Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230302e302f32322d3232203d3e20323632363137.roa
File:                     3138372e36322e3230302e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier:          6T+/CQsqGTvt9ljngjFcDn5HEJW/Evb0GI6M/g3VGZk=
Subject key identifier:   AB:F2:DB:62:0F:A1:F1:E4:5F:CC:06:05:4A:B1:C9:4E:B8:58:DC:73
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       5D04A52763E6BB8B6D47190835065AD6BEAB963F
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230302e302f32322d3232203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:15 +0000
ROA not before:           Thu 03 Aug 2023 13:04:15 +0000
ROA not after:            Thu 01 Aug 2024 13:09:15 +0000
asID:                     262617
IP address blocks:        187.62.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:04:a5:27:63:e6:bb:8b:6d:47:19:08:35:06:5a:d6:be:ab:96:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:15 2023 GMT
            Not After : Aug  1 13:09:15 2024 GMT
        Subject: CN=ABF2DB620FA1F1E45FCC06054AB1C94EB858DC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:b1:af:88:7e:b0:1d:88:72:3e:95:7b:a0:
                    3c:09:dc:9e:b2:c7:21:66:83:1d:20:36:65:ca:da:
                    86:19:80:ea:f4:a9:e9:0e:73:19:12:e1:63:21:53:
                    3b:b3:74:5a:56:c7:7e:e9:06:84:1e:c0:af:a5:b1:
                    fa:0f:5f:67:a7:85:df:ac:31:8c:11:09:16:25:69:
                    bd:8f:f4:c7:06:5c:95:2c:b9:d7:ab:26:d9:f5:0c:
                    59:1d:37:be:2b:5a:e1:95:43:4b:b9:64:55:a1:e6:
                    48:48:13:db:db:75:e7:05:d7:dc:41:fe:3e:12:9c:
                    b6:9b:af:70:36:79:7a:50:5c:2a:af:87:1a:cd:a8:
                    fc:c9:1a:49:3e:0a:f0:17:5f:d3:05:60:42:68:9f:
                    16:05:f4:c2:4d:3c:8b:f2:7e:37:f0:36:a4:58:58:
                    99:f4:18:d8:b9:1a:3a:71:03:e7:40:f1:34:18:f4:
                    2e:a3:ce:a4:3e:bd:9b:99:9e:a5:95:de:2e:74:53:
                    6a:e0:ab:6c:e1:15:da:a4:7d:4d:42:a3:49:c3:bb:
                    76:ac:97:c8:f8:b6:c4:3b:ba:dc:57:9d:2c:82:01:
                    be:59:7b:20:e5:1e:37:a2:c2:12:b9:85:4e:97:5d:
                    48:1c:4c:9c:33:f1:ba:22:ce:6f:f7:10:88:c8:a5:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F2:DB:62:0F:A1:F1:E4:5F:CC:06:05:4A:B1:C9:4E:B8:58:DC:73
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230302e302f32322d3232203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:75:32:a9:76:c4:06:54:f9:cf:f2:e3:80:45:cf:48:b9:4e:
         7f:a0:b1:b5:ad:93:3e:ec:bd:01:b9:de:3d:08:bc:c7:a3:ab:
         53:8a:77:d7:d2:c5:59:fd:b7:cf:df:26:b3:93:ee:fc:e7:34:
         15:84:40:2e:63:a5:58:77:44:89:30:c7:e9:d6:47:44:87:5f:
         04:15:2f:dd:09:05:a2:fe:c1:88:5d:62:01:52:ce:b5:bf:ac:
         66:ab:94:00:b5:2b:e9:44:19:7f:39:be:b2:db:aa:2b:87:f4:
         ed:9c:e7:47:30:38:98:ed:b2:f0:5e:12:3a:01:fe:cd:97:4b:
         6a:90:91:47:2a:1a:ee:7a:09:b6:e1:de:54:64:32:52:dd:99:
         90:b3:d6:86:c6:78:43:7e:0c:1b:1e:f8:7a:0b:8d:3d:0a:44:
         b5:ba:e5:b6:04:a7:f2:5c:9e:c2:ae:53:22:30:b1:e2:68:d2:
         5a:fc:5d:cd:59:bd:56:14:24:49:c9:6b:ba:bc:a9:b8:50:cb:
         f0:00:a7:49:86:fc:5a:a3:d7:b4:dd:04:5f:5e:06:0c:a6:da:
         0e:d5:4e:6c:33:88:e5:47:8f:09:36:d9:27:43:2c:69:65:36:
         54:44:38:6b:98:e3:ef:6e:9c:be:00:1f:a6:2e:6e:74:11:3d:
         97:9c:aa:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXQSlJ2Pmu4ttRxkINQZa1r6rlj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MTVaFw0yNDA4MDExMzA5MTVaMDMxMTAvBgNV
BAMTKEFCRjJEQjYyMEZBMUYxRTQ1RkNDMDYwNTRBQjFDOTRFQjg1OERDNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlLGviH6wHYhyPpV7oDwJ3J6y
xyFmgx0gNmXK2oYZgOr0qekOcxkS4WMhUzuzdFpWx37pBoQewK+lsfoPX2enhd+s
MYwRCRYlab2P9McGXJUsuderJtn1DFkdN74rWuGVQ0u5ZFWh5khIE9vbdecF19xB
/j4SnLabr3A2eXpQXCqvhxrNqPzJGkk+CvAXX9MFYEJonxYF9MJNPIvyfjfwNqRY
WJn0GNi5GjpxA+dA8TQY9C6jzqQ+vZuZnqWV3i50U2rgq2zhFdqkfU1Co0nDu3as
l8j4tsQ7utxXnSyCAb5ZeyDlHjeiwhK5hU6XXUgcTJwz8boizm/3EIjIpSM7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUq/LbYg+h8eRfzAYFSrHJTrhY3HMwHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzEzODM3MmUzNjMyMmUzMjMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7PsgwDQYJKoZIhvcNAQELBQADggEBABJ1Mql2
xAZU+c/y44BFz0i5Tn+gsbWtkz7svQG53j0IvMejq1OKd9fSxVn9t8/fJrOT7vzn
NBWEQC5jpVh3RIkwx+nWR0SHXwQVL90JBaL+wYhdYgFSzrW/rGarlAC1K+lEGX85
vrLbqiuH9O2c50cwOJjtsvBeEjoB/s2XS2qQkUcqGu56Cbbh3lRkMlLdmZCz1obG
eEN+DBse+HoLjT0KRLW65bYEp/JcnsKuUyIwseJo0lr8Xc1ZvVYUJEnJa7q8qbhQ
y/AAp0mG/Fqj17TdBF9eBgym2g7VTmwziOVHjwk22SdDLGllNlREOGuY4+9unL4A
H6YubnQRPZecqhk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org