Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/3138372e36332e3233342e302f32332d3233203d3e20323731363631.roa
File:                     3138372e36332e3233342e302f32332d3233203d3e20323731363631.roa (raw, json)
Hash identifier:          M39RVsLzEGscuKfx/Vp0g1a02cK/D4SYy0/VmDkWliE=
Subject key identifier:   B3:29:5C:1B:1B:86:AD:64:0F:91:D0:7D:44:44:79:41:92:E8:8E:EA
Certificate issuer:       /CN=FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C
Certificate serial:       78FBF2D9B6E874C6CABCE4A2C271659EEAB20645
Authority key identifier: FA:5A:A3:1B:D7:66:8C:AE:0D:5B:DB:65:1D:2C:AF:27:97:36:BE:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/3138372e36332e3233342e302f32332d3233203d3e20323731363631.roa
Signing time:             Tue 15 Aug 2023 12:45:12 +0000
ROA not before:           Tue 15 Aug 2023 12:40:12 +0000
ROA not after:            Tue 13 Aug 2024 12:45:12 +0000
asID:                     271661
IP address blocks:        187.63.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fb:f2:d9:b6:e8:74:c6:ca:bc:e4:a2:c2:71:65:9e:ea:b2:06:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C
        Validity
            Not Before: Aug 15 12:40:12 2023 GMT
            Not After : Aug 13 12:45:12 2024 GMT
        Subject: CN=B3295C1B1B86AD640F91D07D4444794192E88EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:60:21:a3:b5:06:18:20:ba:eb:7f:2c:be:
                    55:e0:7b:05:5b:32:7b:22:32:eb:13:bf:4d:d3:01:
                    58:00:b0:ce:03:3b:6b:52:c3:99:73:26:e2:1f:66:
                    64:b0:5b:d0:08:f6:91:92:63:7c:48:e0:af:d3:35:
                    aa:83:34:02:45:8a:5d:84:86:ee:10:ff:71:68:59:
                    16:32:87:a9:09:16:5a:7c:db:af:b1:b8:11:f6:ae:
                    5c:3a:aa:9b:4c:13:4c:91:8a:70:5e:ed:17:97:91:
                    24:e7:04:5a:d3:b1:19:1b:12:d7:63:be:0e:e4:96:
                    23:34:b1:0a:89:e4:57:5b:ec:ec:e6:9f:7f:83:e5:
                    96:cc:db:09:93:24:ee:0b:d8:a6:b3:bb:25:d3:1c:
                    4f:e1:33:02:97:23:6a:22:2b:b6:61:4f:f2:e6:6e:
                    b5:a0:d4:d4:30:c9:bf:b4:94:5d:77:d8:23:9f:c8:
                    37:b1:27:0f:a8:2f:b5:fa:a3:20:56:81:d4:c8:b5:
                    e3:5a:52:51:18:9c:a8:c2:98:38:27:9a:6a:fd:99:
                    c7:50:80:b2:96:f2:a0:16:53:f0:ef:ba:2a:f5:18:
                    e7:9f:a4:6b:b2:9f:0e:8d:50:93:3b:ed:cd:b1:db:
                    0c:df:40:bf:d8:8d:05:c4:ba:fa:90:a6:25:69:46:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:5C:1B:1B:86:AD:64:0F:91:D0:7D:44:44:79:41:92:E8:8E:EA
            X509v3 Authority Key Identifier:
                keyid:FA:5A:A3:1B:D7:66:8C:AE:0D:5B:DB:65:1D:2C:AF:27:97:36:BE:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5AA31BD7668CAE0D5BDB651D2CAF279736BE8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PHPLhP5owGawwS56p4gF26tp7QQvRAfs4yWMpCuNmVK/0/3138372e36332e3233342e302f32332d3233203d3e20323731363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:a8:f7:92:d0:ba:95:72:ca:c9:7e:2f:10:0e:39:f4:6c:af:
