Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3138372e36332e3132332e302f32342d3234203d3e20323635333335.roa
File:                     3138372e36332e3132332e302f32342d3234203d3e20323635333335.roa (raw, json)
Hash identifier:          FmwmoFhk+qUgwcqU5+xJZlGQUio0417I2jvw6I4FQ08=
Subject key identifier:   4A:65:82:1F:F6:08:20:48:D3:E5:25:F9:9F:45:6A:DF:86:DA:CF:1A
Certificate issuer:       /CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
Certificate serial:       32FCE4797F43E6CCF1B0F803CAEED0C9595914F2
Authority key identifier: F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3138372e36332e3132332e302f32342d3234203d3e20323635333335.roa
Signing time:             Wed 20 Dec 2023 19:15:59 +0000
ROA not before:           Wed 20 Dec 2023 19:10:59 +0000
ROA not after:            Wed 18 Dec 2024 19:15:59 +0000
asID:                     265335
IP address blocks:        187.63.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fc:e4:79:7f:43:e6:cc:f1:b0:f8:03:ca:ee:d0:c9:59:59:14:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
        Validity
            Not Before: Dec 20 19:10:59 2023 GMT
            Not After : Dec 18 19:15:59 2024 GMT
        Subject: CN=4A65821FF6082048D3E525F99F456ADF86DACF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:d6:a7:52:39:82:88:91:f3:c8:9c:b9:f4:
                    e3:1d:52:57:c1:de:77:78:b5:dd:ae:27:ca:cf:b9:
                    89:fc:89:88:58:d8:ee:1c:36:09:1d:26:69:4c:29:
                    cb:50:fa:f1:d2:a3:b4:7d:90:2a:6f:cf:7f:4c:65:
                    7e:a2:9e:9a:74:4f:23:84:d6:0f:c1:07:e2:9c:83:
                    60:3d:ea:2b:93:d1:77:c5:f5:bb:75:96:36:6a:d9:
                    f7:88:22:a9:59:ed:6b:f6:6f:3e:ae:2d:a8:5c:cc:
                    9f:6d:80:49:d5:0f:16:dc:6d:da:cd:1a:3e:50:c5:
                    6a:26:6d:96:4c:33:1d:4e:ee:20:fd:fe:d5:64:7a:
                    1e:87:83:70:06:89:dd:11:b3:f6:d6:72:88:6e:fe:
                    2f:29:06:6f:96:50:63:18:49:b2:cd:bc:93:0a:08:
                    ea:87:80:96:d5:91:fa:13:76:4a:f9:97:2a:85:9a:
                    ce:9b:d0:e2:0d:36:42:e8:8f:f4:10:e7:f8:87:f7:
                    5f:ef:4d:9b:54:b7:ac:2b:40:4b:91:ee:c0:13:42:
                    8f:73:9f:b4:85:91:19:64:5f:de:35:c1:20:b4:e4:
                    79:fb:c2:10:b9:33:20:6d:7c:6e:08:81:33:8f:db:
                    e6:48:cb:2a:68:c2:15:93:f9:e5:5e:5d:22:d5:63:
                    3f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:65:82:1F:F6:08:20:48:D3:E5:25:F9:9F:45:6A:DF:86:DA:CF:1A
            X509v3 Authority Key Identifier:
                keyid:F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3138372e36332e3132332e302f32342d3234203d3e20323635333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:95:8d:b7:17:07:99:58:29:4a:02:41:00:77:3b:7a:c4:
