Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa
File:                     3138372e38352e3134342e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          gWdlsu+86UShoJhI/p3lRip4B6BaVe4LXTzNQUtstPQ=
Subject key identifier:   FD:B3:2C:3B:01:89:2B:67:61:D2:8F:26:A8:37:20:E8:5B:CB:6C:53
Certificate issuer:       /CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
Certificate serial:       1FF68E3092B89FB5585A0EF7CB9586B550658789
Authority key identifier: FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa
Signing time:             Thu 04 Apr 2024 11:47:44 +0000
ROA not before:           Thu 04 Apr 2024 11:42:44 +0000
ROA not after:            Thu 03 Apr 2025 11:47:44 +0000
asID:                     53062
IP address blocks:        187.85.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f6:8e:30:92:b8:9f:b5:58:5a:0e:f7:cb:95:86:b5:50:65:87:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
        Validity
            Not Before: Apr  4 11:42:44 2024 GMT
            Not After : Apr  3 11:47:44 2025 GMT
        Subject: CN=FDB32C3B01892B6761D28F26A83720E85BCB6C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:16:08:6d:92:87:c9:cf:87:32:2b:77:bf:
                    1b:e0:67:ec:a1:33:c4:40:f1:e6:ef:62:c5:30:be:
                    77:ff:d1:af:d3:7c:5d:29:6b:d1:5a:d9:46:03:75:
                    b4:e8:89:52:56:38:30:6f:b4:09:a4:ef:55:f7:6b:
                    41:75:79:a2:5b:f5:9c:eb:57:43:88:be:a9:d0:22:
                    e2:03:59:2d:6c:6d:6d:e7:f2:d0:f5:10:e8:67:54:
                    f4:df:0c:f4:60:22:11:e7:15:25:9c:be:c1:1e:c7:
                    e5:c8:0a:7d:cf:3d:10:d5:05:c8:1f:52:d7:69:da:
                    a5:f1:21:fc:03:d1:f9:43:f0:d3:cb:9a:dd:af:2b:
                    77:1e:65:86:7e:74:ff:b8:fc:7c:95:0c:26:52:e6:
                    9e:a3:b7:4d:aa:73:73:13:77:71:fb:a2:a2:c5:0a:
                    6b:4b:07:aa:58:8f:16:24:12:80:2a:52:bb:b1:d0:
                    f1:a7:0e:7e:cc:0c:88:26:f1:50:58:3a:44:b9:34:
                    fb:69:15:6a:79:22:f5:67:c0:27:9d:86:59:11:f8:
                    13:b0:65:f6:9e:e5:16:9c:01:bc:d8:37:47:50:2b:
                    35:96:01:2f:2e:63:0b:75:fb:72:73:5e:51:94:ea:
                    81:fb:52:07:1b:c9:25:59:e8:ac:99:f7:20:0f:e9:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B3:2C:3B:01:89:2B:67:61:D2:8F:26:A8:37:20:E8:5B:CB:6C:53
            X509v3 Authority Key Identifier:
                keyid:FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:e3:8c:f8:dc:b0:c4:db:7d:be:fd:1d:06:09:92:22:45:
         68:b1:ec:5e:d9:ae:b0:0c:3a:3e:67:a6:a9:44:a5:9f:0d:04:
         62:17:b1:d8:a3:c0:a5:5f:e8:21:69:23:31:73:fa:b0:e6:55:
         99:83:ba:62:03:89:9e:fe:fe:d8:5a:fb:65:01:16:9c:ce:d3:
         57:92:a6:27:fc:d4:2b:c3:f0:bb:e3:61:23:9d:ce:bd:70:ad:
         c3:7b:99:ae:bd:9c:58:7e:9b:8e:72:20:7a:38:13:43:53:66:
         05:a9:38:74:aa:fd:83:81:db:52:1c:d4:98:b3:f2:6e:27:f9:
         25:32:0c:cf:0c:c2:e3:6d:5f:00:7f:5d:f5:13:24:b6:fe:32:
         ed:9c:93:cd:f6:90:27:bf:86:ae:37:cb:df:a7:37:1c:ea:75:
         fb:8a:5f:93:dd:6d:a1:22:41:71:65:41:7f:0c:f5:98:7d:7d:
         e0:64:58:70:88:ae:b5:7f:3d:10:22:fe:6d:5b:bc:7e:df:1b:
         f8:6b:3d:9e:dd:35:c6:e2:41:83:e2:44:71:cb:72:2a:ac:e5:
         c5:d9:60:84:bb:56:1f:e6:36:eb:cf:62:60:71:aa:56:95:d0:
         99:28:42:78:b7:d9:74:8f:5c:30:96:bf:47:20:5c:7f:5f:99:
         74:42:38:d0
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUH/aOMJK4n7VYWg73y5WGtVBlh4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4MDIyRkNEMTEyQzUwN0ZEQzFENzJBNDkzMTYwNUVG
NzRCQzgxNzAeFw0yNDA0MDQxMTQyNDRaFw0yNTA0MDMxMTQ3NDRaMDMxMTAvBgNV
BAMTKEZEQjMyQzNCMDE4OTJCNjc2MUQyOEYyNkE4MzcyMEU4NUJDQjZDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1xYIbZKHyc+HMit3vxvgZ+yh
M8RA8ebvYsUwvnf/0a/TfF0pa9Fa2UYDdbToiVJWODBvtAmk71X3a0F1eaJb9Zzr
V0OIvqnQIuIDWS1sbW3n8tD1EOhnVPTfDPRgIhHnFSWcvsEex+XICn3PPRDVBcgf
Utdp2qXxIfwD0flD8NPLmt2vK3ceZYZ+dP+4/HyVDCZS5p6jt02qc3MTd3H7oqLF
CmtLB6pYjxYkEoAqUrux0PGnDn7MDIgm8VBYOkS5NPtpFWp5IvVnwCedhlkR+BOw
Zfae5RacAbzYN0dQKzWWAS8uYwt1+3JzXlGU6oH7UgcbySVZ6KyZ9yAP6RqZAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU/bMsOwGJK2dh0o8mqDcg6FvLbFMwHwYDVR0j
BBgwFoAU/4Ai/NESxQf9wdcqSTFgXvdLyBcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw
LzQvRkY4MDIyRkNEMTEyQzUwN0ZEQzFENzJBNDkzMTYwNUVGNzRCQzgxNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GRjgwMjJGQ0QxMTJDNTA3RkRD
MUQ3MkE0OTMxNjA1RUY3NEJDODE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzQvMzEz
ODM3MmUzODM1MmUzMTM0MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMzMzAz
NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEu1WQMA0GCSqGSIb3DQEBCwUAA4IBAQA9PuOM+NywxNt9
vv0dBgmSIkVosexe2a6wDDo+Z6apRKWfDQRiF7HYo8ClX+ghaSMxc/qw5lWZg7pi
A4me/v7YWvtlARacztNXkqYn/NQrw/C742Ejnc69cK3De5muvZxYfpuOciB6OBND
U2YFqTh0qv2DgdtSHNSYs/JuJ/klMgzPDMLjbV8Af131EyS2/jLtnJPN9pAnv4au
N8vfpzcc6nX7il+T3W2hIkFxZUF/DPWYfX3gZFhwiK61fz0QIv5tW7x+3xv4az2e
3TXG4kGD4kRxy3IqrOXF2WCEu1Yf5jbrz2JgcapWldCZKEJ4t9l0j1wwlr9HIFx/
X5l0QjjQ
-----END CERTIFICATE-----
Generated at Wed Aug 14 02:00:09 2024 by rpki-client on console-fra.rpki-client.org