         53:3b:53:71:87:ce:aa:53:e0:70:c7:99:53:ba:52:81:5b:38:
         09:6d:8b:73:80:6d:17:4d:b0:8b:a1:f1:89:12:89:c1:0e:ed:
         78:47:a3:73:c8:34:66:0f:12:48:ab:b4:82:af:4c:ff:0c:bf:
         9c:88:3d:43:67:7f:1c:11:36:de:5d:26:5e:ba:d4:7f:ac:76:
         88:b3:9b:55:a0:88:7a:1c:a1:e2:e2:dc:43:e2:25:5a:a5:79:
         b3:25:05:75:4a:d1:a9:ee:91:b9:e5:e0:91:76:62:d5:a4:1a:
         93:16:19:16:f3:bb:94:b9:92:84:de:1e:16:f1:a1:26:57:43:
         6f:c0:12:07:63:78:1a:8c:b5:e8:e8:1b:b8:33:de:2b:94:cb:
         c1:59:5f:d7:da:7c:e3:82:ce:13:04:23:8b:22:3f:d3:1b:0e:
         90:a9:30:29:b9:8c:8f:77:4b:8b:24:20:a0:43:06:37:7d:65:
         84:0e:e4:a3:5b:e3:9e:32:9b:5d:ef:41:b0:3c:3e:71:54:91:
         42:fe:f7:78:f0:66:76:90:ef:5b:18:63:d6:03:06:da:51:10:
         37:04:19:e7:e1:bf:89:51:a0:9d:ce:68:dc:de:56:86:c6:a4:
         aa:2c:27:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUePvy2bbodMbKvOSiwnFlnuqyBkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1QUEzMUJENzY2OENBRTBENUJEQjY1MUQyQ0FGMjc5
NzM2QkU4QzAeFw0yMzA4MTUxMjQwMTJaFw0yNDA4MTMxMjQ1MTJaMDMxMTAvBgNV
BAMTKEIzMjk1QzFCMUI4NkFENjQwRjkxRDA3RDQ0NDQ3OTQxOTJFODhFRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW8WAho7UGGCC6638svlXgewVb
MnsiMusTv03TAVgAsM4DO2tSw5lzJuIfZmSwW9AI9pGSY3xI4K/TNaqDNAJFil2E
hu4Q/3FoWRYyh6kJFlp826+xuBH2rlw6qptME0yRinBe7ReXkSTnBFrTsRkbEtdj
vg7kliM0sQqJ5Fdb7Ozmn3+D5ZbM2wmTJO4L2KazuyXTHE/hMwKXI2oiK7ZhT/Lm
brWg1NQwyb+0lF132COfyDexJw+oL7X6oyBWgdTIteNaUlEYnKjCmDgnmmr9mcdQ
gLKW8qAWU/Dvuir1GOefpGuynw6NUJM77c2x2wzfQL/YjQXEuvqQpiVpRqJPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsylcGxuGrWQPkdB9RER5QZLojuowHwYDVR0j
BBgwFoAU+lqjG9dmjK4NW9tlHSyvJ5c2vowwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFBIUExoUDVvd0dhd3dTNTZwNGdGMjZ0cDdRUXZSQWZzNHlXTXBDdU5t
VksvMC9GQTVBQTMxQkQ3NjY4Q0FFMEQ1QkRCNjUxRDJDQUYyNzk3MzZCRThDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNUFBMzFCRDc2NjhDQUUw
RDVCREI2NTFEMkNBRjI3OTczNkJFOEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhQSFBMaFA1b3dHYXd3UzU2cDRnRjI2dHA3UVF2UkFmczR5V01wQ3VObVZLLzAv
MzEzODM3MmUzNjMzMmUzMjMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzNjM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7P+owDQYJKoZIhvcNAQELBQADggEBAGSo95LQ
upVyysl+LxAOOfRsr1M7U3GHzqpT4HDHmVO6UoFbOAlti3OAbRdNsIuh8YkSicEO
7XhHo3PINGYPEkirtIKvTP8Mv5yIPUNnfxwRNt5dJl661H+sdoizm1WgiHocoeLi
3EPiJVqlebMlBXVK0anukbnl4JF2YtWkGpMWGRbzu5S5koTeHhbxoSZXQ2/AEgdj
eBqMtejoG7gz3iuUy8FZX9fafOOCzhMEI4siP9MbDpCpMCm5jI93S4skIKBDBjd9
ZYQO5KNb454ym13vQbA8PnFUkUL+93jwZnaQ71sYY9YDBtpREDcEGefhv4lRoJ3O
aNzeVobGpKosJ3Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org