Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3234203d3e203238333532.roa
File:                     3138372e302e34382e302f32302d3234203d3e203238333532.roa (raw, json)
Hash identifier:          +o/BW5YEMkq7HA4XxuwBmnR640ZCDqqFCTiaieGN5p8=
Subject key identifier:   C0:23:7A:4E:DB:61:0F:26:6F:6C:4D:16:F1:F4:85:B0:94:E2:7E:A4
Certificate issuer:       /CN=3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5
Certificate serial:       02CA38CA951E9B275D317D8EDA628351073A7359
Authority key identifier: 3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3234203d3e203238333532.roa
Signing time:             Wed 05 Apr 2023 18:38:36 +0000
ROA not before:           Wed 05 Apr 2023 18:33:36 +0000
ROA not after:            Wed 03 Apr 2024 18:38:36 +0000
asID:                     28352
IP address blocks:        187.0.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ca:38:ca:95:1e:9b:27:5d:31:7d:8e:da:62:83:51:07:3a:73:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5
        Validity
            Not Before: Apr  5 18:33:36 2023 GMT
            Not After : Apr  3 18:38:36 2024 GMT
        Subject: CN=C0237A4EDB610F266F6C4D16F1F485B094E27EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:40:1a:15:4b:0f:53:05:d0:2c:c7:65:c5:
                    28:47:e0:6b:bb:6d:9e:f5:a2:a0:49:6d:64:2f:87:
                    35:84:dd:0a:a4:d0:1f:75:f9:bc:62:34:8e:30:b4:
                    a1:5a:1e:7e:34:c9:ab:d7:e7:dc:51:65:c4:10:6d:
                    a5:46:ed:cf:94:30:f6:1f:01:67:35:d9:8d:e0:24:
                    4c:cf:01:3d:01:60:91:51:d9:fe:03:63:c8:ce:08:
                    43:f6:ff:04:fe:7c:df:e7:3d:66:7f:93:af:03:3b:
                    bf:0a:2b:6d:f1:8f:78:15:d5:84:45:a1:93:39:e1:
                    73:30:d2:76:f9:52:d0:9c:50:34:63:da:1f:4a:96:
                    a8:27:5a:e4:8d:d6:ba:9d:c6:4e:04:9b:ad:48:a8:
                    f6:1c:cf:0d:0f:e5:92:7c:78:b8:23:ae:46:5f:f6:
                    8d:03:b5:35:fb:9e:b4:30:f1:04:da:1c:aa:9d:f9:
                    90:96:64:fe:bc:17:46:9d:f2:06:ca:76:48:2e:46:
                    0e:34:70:7b:6f:04:c1:35:10:99:73:8a:79:27:de:
                    5d:4e:0d:cc:1a:c0:34:a7:7d:de:a0:14:38:9a:09:
                    1c:10:a5:d2:ac:62:3c:f3:40:28:4e:92:fd:eb:cd:
                    c0:9d:43:6d:d4:8f:2c:b1:d7:dc:ef:2b:ed:c9:c1:
                    7b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:23:7A:4E:DB:61:0F:26:6F:6C:4D:16:F1:F4:85:B0:94:E2:7E:A4
            X509v3 Authority Key Identifier:
                keyid:3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:3f:04:39:b6:c4:07:9f:af:ab:d8:11:94:65:d2:c2:5c:83:
         e8:24:26:4b:e5:e9:14:55:c6:4d:21:80:5f:be:1e:42:62:ce:
         a3:98:dc:02:1a:70:af:2c:40:8b:6e:40:f3:c7:e8:8c:1a:5a:
         bd:aa:8e:f4:d3:e0:b4:d4:0b:fc:7e:25:36:04:f5:51:f3:91:
         8f:d2:c2:d8:18:9c:cb:20:19:e6:4c:11:e0:19:f0:48:ab:66:
         18:1b:25:39:26:a5:e7:70:0a:10:ff:11:d8:77:72:72:1f:e1:
         30:91:f1:01:93:99:c1:be:1d:be:7c:89:ca:59:d1:bc:3c:9e:
         66:3f:7b:f6:d3:bb:cb:22:3b:ba:71:da:69:a9:09:81:ad:8a:
         8b:6c:fd:73:7e:b1:22:92:a0:2e:de:3d:79:bb:92:98:6b:fe:
         28:46:36:6c:42:bb:f0:32:76:c8:07:7e:5d:9e:43:df:d6:66:
         10:e3:0e:93:04:24:7d:9e:87:7f:05:5d:90:90:12:55:71:a8:
         57:9e:49:71:71:f0:88:41:6c:cc:b4:b2:5d:ca:3f:c1:18:99:
         56:e6:d7:8b:6f:dc:62:cd:bd:6e:bc:11:d8:7e:56:79:da:0d:
         3a:e8:5a:d7:d2:28:2c:4e:41:18:c5:7b:ab:0c:c0:37:d3:12:
         36:e1:5c:e6
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUAso4ypUemyddMX2O2mKDUQc6c1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VENjQ1QkNDQUU1NUU3RjQyRkNDQjQyRUI2NjEyRTM5
QkZDRUNBNTAeFw0yMzA0MDUxODMzMzZaFw0yNDA0MDMxODM4MzZaMDMxMTAvBgNV
BAMTKEMwMjM3QTRFREI2MTBGMjY2RjZDNEQxNkYxRjQ4NUIwOTRFMjdFQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiREAaFUsPUwXQLMdlxShH4Gu7
bZ71oqBJbWQvhzWE3Qqk0B91+bxiNI4wtKFaHn40yavX59xRZcQQbaVG7c+UMPYf
AWc12Y3gJEzPAT0BYJFR2f4DY8jOCEP2/wT+fN/nPWZ/k68DO78KK23xj3gV1YRF
oZM54XMw0nb5UtCcUDRj2h9KlqgnWuSN1rqdxk4Em61IqPYczw0P5ZJ8eLgjrkZf
9o0DtTX7nrQw8QTaHKqd+ZCWZP68F0ad8gbKdkguRg40cHtvBME1EJlzinkn3l1O
DcwawDSnfd6gFDiaCRwQpdKsYjzzQChOkv3rzcCdQ23Ujyyx19zvK+3JwXsxAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUwCN6TtthDyZvbE0W8fSFsJTifqQwHwYDVR0j
BBgwFoAUPtZFvMrlXn9C/MtC62YS45v87KUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC8zRUQ2NDVCQ0NBRTU1RTdGNDJGQ0NCNDJFQjY2MTJFMzlCRkNFQ0E1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFRDY0NUJDQ0FFNTVFN0Y0
MkZDQ0I0MkVCNjYxMkUzOUJGQ0VDQTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM3MmUzMDJlMzQzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMzM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS7ADAwDQYJKoZIhvcNAQELBQADggEBADA/BDm2xAefr6vY
EZRl0sJcg+gkJkvl6RRVxk0hgF++HkJizqOY3AIacK8sQItuQPPH6IwaWr2qjvTT
4LTUC/x+JTYE9VHzkY/SwtgYnMsgGeZMEeAZ8EirZhgbJTkmpedwChD/Edh3cnIf
4TCR8QGTmcG+Hb58icpZ0bw8nmY/e/bTu8siO7px2mmpCYGtiots/XN+sSKSoC7e
PXm7kphr/ihGNmxCu/AydsgHfl2eQ9/WZhDjDpMEJH2eh38FXZCQElVxqFeeSXFx
8IhBbMy0sl3KP8EYmVbm14tv3GLNvW68Edh+VnnaDTroWtfSKCxOQRjFe6sMwDfT
EjbhXOY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org