Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa
File:                     3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (raw, json)
Hash identifier:          QEnlJFkLVg4PI03AjTvXI8iBDsPMivdcYmwPtYlhJPc=
Subject key identifier:   1C:A4:A6:5F:9C:13:99:DA:61:77:A2:66:E8:CB:BD:6D:83:BD:BA:69
Certificate issuer:       /CN=7DE5440D73B890D8BF20B510E2FDC7EA0152B97A
Certificate serial:       43A71E75DEAD4657EB898E43A6A5994F2ABE12A9
Authority key identifier: 7D:E5:44:0D:73:B8:90:D8:BF:20:B5:10:E2:FD:C7:EA:01:52:B9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa
Signing time:             Thu 05 Oct 2023 12:18:43 +0000
ROA not before:           Thu 05 Oct 2023 12:13:43 +0000
ROA not after:            Thu 03 Oct 2024 12:18:43 +0000
asID:                     272753
IP address blocks:        187.109.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a7:1e:75:de:ad:46:57:eb:89:8e:43:a6:a5:99:4f:2a:be:12:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE5440D73B890D8BF20B510E2FDC7EA0152B97A
        Validity
            Not Before: Oct  5 12:13:43 2023 GMT
            Not After : Oct  3 12:18:43 2024 GMT
        Subject: CN=1CA4A65F9C1399DA6177A266E8CBBD6D83BDBA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:b6:1b:3b:03:64:2d:83:6a:e9:29:f5:9d:
                    d1:d0:7a:06:8e:6e:5d:28:f2:a1:47:d3:38:7d:58:
                    e2:e4:49:10:77:75:65:07:a1:1e:23:3c:32:03:b7:
                    62:07:6d:a4:e0:2f:84:18:ef:4b:8e:bb:58:10:38:
                    43:1a:d6:e4:91:49:84:8a:ff:57:0a:11:d8:34:d4:
                    d8:45:12:6b:f4:a0:40:f0:4e:64:4d:cd:66:9c:74:
                    a6:ae:34:68:24:5b:b9:aa:3b:ee:e0:62:d2:be:1d:
                    6f:a7:7f:32:60:f0:a3:99:36:c9:67:f3:bb:69:9d:
                    b1:94:19:32:36:27:c7:dc:37:b6:62:47:6b:bd:aa:
                    82:31:e1:b9:b9:76:ad:90:cf:53:cd:6d:6c:0f:5e:
                    d0:3e:0e:1a:21:20:80:a5:e7:b6:80:08:e2:61:97:
                    bf:d2:6c:ba:fb:e5:c2:4a:d4:71:9b:e7:94:f4:a3:
                    54:86:6d:3f:98:5f:56:1a:15:64:56:26:3b:36:ab:
                    30:61:9f:2e:4b:3d:92:fe:94:f0:88:f9:e9:da:f5:
                    86:ba:89:58:78:be:f9:a2:85:9b:c5:cb:70:a7:38:
                    2d:ad:cf:f6:9c:83:fa:cd:e4:dd:26:98:f7:79:7d:
                    74:f2:40:e5:53:2a:49:b4:fb:1f:b7:9d:80:a3:bf:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A4:A6:5F:9C:13:99:DA:61:77:A2:66:E8:CB:BD:6D:83:BD:BA:69
            X509v3 Authority Key Identifier:
                keyid:7D:E5:44:0D:73:B8:90:D8:BF:20:B5:10:E2:FD:C7:EA:01:52:B9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DE5440D73B890D8BF20B510E2FDC7EA0152B97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:fb:6e:f7:6f:d3:c4:cc:51:d2:b5:15:26:9c:2a:6d:13:d5:
