Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138372e312e3132382e302f32302d3234203d3e203238323939.roa
File:                     3138372e312e3132382e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          5M4ZmMsV+dzz2fYSbQYW5Vdu2R546nmqXDnt0t0aS7s=
Subject key identifier:   2A:58:44:78:6C:49:90:69:07:E6:B3:EB:8B:0A:65:63:66:67:9A:0B
Certificate issuer:       /CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
Certificate serial:       7790041A75B0FDA5D1C7172D12EC090FE059374C
Authority key identifier: 63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138372e312e3132382e302f32302d3234203d3e203238323939.roa
Signing time:             Fri 17 Nov 2023 12:13:22 +0000
ROA not before:           Fri 17 Nov 2023 12:08:22 +0000
ROA not after:            Fri 15 Nov 2024 12:13:22 +0000
asID:                     28299
IP address blocks:        187.1.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:90:04:1a:75:b0:fd:a5:d1:c7:17:2d:12:ec:09:0f:e0:59:37:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
        Validity
            Not Before: Nov 17 12:08:22 2023 GMT
            Not After : Nov 15 12:13:22 2024 GMT
        Subject: CN=2A5844786C49906907E6B3EB8B0A656366679A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:fe:97:41:d8:f0:cf:b6:d4:41:76:46:87:
                    65:39:ec:e5:37:06:29:bc:28:b1:db:45:27:ea:3e:
                    44:70:ed:9d:3d:58:90:c8:60:7e:cc:18:97:75:41:
                    51:d1:c7:d0:e9:b9:49:50:2e:ee:29:f6:68:dd:a5:
                    40:a2:b5:00:db:9e:5a:65:fe:02:5e:de:cb:30:04:
                    91:57:ac:9a:ed:23:56:dc:be:47:f8:c7:eb:0d:08:
                    19:01:a6:62:c2:17:eb:02:71:27:74:d9:a7:bc:47:
                    c2:e3:6b:f7:24:a7:da:5d:9e:ac:b8:67:93:79:10:
                    8e:3e:d2:76:9a:7f:4c:75:27:2a:6a:ed:0a:26:90:
                    b8:7e:ae:78:e1:6c:97:45:6d:43:83:4a:cb:92:68:
                    c2:ea:ed:7b:52:20:7a:12:c0:c1:29:34:5e:cc:62:
                    24:ca:a2:c6:8b:38:f8:24:ab:8a:31:af:60:ef:33:
                    5c:d5:07:3f:f8:cd:a6:7c:ab:83:bc:cd:53:e2:6b:
                    46:d7:54:cb:3b:51:51:1b:b7:bc:98:97:b4:8a:d6:
                    44:be:67:d5:89:b9:f7:b3:33:6c:f6:cc:e1:3c:31:
                    0d:b2:88:21:44:e7:40:5f:40:44:83:9b:7e:4d:7b:
                    d4:19:b8:4d:7a:75:fe:10:28:b2:ea:1e:91:09:fc:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:44:78:6C:49:90:69:07:E6:B3:EB:8B:0A:65:63:66:67:9A:0B
            X509v3 Authority Key Identifier:
                keyid:63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138372e312e3132382e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:cf:56:2a:96:6c:d8:f2:e3:e5:eb:e4:9f:19:a5:e8:1a:
         c2:9e:5d:c1:72:bd:75:3a:9e:30:b6:e8:73:4e:45:d9:f2:98:
         d6:7c:42:9e:cb:1e:23:e7:2a:5d:1d:e9:b2:e3:40:d5:a5:57:
         aa:44:93:8e:f0:d2:a2:1f:fc:03:af:0f:47:53:08:6a:ba:11:
         b5:ac:2e:37:7d:ff:81:68:70:9b:73:6f:5a:29:ce:7f:0f:d8:
         ef:01:d1:ba:0e:8e:ea:b7:6c:ef:9d:68:7e:15:04:f2:97:9e:
         32:58:75:1b:4f:2e:1b:3b:ca:d1:b7:6c:27:39:ec:88:82:7b:
         57:8a:1b:09:b5:16:ea:c9:a6:60:08:65:8f:b5:55:1a:be:a8:
         b1:7a:01:7b:0c:5d:4a:e8:89:99:e1:ce:9f:11:b6:52:dd:58:
         06:e0:07:d7:2f:6e:72:a1:bc:45:e6:b7:f2:c0:5a:64:79:4f:
         cd:21:6d:df:75:2e:be:1c:21:66:aa:63:5a:2d:01:8a:0e:e0:
         d0:3d:c7:00:5b:dc:74:aa:8e:85:5e:0f:34:2a:81:ed:22:7e:
         64:f5:13:76:d3:91:c4:07:2c:b0:db:ca:0f:c9:83:8c:6d:20:
         cf:1b:4f:8c:43:80:e4:f8:81:6e:b5:2e:bd:d7:96:51:e6:04:
         7c:f8:d5:ca
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUd5AEGnWw/aXRxxctEuwJD+BZN0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNEMkQ0NkU3NDJGQzIyRjEwNTg1MkJFOTZBRjVDRDc5
QUMwNzM2QjAeFw0yMzExMTcxMjA4MjJaFw0yNDExMTUxMjEzMjJaMDMxMTAvBgNV
BAMTKDJBNTg0NDc4NkM0OTkwNjkwN0U2QjNFQjhCMEE2NTYzNjY2NzlBMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqf6XQdjwz7bUQXZGh2U57OU3
Bim8KLHbRSfqPkRw7Z09WJDIYH7MGJd1QVHRx9DpuUlQLu4p9mjdpUCitQDbnlpl
/gJe3sswBJFXrJrtI1bcvkf4x+sNCBkBpmLCF+sCcSd02ae8R8Lja/ckp9pdnqy4
Z5N5EI4+0naaf0x1Jypq7QomkLh+rnjhbJdFbUODSsuSaMLq7XtSIHoSwMEpNF7M
YiTKosaLOPgkq4oxr2DvM1zVBz/4zaZ8q4O8zVPia0bXVMs7UVEbt7yYl7SK1kS+
Z9WJufezM2z2zOE8MQ2yiCFE50BfQESDm35Ne9QZuE16df4QKLLqHpEJ/MT3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUKlhEeGxJkGkH5rPriwplY2ZnmgswHwYDVR0j
BBgwFoAUY9LUbnQvwi8QWFK+lq9c15rAc2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmV0OHh6QVE0aGt2Vm5GcTNXNmkxV3diQ3RReHdOem9jODgyclMzR0w1
OUgvMC82M0QyRDQ2RTc0MkZDMjJGMTA1ODUyQkU5NkFGNUNENzlBQzA3MzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYzRDJENDZFNzQyRkMyMkYx
MDU4NTJCRTk2QUY1Q0Q3OUFDMDczNkIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JldDh4ekFRNGhrdlZuRnEzVzZpMVd3YkN0UXh3TnpvYzg4MnJTM0dMNTlILzAv
MzEzODM3MmUzMTJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMy
MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLsBgDANBgkqhkiG9w0BAQsFAAOCAQEAJs3PViqWbNjy
4+Xr5J8Zpegawp5dwXK9dTqeMLboc05F2fKY1nxCnsseI+cqXR3psuNA1aVXqkST
jvDSoh/8A68PR1MIaroRtawuN33/gWhwm3NvWinOfw/Y7wHRug6O6rds751ofhUE
8peeMlh1G08uGzvK0bdsJznsiIJ7V4obCbUW6smmYAhlj7VVGr6osXoBewxdSuiJ
meHOnxG2Ut1YBuAH1y9ucqG8Rea38sBaZHlPzSFt33UuvhwhZqpjWi0Big7g0D3H
AFvcdKqOhV4PNCqB7SJ+ZPUTdtORxAcssNvKD8mDjG0gzxtPjEOA5PiBbrUuvdeW
UeYEfPjVyg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org