Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3138372e36302e3132382e302f32302d3234203d3e203238313837.roa
File:                     3138372e36302e3132382e302f32302d3234203d3e203238313837.roa (raw, json)
Hash identifier:          TxSm/ua6A+fRweYEHT+AHtuUtE63lQZEGzgVuwcFIFc=
Subject key identifier:   F1:F2:FB:37:FC:4E:DC:DB:4F:3B:B0:1F:E4:7D:60:8E:FA:3A:30:67
Certificate issuer:       /CN=37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0
Certificate serial:       5A64B92E3008DA9A672BDBF1665BE596A40B326F
Authority key identifier: 37:76:1C:1F:1A:6C:B7:9B:A8:AA:12:FC:BF:F4:F0:7B:FB:CF:A7:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3138372e36302e3132382e302f32302d3234203d3e203238313837.roa
Signing time:             Tue 03 Oct 2023 15:37:11 +0000
ROA not before:           Tue 03 Oct 2023 15:32:11 +0000
ROA not after:            Tue 01 Oct 2024 15:37:11 +0000
asID:                     28187
IP address blocks:        187.60.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:64:b9:2e:30:08:da:9a:67:2b:db:f1:66:5b:e5:96:a4:0b:32:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0
        Validity
            Not Before: Oct  3 15:32:11 2023 GMT
            Not After : Oct  1 15:37:11 2024 GMT
        Subject: CN=F1F2FB37FC4EDCDB4F3BB01FE47D608EFA3A3067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:92:23:93:fb:c1:d7:dd:22:1b:ab:75:3b:
                    85:9f:f5:88:a8:a7:b3:bb:8a:1c:d9:85:46:42:48:
                    5b:aa:75:69:0e:ec:98:b9:c0:45:91:74:52:8b:9c:
                    40:3e:31:06:1f:7b:05:19:59:98:d2:74:d4:5a:5c:
                    3f:98:0e:9e:f2:67:d9:4f:21:e2:9f:ff:f9:ff:dd:
                    ca:fe:fa:cd:4c:f0:7a:a5:19:64:38:5e:38:52:51:
                    7b:f1:3d:d1:9a:9e:77:b8:37:91:3e:b7:f1:98:a7:
                    fb:f8:5e:fe:96:44:ee:57:76:ad:ba:76:45:52:e2:
                    7f:a5:b2:9a:6f:87:af:70:20:34:5d:43:8a:5a:85:
                    4b:bb:51:7a:f1:32:10:5b:c4:83:95:3b:01:8d:81:
                    51:8e:da:79:27:e1:12:05:e5:21:0a:31:e2:03:63:
                    52:26:ec:e5:24:1b:29:80:e2:cb:37:8b:b9:5c:1f:
                    4f:be:94:b2:9b:ef:79:ef:80:7d:b7:21:a4:70:d6:
                    f4:31:91:a7:31:fa:9b:4a:b8:bd:be:6c:30:1d:d1:
                    99:15:f6:db:c8:5f:19:3e:b2:13:2b:51:25:e3:4b:
                    59:3a:5f:51:da:de:cc:37:16:81:1c:d4:4d:94:8e:
                    3f:5e:ce:3b:b8:21:a4:be:73:c4:7b:44:e2:9f:92:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:FB:37:FC:4E:DC:DB:4F:3B:B0:1F:E4:7D:60:8E:FA:3A:30:67
            X509v3 Authority Key Identifier:
                keyid:37:76:1C:1F:1A:6C:B7:9B:A8:AA:12:FC:BF:F4:F0:7B:FB:CF:A7:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3138372e36302e3132382e302f32302d3234203d3e203238313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:dd:71:a8:0e:3a:94:d9:b8:8d:01:1d:bf:73:d8:3a:2c:41:
