Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbS7QpnqFZ6GW568UzhunnQCT87hUoCwqr6xfAQcWv9f/0/3138362e3139352e3139322e302f32302d3234203d3e203533323038.roa
File:                     3138362e3139352e3139322e302f32302d3234203d3e203533323038.roa (raw, json)
Hash identifier:          P3DSW6deQ2ajzlCTANctwn5N1MrDlgL1M1DxAnpPo24=
Subject key identifier:   86:91:80:AB:66:15:9C:55:AD:0C:2E:58:78:5E:17:24:8E:00:A6:17
Certificate issuer:       /CN=435FD16954FC8A13C43D16E942B0DDE94244836F
Certificate serial:       6064AE5CB2378F309B4EAD248104994C582F4820
Authority key identifier: 43:5F:D1:69:54:FC:8A:13:C4:3D:16:E9:42:B0:DD:E9:42:44:83:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/435FD16954FC8A13C43D16E942B0DDE94244836F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbS7QpnqFZ6GW568UzhunnQCT87hUoCwqr6xfAQcWv9f/0/3138362e3139352e3139322e302f32302d3234203d3e203533323038.roa
Signing time:             Thu 22 Feb 2024 17:38:34 +0000
ROA not before:           Thu 22 Feb 2024 17:33:34 +0000
ROA not after:            Thu 20 Feb 2025 17:38:34 +0000
asID:                     53208
IP address blocks:        186.195.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:64:ae:5c:b2:37:8f:30:9b:4e:ad:24:81:04:99:4c:58:2f:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435FD16954FC8A13C43D16E942B0DDE94244836F
        Validity
            Not Before: Feb 22 17:33:34 2024 GMT
            Not After : Feb 20 17:38:34 2025 GMT
        Subject: CN=869180AB66159C55AD0C2E58785E17248E00A617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:38:6a:85:66:5c:86:5c:44:ef:6e:05:54:5e:
                    22:a5:95:67:28:de:ac:43:fe:74:70:65:a6:b6:6d:
                    34:e1:a4:ab:9c:25:16:6a:6c:b1:c6:d2:8b:b2:cc:
                    1d:2b:0f:2d:34:8f:e2:30:4f:03:d4:ca:67:49:b1:
                    30:47:cf:a8:11:1b:c8:83:13:b2:70:b8:11:fa:a2:
                    e5:6f:1d:91:bd:a9:70:2b:7b:ec:19:50:cb:1a:df:
                    ce:69:4d:3e:56:d0:e3:b8:75:59:8c:4e:ba:59:6a:
                    57:f0:07:5b:84:f5:dd:2e:9e:c4:75:64:13:f1:23:
                    2f:07:3e:fb:80:e5:d7:36:9c:81:86:ef:44:b9:1f:
                    13:62:30:fc:3a:3f:82:74:24:f3:74:cf:45:02:7a:
                    9b:55:37:9d:f4:51:18:56:10:0b:05:7d:2a:0a:d5:
                    4c:1a:51:5c:7d:1a:19:7e:28:89:ae:47:fa:b4:bc:
                    53:6d:03:11:1e:07:c8:2f:73:5e:23:bd:1a:be:1e:
                    2e:b3:73:07:61:0c:63:42:78:8e:4d:d1:15:fd:7a:
                    af:f4:89:d5:15:04:d9:60:63:f3:0b:58:df:94:1c:
                    58:cf:23:23:5d:79:bb:2b:34:61:d7:d9:77:64:df:
                    2a:ea:86:d4:78:07:46:b7:bf:f6:a5:d9:95:84:ee:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:80:AB:66:15:9C:55:AD:0C:2E:58:78:5E:17:24:8E:00:A6:17
            X509v3 Authority Key Identifier:
