Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139392e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139392e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          G9z+FnfsbFtyxCsKe3lAeI3YrRrqcXtqC8Hv02IThC4=
Subject key identifier:   79:01:84:B6:52:45:61:45:5F:76:E7:94:1B:03:21:C8:95:67:15:E4
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       02F85B1F2C7E8D237BF7ADBF6307CB5C845D04E9
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139392e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:17 +0000
ROA not before:           Thu 03 Aug 2023 13:04:17 +0000
ROA not after:            Thu 01 Aug 2024 13:09:17 +0000
asID:                     262617
IP address blocks:        187.62.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f8:5b:1f:2c:7e:8d:23:7b:f7:ad:bf:63:07:cb:5c:84:5d:04:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:17 2023 GMT
            Not After : Aug  1 13:09:17 2024 GMT
        Subject: CN=790184B6524561455F76E7941B0321C8956715E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:28:40:f2:29:d5:9e:28:01:1a:e5:16:66:
                    c5:c1:32:42:8e:dc:51:24:e4:d5:15:c3:18:7f:9e:
                    33:a6:0f:58:2d:9e:8a:e0:51:2e:87:60:a9:b0:08:
                    5c:d8:97:cf:fc:cf:e8:ff:88:a7:d1:d8:2c:0a:41:
                    5f:bd:f1:11:7a:83:55:23:0b:da:34:89:a4:d8:37:
                    5e:bf:8b:93:1d:bf:f6:24:db:e1:3c:6d:ea:b6:fd:
                    5e:c2:58:2f:3e:bd:4c:01:f0:56:41:3c:3a:cc:37:
                    a4:70:1d:82:75:56:3f:01:51:e5:4e:a4:85:36:d0:
                    5f:c9:51:47:ee:84:d0:cc:5e:d0:16:96:8f:1a:f2:
                    5b:01:69:8a:db:d4:60:93:f8:43:77:fa:da:f4:69:
                    97:f5:de:f5:ba:4b:58:cd:10:8f:02:b3:0f:f1:01:
                    bb:d0:a1:83:b5:5e:22:79:58:4b:21:24:f1:7f:b8:
                    c8:10:77:18:83:63:00:bf:f9:3c:05:cb:e8:99:bf:
                    14:fd:32:15:44:8a:a2:32:16:d8:e7:2e:0c:4c:66:
                    85:74:67:25:9a:b7:28:9d:af:41:1b:6e:bf:33:d1:
                    29:b3:68:a3:c8:6f:33:c6:fa:39:8c:11:87:80:1d:
                    9f:ed:80:ce:0a:9f:b1:68:e5:40:e8:7c:84:cd:8e:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:01:84:B6:52:45:61:45:5F:76:E7:94:1B:03:21:C8:95:67:15:E4
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139392e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:4f:8b:bd:54:e1:8f:d4:af:1f:69:9c:90:6e:0d:2f:5a:
         10:58:e1:3d:f2:3b:69:7d:b1:de:c1:03:b8:7e:fc:bb:a1:72:
         82:bb:ca:4f:7c:21:5f:9e:77:a2:1a:34:2b:0d:2d:97:2b:12:
         12:00:fd:62:f6:ff:fa:bb:5a:9f:8d:bd:a2:d5:bf:c6:06:05:
         2f:65:9d:8a:6f:ba:1b:c0:25:0d:6c:43:53:be:37:cc:aa:dd:
         ab:79:4a:a3:21:a7:55:d9:8d:12:98:c7:8f:1e:c8:8c:11:26:
         95:fb:0b:a1:c6:a6:20:9f:46:c0:4b:41:b7:c2:a0:54:e8:a6:
         08:82:45:4c:b1:8c:da:a7:33:c0:5a:4f:d6:d8:c1:52:31:a2:
         3a:97:67:5a:5e:ef:85:03:d5:33:f7:0b:15:f6:fe:70:fb:69:
         91:5d:59:f5:e6:2c:e4:b9:a2:d8:c2:10:bd:54:26:84:b9:42:
         95:16:a7:4b:77:dd:ef:e4:a5:fa:fe:60:4f:4c:b6:69:76:b6:
         51:7e:6a:02:5a:23:7a:92:2d:68:5c:4e:ac:22:75:73:c4:df:
         dc:95:4d:d3:6e:f0:0f:80:1d:7d:b4:19:ca:6d:90:c4:c4:cd:
         1c:97:bc:c9:b0:57:1c:ef:ae:91:6e:1d:6a:e5:a0:dc:db:1d:
         b7:dd:b5:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAvhbHyx+jSN7962/YwfLXIRdBOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MTdaFw0yNDA4MDExMzA5MTdaMDMxMTAvBgNV
BAMTKDc5MDE4NEI2NTI0NTYxNDU1Rjc2RTc5NDFCMDMyMUM4OTU2NzE1RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6ChA8inVnigBGuUWZsXBMkKO
3FEk5NUVwxh/njOmD1gtnorgUS6HYKmwCFzYl8/8z+j/iKfR2CwKQV+98RF6g1Uj
C9o0iaTYN16/i5Mdv/Yk2+E8beq2/V7CWC8+vUwB8FZBPDrMN6RwHYJ1Vj8BUeVO
pIU20F/JUUfuhNDMXtAWlo8a8lsBaYrb1GCT+EN3+tr0aZf13vW6S1jNEI8Csw/x
AbvQoYO1XiJ5WEshJPF/uMgQdxiDYwC/+TwFy+iZvxT9MhVEiqIyFtjnLgxMZoV0
ZyWatyidr0Ebbr8z0SmzaKPIbzPG+jmMEYeAHZ/tgM4Kn7Fo5UDofITNjsQxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeQGEtlJFYUVfdueUGwMhyJVnFeQwHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzEzODM3MmUzNjMyMmUzMTM5MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7PscwDQYJKoZIhvcNAQELBQADggEBAIpkT4u9
VOGP1K8faZyQbg0vWhBY4T3yO2l9sd7BA7h+/LuhcoK7yk98IV+ed6IaNCsNLZcr
EhIA/WL2//q7Wp+NvaLVv8YGBS9lnYpvuhvAJQ1sQ1O+N8yq3at5SqMhp1XZjRKY
x48eyIwRJpX7C6HGpiCfRsBLQbfCoFTopgiCRUyxjNqnM8BaT9bYwVIxojqXZ1pe
74UD1TP3CxX2/nD7aZFdWfXmLOS5otjCEL1UJoS5QpUWp0t33e/kpfr+YE9Mtml2
tlF+agJaI3qSLWhcTqwidXPE39yVTdNu8A+AHX20GcptkMTEzRyXvMmwVxzvrpFu
HWrloNzbHbfdtQ0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org