Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa
File:                     3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          aGu6xU3h7krHZv85d19vE2cJqUiJnrQYQvdUtqitzyc=
Subject key identifier:   0D:D6:FD:B5:8C:08:ED:45:7F:08:6A:22:31:A0:56:C2:CE:72:1C:F6
Certificate issuer:       /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial:       0D9203CE34CE97E55AB493E644518198A01F9262
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa
Signing time:             Tue 23 Jul 2024 11:51:17 +0000
ROA not before:           Tue 23 Jul 2024 11:46:17 +0000
ROA not after:            Tue 22 Jul 2025 11:51:17 +0000
asID:                     28667
IP address blocks:        187.121.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:92:03:ce:34:ce:97:e5:5a:b4:93:e6:44:51:81:98:a0:1f:92:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
        Validity
            Not Before: Jul 23 11:46:17 2024 GMT
            Not After : Jul 22 11:51:17 2025 GMT
        Subject: CN=0DD6FDB58C08ED457F086A2231A056C2CE721CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:9f:fb:1a:97:34:bb:97:af:24:d2:9b:19:
                    ef:6d:7d:6a:b4:b8:7c:ab:50:fc:9e:af:af:32:58:
                    0e:bc:15:85:1b:41:89:53:db:8e:e5:c7:87:67:0d:
                    45:7e:11:90:3c:15:f5:2a:e9:f3:da:14:c4:65:17:
                    ba:72:9b:20:1e:49:46:0c:b9:39:7c:05:ff:33:80:
                    91:51:eb:82:63:40:71:73:ea:99:58:dd:3d:ad:4b:
                    ef:75:9e:47:ca:ae:22:8e:02:02:af:fd:0e:11:18:
                    1a:88:9f:1e:42:96:27:19:b7:cc:94:51:5f:3b:02:
                    82:d3:06:b5:84:2e:0d:6b:ac:a6:03:7c:b9:c7:96:
                    22:f8:d8:f7:75:90:ed:10:65:d6:c9:a7:51:91:bd:
                    2c:4c:11:01:49:86:72:0a:0c:50:ca:9b:a8:fd:71:
                    47:49:ed:b3:71:e7:c2:07:e1:8a:77:fc:f2:18:bf:
                    11:87:45:38:91:41:40:e8:2f:71:04:e1:44:4a:a5:
                    66:24:49:c3:40:dd:bf:27:25:0e:5e:06:6e:ee:50:
                    20:c2:ed:0f:69:3c:3c:8a:a0:ed:eb:40:f8:50:3c:
                    bc:9e:23:08:9e:d2:4a:0d:3a:db:00:be:96:7e:e4:
                    b9:f5:ee:83:b6:4f:d1:e3:e1:b9:d8:c2:d9:73:52:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D6:FD:B5:8C:08:ED:45:7F:08:6A:22:31:A0:56:C2:CE:72:1C:F6
            X509v3 Authority Key Identifier:
                keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:53:25:b6:5c:44:f7:1b:7a:4c:e4:c4:1e:03:05:2d:e0:22:
         86:9d:b9:a3:fe:5d:e2:55:9e:33:05:b0:81:3a:c5:56:9e:7e:
         84:c5:e3:d3:eb:50:63:87:df:ae:ff:e0:87:d2:c1:a5:b8:cf:
         a5:11:fe:b3:df:6e:db:c1:4f:e6:ea:52:bb:9b:06:80:06:5d:
         f1:5b:e2:17:2d:11:33:57:05:3d:65:57:60:a9:11:f9:a9:29:
         ca:70:44:f1:8b:b2:e8:4b:35:9a:be:c5:88:ff:f6:b2:dd:08:
         5d:eb:d6:cf:55:5e:7b:9c:9a:c8:2a:e4:33:a8:01:d6:c1:99:
         e3:54:b5:bf:d8:02:eb:d2:b0:33:77:b6:05:73:7b:89:51:ce:
         45:65:24:95:b1:8a:0c:e7:be:e3:c1:87:e6:29:9a:56:26:fd:
         85:1f:6a:f3:7d:0d:80:8f:95:70:2a:33:fe:34:56:3d:a3:82:
         1e:53:f6:11:96:ce:77:d4:51:e4:59:35:e4:40:95:a8:41:dd:
         59:b9:3b:38:9e:6b:34:f9:c0:9d:ff:4f:6a:a8:ff:a9:e2:16:
         ce:bf:a5:15:ea:3f:64:41:11:ca:03:27:c8:84:f9:ae:cb:bd:
         ba:b5:96:03:a6:8a:44:4e:d1:08:71:6d:e3:54:01:5b:bd:ba:
         53:b8:21:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDZIDzjTOl+VatJPmRFGBmKAfkmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU3MjE2QjE2OEE5NkZENjkzODlCMUM3RTFBMTVGQkFE
MUUyMTg0RjAeFw0yNDA3MjMxMTQ2MTdaFw0yNTA3MjIxMTUxMTdaMDMxMTAvBgNV
BAMTKDBERDZGREI1OEMwOEVENDU3RjA4NkEyMjMxQTA1NkMyQ0U3MjFDRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOIJ/7Gpc0u5evJNKbGe9tfWq0
uHyrUPyer68yWA68FYUbQYlT247lx4dnDUV+EZA8FfUq6fPaFMRlF7pymyAeSUYM
uTl8Bf8zgJFR64JjQHFz6plY3T2tS+91nkfKriKOAgKv/Q4RGBqInx5ClicZt8yU
UV87AoLTBrWELg1rrKYDfLnHliL42Pd1kO0QZdbJp1GRvSxMEQFJhnIKDFDKm6j9
cUdJ7bNx58IH4Yp3/PIYvxGHRTiRQUDoL3EE4URKpWYkScNA3b8nJQ5eBm7uUCDC
7Q9pPDyKoO3rQPhQPLyeIwie0koNOtsAvpZ+5Ln17oO2T9Hj4bnYwtlzUoSrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDdb9tYwI7UV/CGoiMaBWws5yHPYwHwYDVR0j
BBgwFoAURXIWsWipb9aTibHH4aFfutHiGE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMi80NTcyMTZCMTY4QTk2RkQ2OTM4OUIxQzdFMUExNUZCQUQxRTIxODRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1NzIxNkIxNjhBOTZGRDY5
Mzg5QjFDN0UxQTE1RkJBRDFFMjE4NEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzIv
MzEzODM3MmUzMTMyMzEyZTMxMzkzMjJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAW7ecAwDQYJKoZIhvcNAQELBQADggEBAD5TJbZc
RPcbekzkxB4DBS3gIoaduaP+XeJVnjMFsIE6xVaefoTF49PrUGOH367/4IfSwaW4
z6UR/rPfbtvBT+bqUrubBoAGXfFb4hctETNXBT1lV2CpEfmpKcpwRPGLsuhLNZq+
xYj/9rLdCF3r1s9VXnucmsgq5DOoAdbBmeNUtb/YAuvSsDN3tgVze4lRzkVlJJWx
igznvuPBh+YpmlYm/YUfavN9DYCPlXAqM/40Vj2jgh5T9hGWznfUUeRZNeRAlahB
3Vm5OzieazT5wJ3/T2qo/6niFs6/pRXqP2RBEcoDJ8iE+a7Lvbq1lgOmikRO0Qhx
beNUAVu9ulO4IfQ=
-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org