Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32312d3231203d3e203238313238.roa
File:                     3138372e31392e34382e302f32312d3231203d3e203238313238.roa (raw, json)
Hash identifier:          48u7JwsPi8bjz6Tz9OXtgd/6Db02Dhk98XNTq55BCoc=
Subject key identifier:   73:75:AC:AF:AC:71:1C:56:BF:83:03:F9:9C:DB:7E:D7:25:0B:B0:05
Certificate issuer:       /CN=4C6908F71A052F14E85F80A052AB5AF7B61D6E2A
Certificate serial:       7E5D3D9635556774864070F529E59E4992FB5F42
Authority key identifier: 4C:69:08:F7:1A:05:2F:14:E8:5F:80:A0:52:AB:5A:F7:B6:1D:6E:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C6908F71A052F14E85F80A052AB5AF7B61D6E2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32312d3231203d3e203238313238.roa
Signing time:             Fri 04 Nov 2022 20:28:53 +0000
ROA not before:           Fri 04 Nov 2022 20:23:53 +0000
ROA not after:            Fri 03 Nov 2023 20:28:53 +0000
asID:                     28128
IP address blocks:        187.19.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5d:3d:96:35:55:67:74:86:40:70:f5:29:e5:9e:49:92:fb:5f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C6908F71A052F14E85F80A052AB5AF7B61D6E2A
        Validity
            Not Before: Nov  4 20:23:53 2022 GMT
            Not After : Nov  3 20:28:53 2023 GMT
        Subject: CN=7375ACAFAC711C56BF8303F99CDB7ED7250BB005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:ba:92:f9:fe:88:43:44:e0:ce:f4:2f:46:
                    95:ee:c6:68:7d:f0:7b:40:fb:31:13:ba:8e:d0:9b:
                    bb:e0:15:98:87:3f:31:b9:9d:e3:74:c5:ee:bd:52:
                    0f:01:2a:39:22:cb:13:c6:08:a7:33:43:0d:ac:9c:
                    97:f7:89:5a:0a:a3:c8:cc:34:7d:15:60:0d:db:d4:
                    2e:1e:0a:ad:2b:32:04:03:4f:3c:98:2a:4d:06:94:
                    0f:ce:73:f1:1f:b4:e5:09:cb:dd:0c:13:c0:90:bc:
                    82:31:6c:56:09:c5:e3:e2:8d:74:aa:f5:12:bb:01:
                    e0:97:1a:5c:5d:7f:d5:a7:c2:9b:c1:e0:67:d1:1c:
                    62:11:fe:45:72:69:37:78:21:6c:f0:bf:85:a2:1c:
                    c4:b2:04:dc:12:0d:86:87:0c:fa:aa:48:b1:d2:03:
                    8a:ae:af:c8:23:f3:18:47:e7:14:c9:66:09:12:19:
                    3c:99:99:83:e3:df:77:42:15:78:73:55:bf:a2:c6:
                    10:0c:24:4c:3a:f1:e7:83:54:30:84:40:5a:6b:08:
                    16:47:45:6b:5d:9a:26:88:3e:31:28:f3:b6:4c:20:
                    2d:50:50:e8:62:97:22:72:4c:54:08:11:52:77:b1:
                    6b:82:e3:a8:8a:37:84:70:b3:5f:6b:8d:74:11:b7:
                    5b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:75:AC:AF:AC:71:1C:56:BF:83:03:F9:9C:DB:7E:D7:25:0B:B0:05
            X509v3 Authority Key Identifier:
