Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139372e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139372e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          xpCAuyW3EOEGSlWSxzzSsGPcVHrShlVUROkDcwr9yGw=
Subject key identifier:   4B:87:20:43:C8:4C:22:6C:FB:5D:B3:3E:92:19:8C:44:F2:99:AD:8A
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       170806E6CBB86E9CF23E8DF7919E671BF1D96423
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139372e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:08:59 +0000
ROA not before:           Thu 03 Aug 2023 13:03:59 +0000
ROA not after:            Thu 01 Aug 2024 13:08:59 +0000
asID:                     262617
IP address blocks:        187.62.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:08:06:e6:cb:b8:6e:9c:f2:3e:8d:f7:91:9e:67:1b:f1:d9:64:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:03:59 2023 GMT
            Not After : Aug  1 13:08:59 2024 GMT
        Subject: CN=4B872043C84C226CFB5DB33E92198C44F299AD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:d6:43:74:b1:2b:1a:b5:d7:50:68:ce:15:
                    05:87:d3:ec:dd:e0:9c:38:bb:4f:68:28:49:88:e3:
                    a4:c2:d5:50:e6:a4:9d:94:a3:cb:ee:e0:b3:dd:5c:
                    30:fe:a0:1c:ba:62:61:ca:30:57:76:a1:78:65:0d:
                    81:dd:e3:b5:4f:15:95:e9:b2:99:05:54:1d:60:c1:
                    9b:5d:9d:d4:87:b7:d7:3e:ce:82:a5:a7:89:a9:56:
                    8b:7d:60:59:c7:b7:b3:97:9c:e6:2c:8b:55:b0:93:
                    05:d1:98:d6:d3:c5:29:c9:b8:c8:97:85:37:80:aa:
                    a4:f2:2e:6e:30:ed:7a:37:5e:a7:79:ca:63:a3:6b:
                    40:cd:1d:95:0e:a5:81:31:81:d3:7f:f1:0f:cb:51:
                    4e:27:12:98:4e:0c:2d:78:37:b8:af:7a:71:c1:a4:
                    3f:53:0b:bb:d4:4d:3e:08:5e:36:00:fa:7c:b2:90:
                    0e:d2:2e:7c:fa:70:40:b6:69:6e:b4:88:ba:c0:0a:
                    32:5d:1f:3e:b8:db:8d:0e:73:e5:ab:21:8a:a2:ca:
                    9d:24:8a:9b:5f:ce:2e:3a:cf:ab:b9:4e:7c:33:f4:
                    79:f9:3a:a9:e8:23:17:d8:d1:39:df:75:84:36:7f:
                    0d:38:78:5f:ae:07:f3:3c:73:50:25:70:f9:c5:d7:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:87:20:43:C8:4C:22:6C:FB:5D:B3:3E:92:19:8C:44:F2:99:AD:8A
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139372e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:83:00:ca:7c:28:54:91:73:dd:24:c2:1c:0c:cb:39:6c:93:
         c3:e9:8d:aa:40:94:d1:59:3f:d8:59:9c:91:fe:87:fa:2d:e3:
         1c:0c:e3:e7:85:3a:ab:ee:14:a1:95:77:33:e0:e1:c6:1e:65:
         ca:ea:4e:64:5c:28:e6:db:0a:bc:f9:50:31:2a:99:b3:eb:99:
         1d:db:ed:49:c8:8b:b3:5c:0d:b0:52:55:3e:88:af:dc:05:97:
         26:1f:5e:a2:22:7b:da:02:a6:68:da:75:70:ed:e2:4a:d4:aa:
         fc:8d:cd:8c:fa:7a:07:db:ef:bd:49:bc:90:c9:a9:e1:c6:34:
         6f:76:e9:bb:50:44:70:98:2d:be:98:ba:fe:40:61:d6:d6:64:
         18:b4:5c:6d:62:7d:ca:ce:73:0c:84:da:68:fa:7e:db:17:88:
         5e:25:cf:7a:cf:cf:23:59:d8:1b:99:38:b8:ab:02:83:5d:e8:
         0f:cc:a5:27:f0:cc:ee:0b:70:9c:a0:3a:9a:41:6e:3c:2a:ab:
         56:f1:d0:f4:a6:e0:7f:da:67:8d:08:cf:55:ed:85:3a:6e:2c:
         39:ba:bd:f8:76:fe:c9:97:55:ef:55:3c:d4:61:4b:9d:4d:68:
         4d:f9:a2:53:99:51:4c:cf:d1:7d:ec:e0:ed:82:49:02:28:a7:
         39:b3:74:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFwgG5su4bpzyPo33kZ5nG/HZZCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzAzNTlaFw0yNDA4MDExMzA4NTlaMDMxMTAvBgNV
BAMTKDRCODcyMDQzQzg0QzIyNkNGQjVEQjMzRTkyMTk4QzQ0RjI5OUFEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhmdZDdLErGrXXUGjOFQWH0+zd
4Jw4u09oKEmI46TC1VDmpJ2Uo8vu4LPdXDD+oBy6YmHKMFd2oXhlDYHd47VPFZXp
spkFVB1gwZtdndSHt9c+zoKlp4mpVot9YFnHt7OXnOYsi1WwkwXRmNbTxSnJuMiX
hTeAqqTyLm4w7Xo3Xqd5ymOja0DNHZUOpYExgdN/8Q/LUU4nEphODC14N7ivenHB
pD9TC7vUTT4IXjYA+nyykA7SLnz6cEC2aW60iLrACjJdHz64240Oc+WrIYqiyp0k
iptfzi46z6u5Tnwz9Hn5OqnoIxfY0TnfdYQ2fw04eF+uB/M8c1AlcPnF17kpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUS4cgQ8hMImz7XbM+khmMRPKZrYowHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzEzODM3MmUzNjMyMmUzMTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7PsUwDQYJKoZIhvcNAQELBQADggEBAA+DAMp8
KFSRc90kwhwMyzlsk8PpjapAlNFZP9hZnJH+h/ot4xwM4+eFOqvuFKGVdzPg4cYe
ZcrqTmRcKObbCrz5UDEqmbPrmR3b7UnIi7NcDbBSVT6Ir9wFlyYfXqIie9oCpmja
dXDt4krUqvyNzYz6egfb771JvJDJqeHGNG926btQRHCYLb6Yuv5AYdbWZBi0XG1i
fcrOcwyE2mj6ftsXiF4lz3rPzyNZ2BuZOLirAoNd6A/MpSfwzO4LcJygOppBbjwq
q1bx0PSm4H/aZ40Iz1XthTpuLDm6vfh2/smXVe9VPNRhS51NaE35olOZUUzP0X3s
4O2CSQIopzmzdJo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org