         4d:d5:d4:41:bc:5a:aa:8d:16:5a:c3:6f:1a:6c:02:e2:c6:31:
         b7:0d:2a:7a:c2:52:48:8f:24:bb:b4:71:97:27:79:3b:75:ac:
         61:29:31:e0:eb:ff:7f:31:9e:2a:87:87:48:ac:fa:be:ef:83:
         83:3c:fe:36:b8:ab:67:b6:e5:4d:a2:00:3c:32:8c:73:7c:4c:
         0c:88:97:69:d9:fa:70:ec:a8:c3:e4:37:4f:d7:52:c4:e1:ac:
         ad:2b:eb:bd:96:30:9a:33:d6:1f:cf:b2:50:03:e5:f7:89:1e:
         8e:9f:64:68:5a:18:5e:8b:11:db:05:1c:9a:4f:88:a3:55:93:
         26:36:52:fe:ed:27:88:b1:31:b2:89:f2:68:39:9c:9b:17:ad:
         cd:be:bb:05:03:21:b4:ca:5d:01:48:53:8f:e6:1f:9f:4c:53:
         c6:16:20:1b:4d:57:d9:fc:c4:9f:83:3a:54:f8:f9:37:bd:37:
         e9:cc:26:dd:76:1e:4c:ed:13:9f:2a:6a:35:31:27:40:2b:ae:
         45:cd:82:9c:93:e5:31:c4:42:cf:3f:62:df:da:b3:56:01:63:
         ec:a0:c5:fd:46:74:3f:f4:58:2b:58:83:50:cd:32:49:30:62:
         89:62:c5:84
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ6cedd6tRlfriY5DpqWZTyq+EqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RFNTQ0MEQ3M0I4OTBEOEJGMjBCNTEwRTJGREM3RUEw
MTUyQjk3QTAeFw0yMzEwMDUxMjEzNDNaFw0yNDEwMDMxMjE4NDNaMDMxMTAvBgNV
BAMTKDFDQTRBNjVGOUMxMzk5REE2MTc3QTI2NkU4Q0JCRDZEODNCREJBNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCrYbOwNkLYNq6Sn1ndHQegaO
bl0o8qFH0zh9WOLkSRB3dWUHoR4jPDIDt2IHbaTgL4QY70uOu1gQOEMa1uSRSYSK
/1cKEdg01NhFEmv0oEDwTmRNzWacdKauNGgkW7mqO+7gYtK+HW+nfzJg8KOZNsln
87tpnbGUGTI2J8fcN7ZiR2u9qoIx4bm5dq2Qz1PNbWwPXtA+DhohIICl57aACOJh
l7/SbLr75cJK1HGb55T0o1SGbT+YX1YaFWRWJjs2qzBhny5LPZL+lPCI+ena9Ya6
iVh4vvmihZvFy3CnOC2tz/acg/rN5N0mmPd5fXTyQOVTKkm0+x+3nYCjv6llAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHKSmX5wTmdphd6Jm6Mu9bYO9umkwHwYDVR0j
BBgwFoAUfeVEDXO4kNi/ILUQ4v3H6gFSuXowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNHR2dLVzFMck5QZ3NNeEtEcEdTV3hpNnNMb3ZHaDZia2RvbzdVOVlq
RmIvMC83REU1NDQwRDczQjg5MEQ4QkYyMEI1MTBFMkZEQzdFQTAxNTJCOTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdERTU0NDBENzNCODkwRDhC
RjIwQjUxMEUyRkRDN0VBMDE1MkI5N0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzR0dnS1cxTHJOUGdzTXhLRHBHU1d4aTZzTG92R2g2Ymtkb283VTlZakZiLzAv
MzEzODM3MmUzMTMwMzkyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMjM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArttcDANBgkqhkiG9w0BAQsFAAOCAQEAlftu
92/TxMxR0rUVJpwqbRPVTdXUQbxaqo0WWsNvGmwC4sYxtw0qesJSSI8ku7Rxlyd5
O3WsYSkx4Ov/fzGeKoeHSKz6vu+Dgzz+NrirZ7blTaIAPDKMc3xMDIiXadn6cOyo
w+Q3T9dSxOGsrSvrvZYwmjPWH8+yUAPl94kejp9kaFoYXosR2wUcmk+Io1WTJjZS
/u0niLExsonyaDmcmxetzb67BQMhtMpdAUhTj+Yfn0xTxhYgG01X2fzEn4M6VPj5
N7036cwm3XYeTO0TnypqNTEnQCuuRc2CnJPlMcRCzz9i39qzVgFj7KDF/UZ0P/RY
K1iDUM0ySTBiiWLFhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org