Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32312d3231203d3e203238333532.roa
File:                     3138372e302e34382e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier:          c1sLcjTfaPgOI+x1JFOH+7t6B4uZsVlQHhEkNkFiY4k=
Subject key identifier:   DF:31:C2:4E:19:5B:02:53:CC:D8:3E:49:62:64:76:D8:BF:F6:EF:27
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       56E27001D29E103D5AFC8DCED9BCAC46F7878D23
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32312d3231203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:54 +0000
ROA not before:           Fri 13 Oct 2023 14:31:54 +0000
ROA not after:            Fri 11 Oct 2024 14:36:54 +0000
asID:                     28352
IP address blocks:        187.0.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e2:70:01:d2:9e:10:3d:5a:fc:8d:ce:d9:bc:ac:46:f7:87:8d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:54 2023 GMT
            Not After : Oct 11 14:36:54 2024 GMT
        Subject: CN=DF31C24E195B0253CCD83E49626476D8BFF6EF27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:a3:b3:5c:7b:fa:fa:ca:d2:67:d8:b9:22:
                    b5:8b:25:c3:64:b7:90:cf:92:fd:19:2a:0b:78:23:
                    7b:ca:08:bf:d4:78:7a:8c:83:18:fd:4a:c3:49:61:
                    eb:b4:64:40:e2:8e:a3:0b:4e:c4:ef:14:65:1c:3f:
                    66:04:90:d4:c1:77:bd:77:98:3e:cd:8c:5c:57:ef:
                    dd:98:14:30:72:d9:cb:09:d6:30:c6:ed:8d:eb:27:
                    db:c6:29:c3:89:ce:96:95:e4:8c:ae:5f:f8:a5:bb:
                    c2:39:71:1b:96:ac:ac:51:c7:d2:29:67:b1:ea:b4:
                    49:0f:87:85:69:da:aa:12:58:66:7b:64:a3:66:67:
                    eb:08:40:5a:4e:dd:d8:a6:b7:19:b5:11:cf:2a:23:
                    85:a3:a7:99:bf:5f:09:81:e8:8e:d8:2d:86:8f:06:
                    01:20:c0:f9:70:5f:9f:95:7a:14:2f:43:a6:13:eb:
                    0a:7c:80:cd:9f:e9:40:e8:76:31:2d:ba:0c:40:78:
                    cb:7e:67:67:52:6f:1b:5a:21:b4:94:92:d8:25:f7:
                    d3:67:49:5e:37:3b:34:3e:4d:cd:13:63:af:c3:56:
                    ab:d0:cc:49:75:1c:07:92:09:76:f2:58:bf:b6:27:
                    ac:e1:5b:95:d0:4f:2f:50:97:14:36:ba:ee:61:ca:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:31:C2:4E:19:5B:02:53:CC:D8:3E:49:62:64:76:D8:BF:F6:EF:27
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32312d3231203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:68:89:1c:92:4d:3f:1a:29:c7:84:35:8e:cf:ca:9f:1c:ba:
         8f:e0:fd:bf:b5:39:04:14:64:c9:09:2c:cc:62:a0:5d:c3:b9:
         c0:5a:14:3d:a8:16:66:4b:28:56:3d:b3:cf:3c:89:c3:c6:41:
         92:a2:3b:4a:b4:f0:5b:8c:4a:58:dc:9b:71:09:a0:7c:72:2b:
         2f:a7:5c:b7:9f:a5:15:2c:94:17:25:dc:d4:9d:8e:76:2a:28:
         f2:58:ab:66:c8:ad:4f:e9:9a:2b:88:f4:cf:7f:b9:bb:1c:9c:
         54:89:6f:c4:98:9a:2a:59:db:34:71:e4:5c:16:1d:84:09:fa:
         6a:8f:6c:e8:5b:6f:67:4c:79:f9:12:04:64:93:51:bd:02:f6:
         c5:25:31:4d:cf:e7:c3:90:6b:cc:87:ae:c7:58:bd:f1:7c:20:
         c1:12:78:de:8d:e2:35:a7:1e:fc:9a:23:ee:79:97:83:14:19:
         5d:3f:52:59:45:91:c9:9c:c8:2c:71:28:e6:c9:97:1c:7c:7b:
         e9:51:b4:39:10:3e:6c:a5:38:70:d9:21:e8:3b:06:5b:b0:fc:
         cb:81:5f:96:d2:98:3e:3c:cf:ff:c3:01:50:ae:f5:ba:58:b3:
         c5:7b:dd:dd:37:2d:f0:70:ac:d7:90:1e:bb:d9:8f:df:ba:8a:
         81:6a:35:ac
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUVuJwAdKeED1a/I3O2bysRveHjSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTczRTVGMjkzRDdGQjUyQzM3QTAxNDJDMDQ0MTVEREZB
MDRDNDYwMjAeFw0yMzEwMTMxNDMxNTRaFw0yNDEwMTExNDM2NTRaMDMxMTAvBgNV
BAMTKERGMzFDMjRFMTk1QjAyNTNDQ0Q4M0U0OTYyNjQ3NkQ4QkZGNkVGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPKOzXHv6+srSZ9i5IrWLJcNk
t5DPkv0ZKgt4I3vKCL/UeHqMgxj9SsNJYeu0ZEDijqMLTsTvFGUcP2YEkNTBd713
mD7NjFxX792YFDBy2csJ1jDG7Y3rJ9vGKcOJzpaV5IyuX/ilu8I5cRuWrKxRx9Ip
Z7HqtEkPh4Vp2qoSWGZ7ZKNmZ+sIQFpO3dimtxm1Ec8qI4Wjp5m/XwmB6I7YLYaP
BgEgwPlwX5+VehQvQ6YT6wp8gM2f6UDodjEtugxAeMt+Z2dSbxtaIbSUktgl99Nn
SV43OzQ+Tc0TY6/DVqvQzEl1HAeSCXbyWL+2J6zhW5XQTy9QlxQ2uu5hyvM7AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU3zHCThlbAlPM2D5JYmR22L/27ycwHwYDVR0j
BBgwFoAUpz5fKT1/tSw3oBQsBEFd36BMRgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9BNzNFNUYyOTNEN0ZCNTJDMzdBMDE0MkMwNDQxNURERkEwNEM0NjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E3M0U1RjI5M0Q3RkI1MkMz
N0EwMTQyQzA0NDE1RERGQTA0QzQ2MDIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM3MmUzMDJlMzQzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzgzMzM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAO7ADAwDQYJKoZIhvcNAQELBQADggEBAE5oiRySTT8aKceE
NY7Pyp8cuo/g/b+1OQQUZMkJLMxioF3DucBaFD2oFmZLKFY9s888icPGQZKiO0q0
8FuMSljcm3EJoHxyKy+nXLefpRUslBcl3NSdjnYqKPJYq2bIrU/pmiuI9M9/ubsc
nFSJb8SYmipZ2zRx5FwWHYQJ+mqPbOhbb2dMefkSBGSTUb0C9sUlMU3P58OQa8yH
rsdYvfF8IMESeN6N4jWnHvyaI+55l4MUGV0/UllFkcmcyCxxKObJlxx8e+lRtDkQ
PmylOHDZIeg7Bluw/MuBX5bSmD48z//DAVCu9bpYs8V73d03LfBwrNeQHrvZj9+6
ioFqNaw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org