    b0:40:3d:48:af:e4:85:84:c3:5d:8c:71:db:b7:d3:
                    ed:ae:43:17:53:8d:e4:dd:52:ab:44:aa:9d:31:b7:
                    14:5e:61:ef:c4:aa:e4:c0:8f:08:f4:e3:13:48:56:
                    ef:a4:23:08:4a:fd:5a:fe:66:a4:ee:2e:6a:ce:b2:
                    7e:b0:ac:f6:ad:a1:62:f4:1c:e7:c0:3f:56:78:a3:
                    ad:0b:e7:c8:16:27:8b:55:a6:f8:42:a6:31:43:54:
                    c1:25:d2:00:e0:f4:5a:c2:91:0b:dd:51:51:60:01:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FA:25:29:95:9D:3C:29:C1:6D:53:33:73:9C:9A:47:2D:60:76:8C
            X509v3 Authority Key Identifier:
                keyid:DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130382e302f32322d3232203d3e203533313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:b3:ea:98:ce:75:26:27:7b:72:2f:b0:29:5f:d5:56:04:
         31:aa:d5:df:93:55:31:2a:17:cf:67:f9:59:a6:28:6e:fd:c3:
         29:c0:0f:3c:89:cd:b2:c4:19:a2:0e:e5:3b:82:20:40:09:79:
         0e:ae:39:a8:98:fa:ce:31:d7:93:6c:48:3c:ff:31:fe:0e:61:
         21:b9:18:21:87:1f:54:fe:32:b8:d5:ca:71:24:10:34:60:05:
         bf:2e:17:f1:ca:91:b4:1b:01:71:8e:aa:c0:d3:a4:ed:c4:f4:
         c2:00:ae:ec:4b:d2:2e:2b:0a:13:f4:fc:af:08:f5:3c:f5:e8:
         ae:f2:e4:01:78:d4:30:b4:a8:bd:9d:6a:22:e0:17:6a:83:92:
         25:37:dc:3f:c2:59:f3:76:9b:e6:6d:e7:80:5e:f5:0e:41:33:
         95:1e:fe:df:87:97:4a:a3:11:b7:07:92:0f:3b:a9:05:4e:f1:
         5f:f1:ba:2b:ab:1f:25:17:1b:63:1e:f7:2f:1b:29:3d:75:1b:
         c2:f6:7b:b8:8d:ae:fa:64:7d:61:71:21:11:fc:28:6f:5f:0b:
         50:97:30:71:14:d9:70:0e:04:0d:1a:7d:dd:32:f7:fa:6d:f6:
         b0:b9:0e:26:e5:c3:77:7c:8e:c1:6b:68:23:81:34:c2:f9:c4:
         5b:50:35:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUa1xBzFaO+CPjnKCINXLI04GFdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERFNThGNkQ1N0I5MDM4QTBBMTBBRDQ4NkRGMDdFOTFF
RkU5RDQyNDAeFw0yMjAxMDUxNTQ4MDZaFw0yMzAxMDQxNTUzMDZaMDMxMTAvBgNV
BAMTKEVCRkEyNTI5OTU5RDNDMjlDMTZENTMzMzczOUM5QTQ3MkQ2MDc2OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Tnujf4wksmxiQM/FKoe9EdnB
me/YpzfLNDT7R3fzNW4EcKtxQikLOAv5Xlo3x3zIfQqHBiGAjfy5zcURSBkZ6n7a
QLCqCvrrNQzq3pE9PTQ4hN0nZ5ij66qxa6iuEFzuttUuOFfdUP5HGgGJDlLBjjOJ
N5X8L9ApbF6ubDJdVIN90RxRtAs2bmM3J7iTlyx5gqcee7BAPUiv5IWEw12Mcdu3
0+2uQxdTjeTdUqtEqp0xtxReYe/EquTAjwj04xNIVu+kIwhK/Vr+ZqTuLmrOsn6w
rPatoWL0HOfAP1Z4o60L58gWJ4tVpvhCpjFDVMEl0gDg9FrCkQvdUVFgAdWPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6/olKZWdPCnBbVMzc5yaRy1gdowwHwYDVR0j
BBgwFoAU3eWPbVe5A4oKEK1IbfB+ke/p1CQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEM5ekE5WFpncE00dVY3eFhEQ0ZHaUhkanVqVTRWNTRNWXBmaEpiU2pY
eW4vMC9EREU1OEY2RDU3QjkwMzhBMEExMEFENDg2REYwN0U5MUVGRTlENDI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RERTU4RjZENTdCOTAzOEEw
QTEwQUQ0ODZERjA3RTkxRUZFOUQ0MjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDOXpBOVhaZ3BNNHVWN3hYRENGR2lIZGp1alU0VjU0TVlwZmhKYlNqWHluLzAv
MzEzODM3MmUzMTMwMzgyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzMzMTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7bGwwDQYJKoZIhvcNAQELBQADggEBAEnMs+qY
znUmJ3tyL7ApX9VWBDGq1d+TVTEqF89n+VmmKG79wynADzyJzbLEGaIO5TuCIEAJ
eQ6uOaiY+s4x15NsSDz/Mf4OYSG5GCGHH1T+MrjVynEkEDRgBb8uF/HKkbQbAXGO
qsDTpO3E9MIAruxL0i4rChP0/K8I9Tz16K7y5AF41DC0qL2daiLgF2qDkiU33D/C
WfN2m+Zt54Be9Q5BM5Ue/t+Hl0qjEbcHkg87qQVO8V/xuiurHyUXG2Me9y8bKT11
G8L2e7iNrvpkfWFxIRH8KG9fC1CXMHEU2XAOBA0afd0y9/pt9rC5Diblw3d8jsFr
aCOBNML5xFtQNfc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org