Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230362e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230362e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          JbRBDi3BbWOMkxZCm/wzvXNGzwhqoNfy98s3G1Oik30=
Subject key identifier:   A6:C9:B7:19:22:5A:09:D3:7C:A8:35:B4:A3:E6:A3:11:11:2B:4C:F3
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       45661980ABE97BE2102C714B437719DB980BEF0D
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230362e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:14 +0000
ROA not before:           Thu 03 Aug 2023 13:04:14 +0000
ROA not after:            Thu 01 Aug 2024 13:09:14 +0000
asID:                     262617
IP address blocks:        187.62.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:66:19:80:ab:e9:7b:e2:10:2c:71:4b:43:77:19:db:98:0b:ef:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:14 2023 GMT
            Not After : Aug  1 13:09:14 2024 GMT
        Subject: CN=A6C9B719225A09D37CA835B4A3E6A311112B4CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:83:92:ef:56:a4:47:71:4b:0e:bf:c2:a2:
                    1d:f3:63:b7:5c:09:00:93:84:e8:eb:b1:0f:30:25:
                    6b:d8:8c:b3:eb:70:3e:9f:47:01:e7:5e:1f:ab:ee:
                    f8:25:d0:ec:69:44:c7:c6:fb:54:7c:7c:10:8f:d0:
                    0c:9b:64:ac:b6:ca:87:a7:5d:7b:ea:a3:b6:b2:48:
                    48:90:ee:e2:ed:2d:a3:57:b9:06:0c:a5:8d:3d:9e:
                    3c:e5:18:1c:63:64:d8:5e:47:58:bd:ee:20:10:50:
                    cf:86:ee:b5:13:b0:d0:9a:31:5a:77:e4:92:89:39:
                    38:3f:ae:a1:20:86:38:72:95:35:ed:3c:6d:ae:44:
                    9c:92:8c:98:10:14:df:42:63:f4:8d:49:40:cb:2f:
                    6b:1c:4c:3b:ec:61:4a:8a:f9:34:82:35:e9:65:0a:
                    32:c6:15:db:e6:e8:e0:c7:f4:d3:af:89:7f:9e:36:
                    4a:51:0c:04:61:d4:0a:ba:43:ee:15:74:82:dc:44:
                    a7:c2:a4:20:af:5e:82:6c:16:d8:3c:22:8c:78:39:
                    ec:7d:2f:aa:d4:14:3b:47:aa:12:f9:b2:7d:9f:00:
                    e1:ad:69:b3:2f:61:80:65:28:ef:54:ad:1b:c6:fa:
                    8c:6c:82:17:27:ae:50:4c:a6:2a:61:cd:f0:f6:c7:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C9:B7:19:22:5A:09:D3:7C:A8:35:B4:A3:E6:A3:11:11:2B:4C:F3
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230362e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:71:01:b1:5f:cf:16:7c:16:58:ac:67:aa:4e:40:32:dd:a3:
         4e:ca:01:45:e6:48:7a:99:f2:68:4c:d6:35:74:7b:c7:24:3d:
         6c:26:d4:ce:34:74:d0:c0:55:20:f4:d2:35:8c:c7:0b:ac:20:
         22:ee:c1:e4:26:0f:40:50:4d:3c:ba:a8:a1:b2:ea:57:dc:29:
         6b:8c:a9:03:3d:29:f7:b4:29:53:ac:35:cf:c8:12:c8:5d:cf:
         6c:8d:80:a2:05:d4:8b:4d:cb:61:7a:a5:c6:18:9c:0a:32:1e:
         be:cd:f1:af:8e:a8:62:02:25:92:1c:58:64:94:d7:7d:89:c6:
         e1:f2:76:3a:42:bb:1f:5e:d4:e2:4d:10:ad:36:7c:ad:01:55:
         df:44:3d:52:11:7e:de:fd:5c:45:c0:09:6e:d1:e2:b8:2a:b3:
         52:bc:a7:54:76:00:fe:ca:22:ed:36:b7:1e:6e:cf:e8:91:77:
         90:7d:d1:be:7a:0f:93:63:44:59:ee:3c:b1:fc:bc:fa:a5:fc:
         db:93:f9:d0:f3:36:2a:9b:ea:be:35:b9:bf:f0:a5:c0:33:8b:
         d7:86:9f:93:72:17:08:11:ea:98:b6:df:c5:2b:2a:57:38:7a:
         98:ba:05:66:8a:89:ed:da:0d:78:43:9a:29:b7:09:be:f1:b3:
         98:3c:b7:85
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURWYZgKvpe+IQLHFLQ3cZ25gL7w0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MTRaFw0yNDA4MDExMzA5MTRaMDMxMTAvBgNV
BAMTKEE2QzlCNzE5MjI1QTA5RDM3Q0E4MzVCNEEzRTZBMzExMTEyQjRDRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsoOS71akR3FLDr/Coh3zY7dc
CQCThOjrsQ8wJWvYjLPrcD6fRwHnXh+r7vgl0OxpRMfG+1R8fBCP0AybZKy2yoen
XXvqo7aySEiQ7uLtLaNXuQYMpY09njzlGBxjZNheR1i97iAQUM+G7rUTsNCaMVp3
5JKJOTg/rqEghjhylTXtPG2uRJySjJgQFN9CY/SNSUDLL2scTDvsYUqK+TSCNell
CjLGFdvm6ODH9NOviX+eNkpRDARh1Aq6Q+4VdILcRKfCpCCvXoJsFtg8Iox4Oex9
L6rUFDtHqhL5sn2fAOGtabMvYYBlKO9UrRvG+oxsghcnrlBMpiphzfD2x1ehAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpsm3GSJaCdN8qDW0o+ajERErTPMwHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzEzODM3MmUzNjMyMmUzMjMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7Ps4wDQYJKoZIhvcNAQELBQADggEBAANxAbFf
zxZ8FlisZ6pOQDLdo07KAUXmSHqZ8mhM1jV0e8ckPWwm1M40dNDAVSD00jWMxwus
ICLuweQmD0BQTTy6qKGy6lfcKWuMqQM9Kfe0KVOsNc/IEshdz2yNgKIF1ItNy2F6
pcYYnAoyHr7N8a+OqGICJZIcWGSU132JxuHydjpCux9e1OJNEK02fK0BVd9EPVIR
ft79XEXACW7R4rgqs1K8p1R2AP7KIu02tx5uz+iRd5B90b56D5NjRFnuPLH8vPql
/NuT+dDzNiqb6r41ub/wpcAzi9eGn5NyFwgR6pi238UrKlc4epi6BWaKie3aDXhD
mim3Cb7xs5g8t4U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org