         ff:c6:eb:25:9c:50:bb:56:de:44:e6:04:ae:ab:eb:48:9b:cd:
         3a:a6:70:fa:e9:05:14:bc:f5:67:f7:fb:f2:ca:41:41:d9:8b:
         2b:12:d1:11:dc:1a:fe:99:1d:45:b6:a6:4c:72:b6:5e:7b:10:
         0f:61:99:0f:7f:a6:03:46:42:3c:2c:4c:62:c4:d6:b4:16:72:
         67:ec:c1:c2:f4:86:96:a9:f7:2c:49:bc:fe:4a:65:1c:63:24:
         5c:91:2e:13:30:11:fc:0c:7c:40:39:db:dc:df:46:1b:b2:3d:
         e4:9b:3f:26:f6:c3:7e:c2:d5:cf:f0:2f:95:d7:a5:5f:93:01:
         74:5e:6f:83:a7:14:4b:97:15:df:d0:ab:95:47:6a:eb:20:88:
         c6:26:02:1d:da:a1:51:aa:14:88:18:0b:78:b8:ac:2c:6f:b3:
         24:03:2a:8c:06:83:f3:bb:3e:7f:73:dd:75:a2:31:f2:8a:e5:
         af:a9:81:35:c4:73:f0:30:25:18:fe:87:5b:33:42:be:91:e0:
         0d:a0:a5:5c:e3:94:a3:83:91:5d:06:25:78:fe:6f:18:fa:66:
         c8:2e:28:d4:df:96:95:f8:22:5c:49:00:99:40:5e:64:86:be:
         bf:3a:c3:8e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWmS5LjAI2ppnK9vxZlvllqQLMm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc3NjFDMUYxQTZDQjc5QkE4QUExMkZDQkZGNEYwN0JG
QkNGQTdCMDAeFw0yMzEwMDMxNTMyMTFaFw0yNDEwMDExNTM3MTFaMDMxMTAvBgNV
BAMTKEYxRjJGQjM3RkM0RURDREI0RjNCQjAxRkU0N0Q2MDhFRkEzQTMwNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3ZIjk/vB190iG6t1O4Wf9Yio
p7O7ihzZhUZCSFuqdWkO7Ji5wEWRdFKLnEA+MQYfewUZWZjSdNRaXD+YDp7yZ9lP
IeKf//n/3cr++s1M8HqlGWQ4XjhSUXvxPdGanne4N5E+t/GYp/v4Xv6WRO5Xdq26
dkVS4n+lsppvh69wIDRdQ4pahUu7UXrxMhBbxIOVOwGNgVGO2nkn4RIF5SEKMeID
Y1Im7OUkGymA4ss3i7lcH0++lLKb73nvgH23IaRw1vQxkacx+ptKuL2+bDAd0ZkV
9tvIXxk+shMrUSXjS1k6X1Ha3sw3FoEc1E2Ujj9ezju4IaS+c8R7ROKfkhihAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8fL7N/xO3NtPO7Af5H1gjvo6MGcwHwYDVR0j
BBgwFoAUN3YcHxpst5uoqhL8v/Twe/vPp7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRENOdmVqMWE4cjJSUTNrWjVwV1dDc29iMlJuNE1xWXVCSEtkN0FQOThi
RDYvMC8zNzc2MUMxRjFBNkNCNzlCQThBQTEyRkNCRkY0RjA3QkZCQ0ZBN0IwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3NzYxQzFGMUE2Q0I3OUJB
OEFBMTJGQ0JGRjRGMDdCRkJDRkE3QjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDTnZlajFhOHIyUlEza1o1cFdXQ3NvYjJSbjRNcVl1QkhLZDdBUDk4YkQ2LzAv
MzEzODM3MmUzNjMwMmUzMTMyMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzEzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuzyAMA0GCSqGSIb3DQEBCwUAA4IBAQCV3XGoDjqU
2biNAR2/c9g6LEH/xuslnFC7Vt5E5gSuq+tIm806pnD66QUUvPVn9/vyykFB2Ysr
EtER3Br+mR1FtqZMcrZeexAPYZkPf6YDRkI8LExixNa0FnJn7MHC9IaWqfcsSbz+
SmUcYyRckS4TMBH8DHxAOdvc30Ybsj3kmz8m9sN+wtXP8C+V16VfkwF0Xm+DpxRL
lxXf0KuVR2rrIIjGJgId2qFRqhSIGAt4uKwsb7MkAyqMBoPzuz5/c911ojHyiuWv
qYE1xHPwMCUY/odbM0K+keANoKVc45Sjg5FdBiV4/m8Y+mbILijU35aV+CJcSQCZ
QF5khr6/OsOO
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org