Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3139342e39362e302f32302d3234203d3e203238323130.roa
File:                     3138362e3139342e39362e302f32302d3234203d3e203238323130.roa (raw, json)
Hash identifier:          8zb3D2GNdtZ764TJF4VCIxW5OulvUewt6umKL/XkGOE=
Subject key identifier:   57:F4:5F:AD:87:C0:69:87:3B:09:B8:2F:0B:74:3C:74:E2:2F:97:33
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       756B9C4B1EFC89DE27ED06AEC4ABC17B06CAB9AD
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3139342e39362e302f32302d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:09:10 +0000
ROA not before:           Sat 04 Mar 2023 16:04:10 +0000
ROA not after:            Sat 02 Mar 2024 16:09:10 +0000
asID:                     28210
IP address blocks:        186.194.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6b:9c:4b:1e:fc:89:de:27:ed:06:ae:c4:ab:c1:7b:06:ca:b9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:04:10 2023 GMT
            Not After : Mar  2 16:09:10 2024 GMT
        Subject: CN=57F45FAD87C069873B09B82F0B743C74E22F9733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f1:b1:36:e7:28:07:2e:67:09:90:0b:16:d4:
                    11:75:68:0e:3f:86:cb:00:9e:98:ae:b2:52:72:98:
                    4d:9e:a6:fb:ec:d9:eb:03:be:b6:84:a5:37:84:99:
                    f0:02:e3:b7:1b:b3:6a:02:20:4d:d2:56:dd:57:72:
                    75:a1:3c:48:65:5d:10:74:de:f1:05:10:0d:4a:5a:
                    6c:63:e1:6a:39:4f:60:91:9f:d4:c9:f0:94:0f:92:
                    17:14:90:5f:a3:82:31:3a:07:48:31:7f:b6:69:26:
                    bf:ee:09:85:72:8f:04:bd:ae:a2:5b:f5:fa:bc:7b:
                    28:35:e0:0f:c8:02:cb:ed:4d:11:30:e1:9c:1b:d1:
                    15:a5:57:33:1f:c4:c5:2b:50:b0:9b:80:52:56:67:
                    2c:4a:52:fa:8c:90:45:6c:48:a2:0b:66:df:6c:a8:
                    8b:e7:17:12:d4:61:3f:20:01:61:46:ec:e2:34:39:
                    a1:e7:0a:22:b3:5e:f0:93:b9:93:13:7e:43:11:a1:
                    ab:45:ba:9f:26:16:e9:17:59:0b:cc:1b:0d:14:6f:
                    4d:a7:64:b1:a8:bb:68:9f:09:4a:5e:88:8f:db:0c:
                    de:90:15:9e:78:98:fe:2f:8b:e7:5d:fd:d6:e1:58:
                    0f:7e:39:f0:a3:74:db:3d:44:a4:19:23:1a:ba:84:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F4:5F:AD:87:C0:69:87:3B:09:B8:2F:0B:74:3C:74:E2:2F:97:33
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3139342e39362e302f32302d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:97:cd:11:0a:f7:a0:d7:f0:75:ce:cf:44:2a:5c:95:6e:
         d2:72:96:44:ea:82:de:fb:fd:9d:c5:63:6a:29:e9:fc:da:57:
         db:1d:0a:6c:3a:ef:8d:08:67:26:22:2c:1a:2d:e3:28:e7:d6:
         2d:1c:0e:ca:4c:76:7d:e5:34:47:7a:db:b2:3c:e1:55:6e:1c:
         72:8e:bf:99:fa:c9:24:86:ea:b1:55:7d:73:ca:10:de:94:a8:
         a3:a1:dd:b5:41:c8:f3:b2:a3:58:1b:4f:03:83:3f:be:71:f4:
         1e:67:55:b5:07:64:8c:dc:5f:84:0c:b9:a5:05:d9:f3:8f:25:
         1d:23:e1:ff:81:91:0c:bb:56:83:d0:8c:98:ff:f9:ca:1b:1e:
         e9:5e:68:18:f2:4c:b0:86:87:ba:2a:8e:43:74:a9:0b:20:08:
         3c:63:47:4d:b2:da:77:6a:bc:94:36:52:e8:30:9c:c3:30:97:
         a3:e3:9c:a6:9e:85:41:09:2c:cd:c2:57:66:88:e5:18:24:c2:
         5a:93:34:75:e6:a9:3f:9b:e1:01:57:6f:33:0f:a8:42:ac:8b:
         29:9e:15:57:a7:4c:42:79:72:50:1d:9e:bc:28:a5:46:c5:f3:
         94:cc:db:75:3c:f6:2c:81:98:58:21:44:10:b0:4a:c8:19:a4:
         c3:3b:00:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdWucSx78id4n7QauxKvBewbKua0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQyNkFBOTc4NkUzQ0QwRjhEQTY2MzMwNkY4OUFCMjVB
OEU4MDc2NzAeFw0yMzAzMDQxNjA0MTBaFw0yNDAzMDIxNjA5MTBaMDMxMTAvBgNV
BAMTKDU3RjQ1RkFEODdDMDY5ODczQjA5QjgyRjBCNzQzQzc0RTIyRjk3MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs8bE25ygHLmcJkAsW1BF1aA4/
hssAnpiuslJymE2epvvs2esDvraEpTeEmfAC47cbs2oCIE3SVt1XcnWhPEhlXRB0
3vEFEA1KWmxj4Wo5T2CRn9TJ8JQPkhcUkF+jgjE6B0gxf7ZpJr/uCYVyjwS9rqJb
9fq8eyg14A/IAsvtTREw4Zwb0RWlVzMfxMUrULCbgFJWZyxKUvqMkEVsSKILZt9s
qIvnFxLUYT8gAWFG7OI0OaHnCiKzXvCTuZMTfkMRoatFup8mFukXWQvMGw0Ub02n
ZLGou2ifCUpeiI/bDN6QFZ54mP4vi+dd/dbhWA9+OfCjdNs9RKQZIxq6hJyJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUV/RfrYfAaYc7CbgvC3Q8dOIvlzMwHwYDVR0j
BBgwFoAUFCaql4bjzQ+NpmMwb4mrJajoB2cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMC8xNDI2QUE5Nzg2RTNDRDBGOERBNjYzMzA2Rjg5QUIyNUE4RTgwNzY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0MjZBQTk3ODZFM0NEMEY4
REE2NjMzMDZGODlBQjI1QThFODA3NjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzAv
MzEzODM2MmUzMTM5MzQyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEusJgMA0GCSqGSIb3DQEBCwUAA4IBAQB3sJfNEQr3
oNfwdc7PRCpclW7ScpZE6oLe+/2dxWNqKen82lfbHQpsOu+NCGcmIiwaLeMo59Yt
HA7KTHZ95TRHetuyPOFVbhxyjr+Z+skkhuqxVX1zyhDelKijod21QcjzsqNYG08D
gz++cfQeZ1W1B2SM3F+EDLmlBdnzjyUdI+H/gZEMu1aD0IyY//nKGx7pXmgY8kyw
hoe6Ko5DdKkLIAg8Y0dNstp3aryUNlLoMJzDMJej45ymnoVBCSzNwldmiOUYJMJa
kzR15qk/m+EBV28zD6hCrIspnhVXp0xCeXJQHZ68KKVGxfOUzNt1PPYsgZhYIUQQ
sErIGaTDOwDB
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org