Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e39362e302f32302d3230203d3e203533313036.roa
File:                     3138372e3130382e39362e302f32302d3230203d3e203533313036.roa (raw, json)
Hash identifier:          bFHt611WbxNPSkW4Frhrm0X1sw/Oj3Vl1G0Aqndvkek=
Subject key identifier:   4F:B2:6B:DE:DE:77:CE:B9:49:05:75:94:49:F4:57:8F:23:1F:45:F0
Certificate issuer:       /CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
Certificate serial:       25A6CCFD3A0474A04D0BD177A29AD8FD98BC9D23
Authority key identifier: DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e39362e302f32302d3230203d3e203533313036.roa
Signing time:             Wed 05 Jan 2022 15:53:06 +0000
ROA not before:           Wed 05 Jan 2022 15:48:06 +0000
ROA not after:            Wed 04 Jan 2023 15:53:06 +0000
asID:                     53106
IP address blocks:        187.108.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a6:cc:fd:3a:04:74:a0:4d:0b:d1:77:a2:9a:d8:fd:98:bc:9d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
        Validity
            Not Before: Jan  5 15:48:06 2022 GMT
            Not After : Jan  4 15:53:06 2023 GMT
        Subject: CN=4FB26BDEDE77CEB94905759449F4578F231F45F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:a3:59:3f:c3:07:0d:c7:74:53:31:28:c2:
                    34:2b:d0:15:20:c4:79:03:dd:39:1a:1a:c0:3b:b1:
                    7f:0c:58:23:4d:d7:7a:2b:15:a6:66:a6:e0:16:ce:
                    1a:8e:49:db:af:99:05:41:4e:23:3d:88:fc:7d:ef:
                    89:b0:1b:92:c5:ae:1a:cb:c7:43:54:04:cf:31:60:
                    21:3c:b6:2f:cc:4a:0d:e5:87:5b:ed:27:0e:17:8b:
                    fc:91:83:7a:1e:32:2a:57:96:b0:7f:fc:28:1c:2b:
                    8d:a2:ca:e6:3a:86:92:4d:fa:f1:91:89:34:59:68:
                    00:9b:ea:1a:11:03:ec:f2:02:e7:8b:67:af:13:25:
                    bd:45:9a:a1:fb:b5:25:4f:a0:36:cf:2c:9b:db:f7:
                    6f:57:38:97:ad:e8:73:5c:00:58:e3:75:e4:b7:d7:
                    84:c0:61:82:5b:3f:6c:b2:a0:e6:40:05:5a:27:81:
                    32:90:2b:60:39:69:90:3d:38:7e:00:03:43:da:cf:
                    74:3a:fb:10:b4:ab:51:79:4e:28:65:d5:e9:c5:30:
                    8a:fc:5b:56:c8:45:12:0d:f3:ed:a1:a2:d4:f8:bd:
                    58:8b:01:5e:34:f2:19:36:81:b7:f4:6d:db:c2:c7:
                    d1:27:7c:ba:63:8e:8a:dd:a1:8f:5e:18:f2:1e:a6:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B2:6B:DE:DE:77:CE:B9:49:05:75:94:49:F4:57:8F:23:1F:45:F0
            X509v3 Authority Key Identifier:
                keyid:DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e39362e302f32302d3230203d3e203533313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:90:6d:48:1f:3d:5c:3c:2e:1a:2e:c0:64:59:78:ae:10:76:
         e0:98:a6:66:5f:1b:29:f5:2d:7e:68:2a:b3:f6:f8:df:9e:1f:
         c7:c2:c9:3d:e6:44:1a:3a:fe:1a:ca:56:9a:e5:21:57:38:68:
         dc:15:87:c1:ac:57:aa:84:0f:b4:5a:1a:40:af:2e:64:38:7a:
         10:00:c7:b3:8b:2a:e9:1c:08:bd:e8:55:27:82:21:4c:c5:e6:
         29:a4:fb:26:2c:05:41:3d:da:48:cd:fa:ef:ec:66:88:b6:5d:
         de:38:e2:b4:a6:60:f3:65:40:a4:23:8a:ad:0c:ad:bf:c5:59:
         a5:67:d2:dc:ac:fb:d5:d4:ad:65:95:04:0b:1b:ae:59:2e:ea:
         08:44:59:62:4b:83:e8:f4:7d:e8:db:79:b6:c8:aa:93:6a:fd:
         82:12:23:83:59:c2:6f:4c:d1:ff:44:99:1d:e5:6b:0d:bc:e6:
         ca:a6:5c:53:4d:c1:9d:49:f0:5f:17:31:cd:e7:52:67:50:68:
         78:69:d3:5e:64:f6:bd:fc:ec:85:ab:fd:04:7c:fa:07:8b:0f:
         bc:19:03:e0:3b:a1:b0:b6:94:23:c3:a3:bb:1d:d8:91:1c:a5:
         c6:34:3c:4e:3f:fd:27:e4:94:c5:ba:47:d5:55:1b:1e:6c:38:
         fe:ca:e4:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJabM/ToEdKBNC9F3oprY/Zi8nSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERFNThGNkQ1N0I5MDM4QTBBMTBBRDQ4NkRGMDdFOTFF
RkU5RDQyNDAeFw0yMjAxMDUxNTQ4MDZaFw0yMzAxMDQxNTUzMDZaMDMxMTAvBgNV
BAMTKDRGQjI2QkRFREU3N0NFQjk0OTA1NzU5NDQ5RjQ1NzhGMjMxRjQ1RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTqNZP8MHDcd0UzEowjQr0BUg
xHkD3TkaGsA7sX8MWCNN13orFaZmpuAWzhqOSduvmQVBTiM9iPx974mwG5LFrhrL
x0NUBM8xYCE8ti/MSg3lh1vtJw4Xi/yRg3oeMipXlrB//CgcK42iyuY6hpJN+vGR
iTRZaACb6hoRA+zyAueLZ68TJb1FmqH7tSVPoDbPLJvb929XOJet6HNcAFjjdeS3
14TAYYJbP2yyoOZABVongTKQK2A5aZA9OH4AA0Paz3Q6+xC0q1F5Tihl1enFMIr8
W1bIRRIN8+2hotT4vViLAV408hk2gbf0bdvCx9EnfLpjjordoY9eGPIepgpTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUT7Jr3t53zrlJBXWUSfRXjyMfRfAwHwYDVR0j
BBgwFoAU3eWPbVe5A4oKEK1IbfB+ke/p1CQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEM5ekE5WFpncE00dVY3eFhEQ0ZHaUhkanVqVTRWNTRNWXBmaEpiU2pY
eW4vMC9EREU1OEY2RDU3QjkwMzhBMEExMEFENDg2REYwN0U5MUVGRTlENDI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RERTU4RjZENTdCOTAzOEEw
QTEwQUQ0ODZERjA3RTkxRUZFOUQ0MjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDOXpBOVhaZ3BNNHVWN3hYRENGR2lIZGp1alU0VjU0TVlwZmhKYlNqWHluLzAv
MzEzODM3MmUzMTMwMzgyZTM5MzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMz
MzEzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu2xgMA0GCSqGSIb3DQEBCwUAA4IBAQBdkG1IHz1c
PC4aLsBkWXiuEHbgmKZmXxsp9S1+aCqz9vjfnh/Hwsk95kQaOv4aylaa5SFXOGjc
FYfBrFeqhA+0WhpAry5kOHoQAMeziyrpHAi96FUngiFMxeYppPsmLAVBPdpIzfrv
7GaItl3eOOK0pmDzZUCkI4qtDK2/xVmlZ9LcrPvV1K1llQQLG65ZLuoIRFliS4Po
9H3o23m2yKqTav2CEiODWcJvTNH/RJkd5WsNvObKplxTTcGdSfBfFzHN51JnUGh4
adNeZPa9/OyFq/0EfPoHiw+8GQPgO6GwtpQjw6O7HdiRHKXGNDxOP/0n5JTFukfV
VRsebDj+yuTQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org