Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32332d3233203d3e20323632363137.roa
File:                     3138372e36322e3139322e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          qJt2w2x0+W51WoeGaVLb23BIDB+FI5dgTTIbX+vXYDU=
Subject key identifier:   57:8A:95:EE:1C:5E:34:E2:C1:15:6A:BE:FE:2C:EC:0C:7F:5A:23:AC
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       093FF92E043A287E7142F216985271C864DADDEE
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32332d3233203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:16 +0000
ROA not before:           Thu 03 Aug 2023 13:04:16 +0000
ROA not after:            Thu 01 Aug 2024 13:09:16 +0000
asID:                     262617
IP address blocks:        187.62.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3f:f9:2e:04:3a:28:7e:71:42:f2:16:98:52:71:c8:64:da:dd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:16 2023 GMT
            Not After : Aug  1 13:09:16 2024 GMT
        Subject: CN=578A95EE1C5E34E2C1156ABEFE2CEC0C7F5A23AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:28:d0:d5:36:a9:7e:ec:a4:42:f2:54:36:ef:
                    71:e5:63:6f:9b:15:24:e7:09:e7:7b:a2:d0:93:54:
                    f2:b0:24:33:c1:9a:cc:a6:9f:c6:39:cd:58:a6:53:
                    b7:58:20:f4:dd:9b:20:0e:cf:97:dc:9f:78:65:b5:
                    bf:6b:ea:9c:ba:cf:ca:13:39:b5:fd:33:4d:27:ee:
                    05:98:d2:3a:d4:d5:69:cb:73:2b:8a:5e:46:8b:30:
                    ed:b3:80:8d:48:ca:fe:1f:dd:c3:66:4b:2c:73:ce:
                    a2:88:8e:f0:b5:3e:17:10:2f:e3:fc:aa:ca:10:ef:
                    e2:b4:ac:67:f6:a7:04:b0:50:7f:e4:fd:58:1b:15:
                    a5:db:74:e4:fd:06:c5:10:42:96:cb:dc:c3:91:52:
                    40:88:e6:eb:bc:fe:68:ea:32:6d:62:c4:27:27:65:
                    db:21:ee:d4:1e:45:60:42:31:64:6b:11:0a:ac:64:
                    ae:cb:4f:96:fa:fc:98:48:fe:82:b1:d3:dc:4a:31:
                    a4:09:b9:1a:39:7b:fe:a5:b1:21:ae:22:22:ee:a8:
                    aa:37:1d:cb:85:b9:25:68:1a:7c:cb:ad:f5:06:0d:
                    6b:08:17:33:21:2b:bf:81:a1:e8:f2:f4:6b:50:81:
                    75:c9:3a:59:89:25:28:b7:17:5d:6e:21:8e:81:cb:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8A:95:EE:1C:5E:34:E2:C1:15:6A:BE:FE:2C:EC:0C:7F:5A:23:AC
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:48:96:bb:2b:4d:b5:76:92:0e:32:b4:2a:63:dd:cf:07:
         06:4b:ad:c4:cf:a9:20:80:fc:66:ca:03:d0:88:08:c5:13:88:
         2d:e8:4f:e4:da:8c:9d:8b:b0:6f:3c:8c:a4:16:c5:a3:b9:e9:
         85:65:01:9e:a6:7a:26:6c:30:28:18:84:87:ff:fe:f2:0a:fd:
         20:af:9b:79:88:6d:5d:e1:5a:29:fe:fc:c9:02:73:86:e3:d7:
         16:01:8d:ad:8e:4c:10:4a:fb:36:41:ca:01:d0:c6:de:1e:f6:
         c5:6b:f0:95:96:3f:c7:ca:48:c5:5a:6b:ea:4c:6b:98:89:be:
         f8:51:53:17:35:aa:a2:69:df:64:cf:18:83:24:3a:34:eb:98:
         f4:d7:5e:e0:8c:26:ef:b2:1c:87:22:91:1b:0b:ab:2a:85:81:
         8f:41:f9:51:ab:c1:fc:c8:13:1f:2b:a3:93:da:1e:ef:49:13:
         a7:f1:0a:4d:b1:78:fa:10:1d:50:28:82:b2:df:a9:23:72:b2:
         87:02:e9:ec:7f:ca:46:f3:5b:13:5d:b0:34:75:19:9e:5f:a3:
         2e:2d:64:f6:a9:da:61:e8:02:1d:ab:9d:fd:39:6c:ed:47:6b:
         47:3b:a2:d0:f1:d4:1c:08:8e:b0:a0:8c:70:cb:cc:0e:f4:6f:
         d2:23:a5:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCT/5LgQ6KH5xQvIWmFJxyGTa3e4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MTZaFw0yNDA4MDExMzA5MTZaMDMxMTAvBgNV
BAMTKDU3OEE5NUVFMUM1RTM0RTJDMTE1NkFCRUZFMkNFQzBDN0Y1QTIzQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKNDVNql+7KRC8lQ273HlY2+b
FSTnCed7otCTVPKwJDPBmsymn8Y5zVimU7dYIPTdmyAOz5fcn3hltb9r6py6z8oT
ObX9M00n7gWY0jrU1WnLcyuKXkaLMO2zgI1Iyv4f3cNmSyxzzqKIjvC1PhcQL+P8
qsoQ7+K0rGf2pwSwUH/k/VgbFaXbdOT9BsUQQpbL3MORUkCI5uu8/mjqMm1ixCcn
Zdsh7tQeRWBCMWRrEQqsZK7LT5b6/JhI/oKx09xKMaQJuRo5e/6lsSGuIiLuqKo3
HcuFuSVoGnzLrfUGDWsIFzMhK7+Boejy9GtQgXXJOlmJJSi3F11uIY6Byw2rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUV4qV7hxeNOLBFWq+/izsDH9aI6wwHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzEzODM3MmUzNjMyMmUzMTM5MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7PsAwDQYJKoZIhvcNAQELBQADggEBAGmgSJa7
K021dpIOMrQqY93PBwZLrcTPqSCA/GbKA9CICMUTiC3oT+TajJ2LsG88jKQWxaO5
6YVlAZ6meiZsMCgYhIf//vIK/SCvm3mIbV3hWin+/MkCc4bj1xYBja2OTBBK+zZB
ygHQxt4e9sVr8JWWP8fKSMVaa+pMa5iJvvhRUxc1qqJp32TPGIMkOjTrmPTXXuCM
Ju+yHIcikRsLqyqFgY9B+VGrwfzIEx8ro5PaHu9JE6fxCk2xePoQHVAogrLfqSNy
socC6ex/ykbzWxNdsDR1GZ5foy4tZPap2mHoAh2rnf05bO1Ha0c7otDx1BwIjrCg
jHDLzA70b9Ijpdc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org