                keyid:4C:69:08:F7:1A:05:2F:14:E8:5F:80:A0:52:AB:5A:F7:B6:1D:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/4C6908F71A052F14E85F80A052AB5AF7B61D6E2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C6908F71A052F14E85F80A052AB5AF7B61D6E2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32312d3231203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:7f:9e:a7:0d:71:62:8f:50:68:53:bc:82:62:34:7b:08:29:
         d3:ea:cd:75:17:22:b9:eb:2b:11:0c:1d:c9:03:c0:d7:2e:dc:
         66:4c:64:9f:df:e1:71:47:3c:53:ad:fb:16:5d:2d:0a:79:9b:
         ec:53:c6:93:aa:73:3e:19:59:46:3f:55:d6:78:1c:9a:8b:4f:
         4e:dc:04:d9:78:1c:ab:69:05:18:79:9d:30:2e:0c:1a:c3:d7:
         86:02:48:da:c7:36:c9:90:80:67:ec:d5:c0:fb:63:85:57:3d:
         98:16:89:db:a1:bf:2b:d1:91:9c:19:48:fd:9b:3f:6f:f8:03:
         53:88:f6:2e:1e:80:4b:86:25:87:c6:96:35:f7:ac:aa:e4:6b:
         37:b3:60:79:aa:4c:17:33:2a:ba:71:31:77:0c:bb:ae:9c:07:
         5d:dd:85:22:8d:c6:45:a0:bf:df:8e:c5:38:9d:b3:22:e5:a8:
         bb:ad:5d:9b:c0:5e:d8:c8:cb:4b:34:bd:00:52:eb:b0:6d:5d:
         01:c2:2e:3c:08:d0:2c:c5:f0:3b:3e:c0:06:f7:66:80:68:ea:
         91:32:c8:ad:f7:22:e3:cc:75:12:bd:7f:55:d6:bf:3e:46:8b:
         bf:b0:1f:6b:dd:40:1b:8b:54:8a:93:7d:16:7f:b7:68:27:4e:
         e9:e0:75:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfl09ljVVZ3SGQHD1KeWeSZL7X0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM2OTA4RjcxQTA1MkYxNEU4NUY4MEEwNTJBQjVBRjdC
NjFENkUyQTAeFw0yMjExMDQyMDIzNTNaFw0yMzExMDMyMDI4NTNaMDMxMTAvBgNV
BAMTKDczNzVBQ0FGQUM3MTFDNTZCRjgzMDNGOTlDREI3RUQ3MjUwQkIwMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEArqS+f6IQ0TgzvQvRpXuxmh9
8HtA+zETuo7Qm7vgFZiHPzG5neN0xe69Ug8BKjkiyxPGCKczQw2snJf3iVoKo8jM
NH0VYA3b1C4eCq0rMgQDTzyYKk0GlA/Oc/EftOUJy90ME8CQvIIxbFYJxePijXSq
9RK7AeCXGlxdf9WnwpvB4GfRHGIR/kVyaTd4IWzwv4WiHMSyBNwSDYaHDPqqSLHS
A4qur8gj8xhH5xTJZgkSGTyZmYPj33dCFXhzVb+ixhAMJEw68eeDVDCEQFprCBZH
RWtdmiaIPjEo87ZMIC1QUOhilyJyTFQIEVJ3sWuC46iKN4Rws19rjXQRt1sTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUc3Wsr6xxHFa/gwP5nNt+1yULsAUwHwYDVR0j
BBgwFoAUTGkI9xoFLxToX4CgUqta97YdbiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWpzdzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIx
OUQvMC80QzY5MDhGNzFBMDUyRjE0RTg1RjgwQTA1MkFCNUFGN0I2MUQ2RTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDNjkwOEY3MUEwNTJGMTRF
ODVGODBBMDUyQUI1QUY3QjYxRDZFMkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vqc3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAv
MzEzODM3MmUzMTM5MmUzNDM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzODMx
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7sTMDANBgkqhkiG9w0BAQsFAAOCAQEATX+epw1xYo9Q
aFO8gmI0ewgp0+rNdRciuesrEQwdyQPA1y7cZkxkn9/hcUc8U637Fl0tCnmb7FPG
k6pzPhlZRj9V1ngcmotPTtwE2Xgcq2kFGHmdMC4MGsPXhgJI2sc2yZCAZ+zVwPtj
hVc9mBaJ26G/K9GRnBlI/Zs/b/gDU4j2Lh6AS4Ylh8aWNfesquRrN7NgeapMFzMq
unExdwy7rpwHXd2FIo3GRaC/347FOJ2zIuWou61dm8Be2MjLSzS9AFLrsG1dAcIu
PAjQLMXwOz7ABvdmgGjqkTLIrfci48x1Er1/Vda/PkaLv7Afa91AG4tUipN9Fn+3
aCdO6eB1QA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org