Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138362e3233362e33322e302f32302d3234203d3e20323632363838.roa
File:                     3138362e3233362e33322e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          YkbftUWmF8zO+7lRQVRkFLwd6/VTH1zfuGqMS988rG8=
Subject key identifier:   91:9B:E1:85:6D:B7:A9:2D:C9:1E:AD:F3:FB:8D:9A:7A:4D:F8:C5:38
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       3E712F0F92DF0A0652FB34BB9FDF28C040DAD76D
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138362e3233362e33322e302f32302d3234203d3e20323632363838.roa
Signing time:             Wed 21 Dec 2022 17:16:45 +0000
ROA not before:           Wed 21 Dec 2022 17:11:45 +0000
ROA not after:            Wed 20 Dec 2023 17:16:45 +0000
asID:                     262688
IP address blocks:        186.236.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:71:2f:0f:92:df:0a:06:52:fb:34:bb:9f:df:28:c0:40:da:d7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:45 2022 GMT
            Not After : Dec 20 17:16:45 2023 GMT
        Subject: CN=919BE1856DB7A92DC91EADF3FB8D9A7A4DF8C538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:17:9e:94:5b:36:d4:75:ff:02:ef:fd:be:
                    b7:83:1f:1a:e2:2f:2f:a4:6d:75:d0:2e:8a:54:7c:
                    cb:69:c0:81:9f:92:a3:f5:67:17:23:47:46:00:f0:
                    8b:22:c2:f6:ad:3e:08:4c:96:5c:63:e3:39:c1:42:
                    91:aa:a1:59:2b:cb:89:74:93:c7:01:e2:2a:c7:fc:
                    09:a1:5b:05:51:07:fa:30:de:59:27:82:c0:85:dd:
                    b8:72:ad:c3:d7:fd:2f:8b:df:64:46:45:cc:b7:71:
                    36:2d:9e:0d:27:06:47:c1:63:87:b4:5b:4b:1c:1c:
                    c1:8d:84:48:87:4f:c0:59:98:3e:3f:a7:71:33:94:
                    65:92:16:b4:f4:9c:fe:5d:89:ef:4f:cf:15:fa:db:
                    1a:1d:3f:57:a4:c5:87:88:4e:49:b0:68:50:d5:71:
                    80:d5:0e:88:80:fa:f0:d2:14:ce:98:f8:f8:d8:ab:
                    c7:f2:d6:47:28:57:be:15:16:de:0c:c7:19:9e:8f:
                    1c:f6:cf:68:c1:66:9e:29:63:a4:2e:c3:77:76:b5:
                    d5:23:a8:12:a0:89:bb:aa:89:9f:bf:4a:44:9f:3d:
                    2f:e0:8a:ef:da:ef:c5:bd:d1:4d:de:8f:d1:01:e1:
                    5a:d0:d4:03:21:5f:c0:c4:01:56:e9:5d:8f:14:84:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:E1:85:6D:B7:A9:2D:C9:1E:AD:F3:FB:8D:9A:7A:4D:F8:C5:38
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138362e3233362e33322e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:e9:c1:6d:01:b4:f0:8e:ca:da:ff:63:69:72:97:3a:33:6b:
         3a:47:03:19:cc:f7:6a:88:61:f2:0d:72:32:75:02:96:d6:92:
         d3:f0:50:d2:8a:8f:2c:59:e7:0a:05:a8:82:e6:a2:1a:69:74:
         84:df:b6:76:1c:48:28:8c:cb:db:57:d4:3b:20:6d:83:ed:cd:
         5d:6b:92:d0:61:53:49:7f:64:ef:b1:d5:b0:4a:ea:07:07:ae:
         2d:38:47:59:5d:12:38:d8:96:1d:2a:d7:3e:3e:ba:96:6c:69:
         cf:31:dc:7f:3d:ac:b5:94:e6:4d:68:e7:e3:5b:e2:bd:1d:1d:
         15:8e:5d:f8:73:02:ca:63:58:e2:24:fe:42:db:10:36:1a:0d:
         8f:af:c0:b5:50:00:78:07:c1:47:27:f1:a0:1f:87:45:14:db:
         ba:cf:9f:b5:06:f6:26:79:18:8b:36:2c:df:e4:f2:cf:48:b1:
         d5:41:46:dd:52:42:b5:da:6b:e6:e1:b3:98:80:85:47:fd:23:
         0e:e6:12:a0:08:66:07:a8:c2:f3:7f:89:1f:17:f7:f5:67:12:
         c8:8c:7f:3a:fd:c5:9e:7c:91:71:31:d1:94:f2:5d:fd:7a:9b:
         74:4b:0c:8e:fd:53:a4:07:3c:b8:58:8f:c8:53:a2:58:4b:fd:
         2b:73:61:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPnEvD5LfCgZS+zS7n98owEDa120wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhFODQxRUFFNTg4MEY2Nzg3M0RCODg0NzI2OTk2OTI5
NDUwNzc4OTAeFw0yMjEyMjExNzExNDVaFw0yMzEyMjAxNzE2NDVaMDMxMTAvBgNV
BAMTKDkxOUJFMTg1NkRCN0E5MkRDOTFFQURGM0ZCOEQ5QTdBNERGOEM1MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8xeelFs21HX/Au/9vreDHxri
Ly+kbXXQLopUfMtpwIGfkqP1ZxcjR0YA8IsiwvatPghMllxj4znBQpGqoVkry4l0
k8cB4irH/AmhWwVRB/ow3lkngsCF3bhyrcPX/S+L32RGRcy3cTYtng0nBkfBY4e0
W0scHMGNhEiHT8BZmD4/p3EzlGWSFrT0nP5die9PzxX62xodP1ekxYeITkmwaFDV
cYDVDoiA+vDSFM6Y+PjYq8fy1kcoV74VFt4Mxxmejxz2z2jBZp4pY6Quw3d2tdUj
qBKgibuqiZ+/SkSfPS/giu/a78W90U3ej9EB4VrQ1AMhX8DEAVbpXY8UhDD7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkZvhhW23qS3JHq3z+42aek34xTgwHwYDVR0j
BBgwFoAUuOhB6uWID2eHPbiEcmmWkpRQd4kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMS9COEU4NDFFQUU1ODgwRjY3ODczREI4ODQ3MjY5OTY5Mjk0NTA3Nzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4RTg0MUVBRTU4ODBGNjc4
NzNEQjg4NDcyNjk5NjkyOTQ1MDc3ODkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzEv
MzEzODM2MmUzMjMzMzYyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS67CAwDQYJKoZIhvcNAQELBQADggEBADTpwW0B
tPCOytr/Y2lylzozazpHAxnM92qIYfINcjJ1ApbWktPwUNKKjyxZ5woFqILmohpp
dITftnYcSCiMy9tX1DsgbYPtzV1rktBhU0l/ZO+x1bBK6gcHri04R1ldEjjYlh0q
1z4+upZsac8x3H89rLWU5k1o5+Nb4r0dHRWOXfhzAspjWOIk/kLbEDYaDY+vwLVQ
AHgHwUcn8aAfh0UU27rPn7UG9iZ5GIs2LN/k8s9IsdVBRt1SQrXaa+bhs5iAhUf9
Iw7mEqAIZgeowvN/iR8X9/VnEsiMfzr9xZ58kXEx0ZTyXf16m3RLDI79U6QHPLhY
j8hTolhL/StzYXY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org