         20:ab:66:8c:f3:8f:bf:1d:38:6e:10:fe:f6:5d:61:09:60:ac:
         21:31:3a:e9:d4:20:e4:ea:a1:dd:2a:c6:b6:04:f6:a3:2c:8b:
         89:b5:f4:6e:5d:b7:6a:cb:de:4a:d1:b3:a0:50:65:e4:a0:15:
         58:2f:f9:10:ad:1a:a1:d6:6b:46:a4:dd:50:5a:ab:80:45:55:
         f7:5d:18:1e:d1:30:1a:da:69:e2:d5:47:34:7a:85:0b:a2:8a:
         4d:0b:ef:9b:21:91:c4:ec:23:56:c1:e4:e1:c0:89:77:3f:fe:
         a7:46:f1:20:42:f4:4e:10:78:82:7f:71:ca:bb:bd:bb:74:24:
         ad:9f:12:9d:a5:f9:6f:34:f5:6c:ed:cb:3a:26:9d:af:e5:f5:
         3d:9a:a0:5f:0d:e4:37:b8:67:d3:9a:75:fa:04:e4:ad:ee:a1:
         0e:48:65:62:6b:f6:00:7c:75:b2:5c:05:4c:ac:62:18:15:80:
         49:8a:37:56:82:29:f8:56:d8:f8:4f:7f:44:6a:5f:48:30:9a:
         7c:fd:0e:f3:45:cb:04:46:48:a3:0f:6d:d2:ae:a4:17:75:2e:
         0b:62:aa:92:51:c5:84:90:00:fc:87:59:38:63:7a:69:9b:c9:
         27:a7:31:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMvzkeX9D5szxsPgDyu7QyVlZFPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI2M0YyMjA1MzA0QzJGMDZFOUU5QzhCNkU0RDQ0NzVB
QzQzNThBNTAeFw0yMzEyMjAxOTEwNTlaFw0yNDEyMTgxOTE1NTlaMDMxMTAvBgNV
BAMTKDRBNjU4MjFGRjYwODIwNDhEM0U1MjVGOTlGNDU2QURGODZEQUNGMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AdanUjmCiJHzyJy59OMdUlfB
3nd4td2uJ8rPuYn8iYhY2O4cNgkdJmlMKctQ+vHSo7R9kCpvz39MZX6inpp0TyOE
1g/BB+Kcg2A96iuT0XfF9bt1ljZq2feIIqlZ7Wv2bz6uLahczJ9tgEnVDxbcbdrN
Gj5QxWombZZMMx1O7iD9/tVkeh6Hg3AGid0Rs/bWcohu/i8pBm+WUGMYSbLNvJMK
COqHgJbVkfoTdkr5lyqFms6b0OINNkLoj/QQ5/iH91/vTZtUt6wrQEuR7sATQo9z
n7SFkRlkX941wSC05Hn7whC5MyBtfG4IgTOP2+ZIyypowhWT+eVeXSLVYz/RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSmWCH/YIIEjT5SX5n0Vq34bazxowHwYDVR0j
BBgwFoAU8mPyIFMEwvBunpyLbk1EdaxDWKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZQUDg3Rkp0WWlmcERaeks4bmRaTlhDUmJ1MnU4bUxaVjdlSnJpQWYx
aG0vMC9GMjYzRjIyMDUzMDRDMkYwNkU5RTlDOEI2RTRENDQ3NUFDNDM1OEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyNjNGMjIwNTMwNEMyRjA2
RTlFOUM4QjZFNEQ0NDc1QUM0MzU4QTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWUFA4N0ZKdFlpZnBEWnpLOG5kWk5YQ1JidTJ1OG1MWlY3ZUpyaUFmMWhtLzAv
MzEzODM3MmUzNjMzMmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7P3swDQYJKoZIhvcNAQELBQADggEBAFpnlY23
FweZWClKAkEAdzt6xCCrZozzj78dOG4Q/vZdYQlgrCExOunUIOTqod0qxrYE9qMs
i4m19G5dt2rL3krRs6BQZeSgFVgv+RCtGqHWa0ak3VBaq4BFVfddGB7RMBraaeLV
RzR6hQuiik0L75shkcTsI1bB5OHAiXc//qdG8SBC9E4QeIJ/ccq7vbt0JK2fEp2l
+W809Wztyzomna/l9T2aoF8N5De4Z9OadfoE5K3uoQ5IZWJr9gB8dbJcBUysYhgV
gEmKN1aCKfhW2PhPf0RqX0gwmnz9DvNFywRGSKMPbdKupBd1LgtiqpJRxYSQAPyH
WThjemmbySenMbw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org