                keyid:43:5F:D1:69:54:FC:8A:13:C4:3D:16:E9:42:B0:DD:E9:42:44:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbS7QpnqFZ6GW568UzhunnQCT87hUoCwqr6xfAQcWv9f/0/435FD16954FC8A13C43D16E942B0DDE94244836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/435FD16954FC8A13C43D16E942B0DDE94244836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbS7QpnqFZ6GW568UzhunnQCT87hUoCwqr6xfAQcWv9f/0/3138362e3139352e3139322e302f32302d3234203d3e203533323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:6a:3e:27:30:65:c5:bc:7a:9f:c7:4f:85:d5:32:70:b7:32:
         36:a7:ca:0d:b5:57:fd:05:4c:ae:b2:72:d2:9b:36:64:51:77:
         dd:16:48:d9:d0:20:68:9c:17:5d:02:c5:dd:64:3e:96:2b:6d:
         82:da:18:0a:be:da:d9:c1:07:f7:98:4e:c4:6a:ac:87:1b:48:
         3a:36:28:a4:c2:fe:c1:b4:d0:59:fc:7e:b4:fe:0e:a0:c9:22:
         73:34:e9:24:06:17:31:93:86:c1:b6:2a:2d:bc:4d:d5:fa:db:
         33:c3:24:89:27:de:b0:24:e3:70:48:e2:09:63:ab:f0:7a:80:
         6c:a6:46:84:6c:35:4f:61:13:eb:6b:36:88:1f:2d:98:15:5a:
         1b:23:dd:b5:73:0b:ac:65:8e:57:b0:70:a5:bb:d7:0b:d0:4f:
         5a:19:84:23:e7:0e:2b:90:05:87:ce:ae:0c:86:fb:6d:52:2a:
         e5:7d:dc:fd:50:18:8a:2b:5d:5b:1f:1b:0a:58:f4:25:f6:a2:
         c5:6d:39:45:63:e2:0b:65:56:53:28:e9:09:83:39:91:ef:f1:
         51:b9:8e:a7:b9:c6:ed:6c:32:3d:e4:3d:75:82:33:d4:d3:ff:
         cc:66:1a:03:0b:8f:5e:8e:31:fe:4a:31:6f:f3:ad:92:aa:9f:
         2c:af:d9:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYGSuXLI3jzCbTq0kgQSZTFgvSCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM1RkQxNjk1NEZDOEExM0M0M0QxNkU5NDJCMERERTk0
MjQ0ODM2RjAeFw0yNDAyMjIxNzMzMzRaFw0yNTAyMjAxNzM4MzRaMDMxMTAvBgNV
BAMTKDg2OTE4MEFCNjYxNTlDNTVBRDBDMkU1ODc4NUUxNzI0OEUwMEE2MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjOGqFZlyGXETvbgVUXiKllWco
3qxD/nRwZaa2bTThpKucJRZqbLHG0ouyzB0rDy00j+IwTwPUymdJsTBHz6gRG8iD
E7JwuBH6ouVvHZG9qXAre+wZUMsa385pTT5W0OO4dVmMTrpZalfwB1uE9d0unsR1
ZBPxIy8HPvuA5dc2nIGG70S5HxNiMPw6P4J0JPN0z0UCeptVN530URhWEAsFfSoK
1UwaUVx9Ghl+KImuR/q0vFNtAxEeB8gvc14jvRq+Hi6zcwdhDGNCeI5N0RX9eq/0
idUVBNlgY/MLWN+UHFjPIyNdebsrNGHX2Xdk3yrqhtR4B0a3v/al2ZWE7u+LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhpGAq2YVnFWtDC5YeF4XJI4AphcwHwYDVR0j
BBgwFoAUQ1/RaVT8ihPEPRbpQrDd6UJEg28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmJTN1FwbnFGWjZHVzU2OFV6aHVublFDVDg3aFVvQ3dxcjZ4ZkFRY1d2
OWYvMC80MzVGRDE2OTU0RkM4QTEzQzQzRDE2RTk0MkIwRERFOTQyNDQ4MzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzNUZEMTY5NTRGQzhBMTND
NDNEMTZFOTQyQjBEREU5NDI0NDgzNkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JiUzdRcG5xRlo2R1c1NjhVemh1bm5RQ1Q4N2hVb0N3cXI2eGZBUWNXdjlmLzAv
MzEzODM2MmUzMTM5MzUyZTMxMzkzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzMzMjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS6w8AwDQYJKoZIhvcNAQELBQADggEBACNqPicw
ZcW8ep/HT4XVMnC3Mjanyg21V/0FTK6yctKbNmRRd90WSNnQIGicF10Cxd1kPpYr
bYLaGAq+2tnBB/eYTsRqrIcbSDo2KKTC/sG00Fn8frT+DqDJInM06SQGFzGThsG2
Ki28TdX62zPDJIkn3rAk43BI4gljq/B6gGymRoRsNU9hE+trNogfLZgVWhsj3bVz
C6xljlewcKW71wvQT1oZhCPnDiuQBYfOrgyG+21SKuV93P1QGIorXVsfGwpY9CX2
osVtOUVj4gtlVlMo6QmDOZHv8VG5jqe5xu1sMj3kPXWCM9TT/8xmGgMLj16OMf5K
MW/zrZKqnyyv2QY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org