Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e37322e302f32312d3234203d3e20323632343230.roa
File:                     3138372e38372e37322e302f32312d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          svFIKITJxiM3PyVihrkfxaoFaA8SybMC+tj+QBFNi/8=
Subject key identifier:   AC:F5:8C:B9:25:08:95:A4:34:54:C4:F0:F5:B5:E3:88:48:20:E6:7B
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       487180041626D953CF8F68664CC4997B1363CA27
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e37322e302f32312d3234203d3e20323632343230.roa
Signing time:             Sat 20 Jan 2024 22:15:29 +0000
ROA not before:           Sat 20 Jan 2024 22:10:29 +0000
ROA not after:            Sat 18 Jan 2025 22:15:29 +0000
asID:                     262420
IP address blocks:        187.87.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:71:80:04:16:26:d9:53:cf:8f:68:66:4c:c4:99:7b:13:63:ca:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:10:29 2024 GMT
            Not After : Jan 18 22:15:29 2025 GMT
        Subject: CN=ACF58CB9250895A43454C4F0F5B5E3884820E67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:c5:5f:aa:f2:2e:be:62:cb:44:67:99:2a:
                    35:a6:e6:7f:79:83:f5:30:52:b7:15:36:dc:92:cb:
                    d6:83:fb:46:69:0e:c9:7c:80:2a:2e:e9:c7:7f:a3:
                    a1:e2:60:75:7c:da:2f:ef:4c:95:1e:d2:09:fe:ea:
                    86:74:4c:10:f7:fd:85:84:b0:75:29:99:7d:38:7d:
                    37:87:d8:d2:4b:0a:a3:ad:bf:44:37:73:99:0a:0d:
                    0f:f0:56:43:95:11:84:56:fc:b6:a7:fc:e1:7f:11:
                    c5:2f:dd:36:42:2e:9e:15:27:fa:ad:8c:69:ab:e3:
                    85:54:71:d7:0f:b8:e5:3b:b7:44:9a:ea:8c:b9:49:
                    19:43:dd:e8:01:c2:3f:1a:34:0f:e0:da:67:f7:66:
                    7b:4c:f8:3f:f1:6c:2d:0a:b9:44:e4:90:d8:79:03:
                    fa:b9:03:d0:2e:85:c8:e0:20:b0:e3:cf:e3:59:25:
                    66:30:cf:66:1c:8a:1e:16:9e:13:1f:5c:29:fd:dc:
                    c8:3b:5c:fe:58:1b:10:c1:b9:76:ac:83:55:58:b1:
                    eb:19:c1:5f:5b:0d:18:3e:b2:57:9c:2a:7a:bb:79:
                    ab:11:40:a0:34:78:6d:6f:7e:fd:10:4c:72:56:7e:
                    c3:b4:8e:26:e5:59:83:72:e9:a8:d7:76:0c:49:92:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F5:8C:B9:25:08:95:A4:34:54:C4:F0:F5:B5:E3:88:48:20:E6:7B
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e37322e302f32312d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:93:69:f3:63:a2:c7:0d:c6:cb:91:8d:d1:a2:f4:00:c9:
         e8:5d:ae:02:37:5b:70:76:47:91:a6:ac:97:02:04:34:00:f9:
         f8:61:57:3c:ee:5b:39:3d:00:23:df:ff:df:83:43:d4:92:7b:
         07:cf:24:62:b5:81:62:fe:fd:ff:a5:3c:94:55:11:94:91:66:
         90:b2:5b:e4:32:fd:66:80:cf:15:65:74:f5:0c:20:63:a7:b3:
         b5:1c:c5:78:c6:81:e9:b5:43:82:c0:a4:69:4d:e5:29:19:ad:
         9d:94:fe:21:03:8a:4a:2b:59:9b:af:c2:8a:cc:73:3d:06:09:
         4b:99:5b:45:7a:e3:a9:69:22:e5:26:eb:c4:95:f5:12:a0:73:
         1f:b2:b3:49:b7:62:a4:f4:4e:3c:42:ed:3b:63:25:4c:3a:af:
         b4:5b:e8:1f:db:6b:cb:70:e5:ec:bd:ce:77:12:de:ce:f0:cf:
         23:36:b2:cb:c7:b2:48:71:bc:44:b5:da:70:bf:f9:40:63:89:
         e2:4e:da:b6:c4:f6:dd:69:f1:44:56:a3:84:93:64:ce:b3:6f:
         55:0b:9e:41:a3:4d:e1:af:16:6a:9a:48:e4:aa:b7:ba:51:ba:
         dc:4c:a8:a1:b9:41:52:4e:54:b7:7a:36:66:d0:76:cc:1c:67:
         25:88:94:61
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSHGABBYm2VPPj2hmTMSZexNjyicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2Qjc2NzdBQ0MzOUM3NkVGRDQ3QjYzNjE2QzVFQ0Y0
MDYwRTUyMTAeFw0yNDAxMjAyMjEwMjlaFw0yNTAxMTgyMjE1MjlaMDMxMTAvBgNV
BAMTKEFDRjU4Q0I5MjUwODk1QTQzNDU0QzRGMEY1QjVFMzg4NDgyMEU2N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbS8VfqvIuvmLLRGeZKjWm5n95
g/UwUrcVNtySy9aD+0ZpDsl8gCou6cd/o6HiYHV82i/vTJUe0gn+6oZ0TBD3/YWE
sHUpmX04fTeH2NJLCqOtv0Q3c5kKDQ/wVkOVEYRW/Lan/OF/EcUv3TZCLp4VJ/qt
jGmr44VUcdcPuOU7t0Sa6oy5SRlD3egBwj8aNA/g2mf3ZntM+D/xbC0KuUTkkNh5
A/q5A9AuhcjgILDjz+NZJWYwz2Ycih4WnhMfXCn93Mg7XP5YGxDBuXasg1VYsesZ
wV9bDRg+slecKnq7easRQKA0eG1vfv0QTHJWfsO0jiblWYNy6ajXdgxJkojHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrPWMuSUIlaQ0VMTw9bXjiEgg5nswHwYDVR0j
BBgwFoAUdWt2d6zDnHbv1HtjYWxez0Bg5SEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC83NTZCNzY3N0FDQzM5Qzc2RUZENDdCNjM2MTZDNUVDRjQwNjBFNTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1NkI3Njc3QUNDMzlDNzZF
RkQ0N0I2MzYxNkM1RUNGNDA2MEU1MjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM3MmUzODM3MmUzNzMyMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDu1dIMA0GCSqGSIb3DQEBCwUAA4IBAQB9XJNp82Oi
xw3Gy5GN0aL0AMnoXa4CN1twdkeRpqyXAgQ0APn4YVc87ls5PQAj3//fg0PUknsH
zyRitYFi/v3/pTyUVRGUkWaQslvkMv1mgM8VZXT1DCBjp7O1HMV4xoHptUOCwKRp
TeUpGa2dlP4hA4pKK1mbr8KKzHM9BglLmVtFeuOpaSLlJuvElfUSoHMfsrNJt2Kk
9E48Qu07YyVMOq+0W+gf22vLcOXsvc53Et7O8M8jNrLLx7JIcbxEtdpwv/lAY4ni
Ttq2xPbdafFEVqOEk2TOs29VC55Bo03hrxZqmkjkqre6UbrcTKihuUFSTlS3ejZm
0HbMHGcliJRh
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org