Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32322d3234203d3e20323636363531.roa
File:                     3132382e3230312e34302e302f32322d3234203d3e20323636363531.roa (raw, json)
Hash identifier:          fk5SlvhDY62RxHyeveEcS3NumwdJmdoK5FpMY6t7/zo=
Subject key identifier:   78:22:C2:6C:80:B6:66:FB:86:06:34:40:DD:B3:03:4C:21:D4:72:52
Certificate issuer:       /CN=D51C48140E806B1E451F57E5BDF376BEF4308989
Certificate serial:       6257B1E6CF84824B935360FBF4CE144339FE84B8
Authority key identifier: D5:1C:48:14:0E:80:6B:1E:45:1F:57:E5:BD:F3:76:BE:F4:30:89:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D51C48140E806B1E451F57E5BDF376BEF4308989.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32322d3234203d3e20323636363531.roa
Signing time:             Wed 15 Sep 2021 18:32:00 +0000
ROA not before:           Wed 15 Sep 2021 18:27:00 +0000
ROA not after:            Wed 14 Sep 2022 18:32:00 +0000
asID:                     266651
IP address blocks:        128.201.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:57:b1:e6:cf:84:82:4b:93:53:60:fb:f4:ce:14:43:39:fe:84:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D51C48140E806B1E451F57E5BDF376BEF4308989
        Validity
            Not Before: Sep 15 18:27:00 2021 GMT
            Not After : Sep 14 18:32:00 2022 GMT
        Subject: CN=3082010A0282010100B5C91489B96824C1E8A54AD57706A9B83E14A7C693CC9FCEB7AFDDE4DD928E8F8D7912941CCFE14F801F8B6410362F1A5C19BF1C556AFC6A929AF3674E67390D4CFA6C29D4472AAD72F5C0AE77DAB6D2C11878CF303729DD9FBC566B1D01AA1C490042AC702EFEBB17E0D16B4101982AA9FA8475A4E2F9D38A0CB6DA51C06DD317A02FB2F01436AC45C0654474EC5E1B869C07CFDC0DDB7384CF09E6164A98E5D379AFBC470FDCDD76C2579B3B579163B2295BDA8B667126D150991E43CAE22243929F2958E0DA0806E1A43FE639CE646092F6BF2FB44AF484E8EF2FDF5563B455FE7A2AF0B0F69B69E7D5A19DE298841740AB4DBB8209E5B7EF557BC497E7970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:14:89:b9:68:24:c1:e8:a5:4a:d5:77:06:
                    a9:b8:3e:14:a7:c6:93:cc:9f:ce:b7:af:dd:e4:dd:
                    92:8e:8f:8d:79:12:94:1c:cf:e1:4f:80:1f:8b:64:
                    10:36:2f:1a:5c:19:bf:1c:55:6a:fc:6a:92:9a:f3:
                    67:4e:67:39:0d:4c:fa:6c:29:d4:47:2a:ad:72:f5:
                    c0:ae:77:da:b6:d2:c1:18:78:cf:30:37:29:dd:9f:
                    bc:56:6b:1d:01:aa:1c:49:00:42:ac:70:2e:fe:bb:
                    17:e0:d1:6b:41:01:98:2a:a9:fa:84:75:a4:e2:f9:
                    d3:8a:0c:b6:da:51:c0:6d:d3:17:a0:2f:b2:f0:14:
                    36:ac:45:c0:65:44:74:ec:5e:1b:86:9c:07:cf:dc:
                    0d:db:73:84:cf:09:e6:16:4a:98:e5:d3:79:af:bc:
                    47:0f:dc:dd:76:c2:57:9b:3b:57:91:63:b2:29:5b:
                    da:8b:66:71:26:d1:50:99:1e:43:ca:e2:22:43:92:
                    9f:29:58:e0:da:08:06:e1:a4:3f:e6:39:ce:64:60:
                    92:f6:bf:2f:b4:4a:f4:84:e8:ef:2f:df:55:63:b4:
                    55:fe:7a:2a:f0:b0:f6:9b:69:e7:d5:a1:9d:e2:98:
                    84:17:40:ab:4d:bb:82:09:e5:b7:ef:55:7b:c4:97:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:22:C2:6C:80:B6:66:FB:86:06:34:40:DD:B3:03:4C:21:D4:72:52
            X509v3 Authority Key Identifier:
                keyid:D5:1C:48:14:0E:80:6B:1E:45:1F:57:E5:BD:F3:76:BE:F4:30:89:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/D51C48140E806B1E451F57E5BDF376BEF4308989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D51C48140E806B1E451F57E5BDF376BEF4308989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32322d3234203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:b1:86:8c:8a:1f:0f:42:55:00:5a:f4:fe:8b:4c:00:01:
         c2:8e:29:48:96:42:9f:3e:d0:9e:ce:da:c4:cc:19:80:af:bb:
         79:3f:cf:01:82:8e:be:d1:f5:f3:76:82:fb:3f:77:5d:a0:29:
         6b:62:d5:59:91:da:b1:95:c9:71:36:a7:48:6e:9d:fd:9e:c9:
         1a:f4:33:9b:d3:f3:48:15:3f:c5:66:47:3b:94:24:15:54:4d:
         41:98:10:6c:52:db:ba:2d:7a:d7:cf:52:17:f3:bf:3d:a3:66:
         08:32:5c:88:77:e8:be:65:5e:09:55:03:38:04:e8:bd:4f:4c:
         ae:c1:f4:e1:27:74:a0:fc:41:d6:d3:36:95:57:46:d3:75:0e:
         c5:5f:15:42:57:d2:80:77:1e:3d:1c:56:85:28:80:46:d2:70:
         94:9d:a7:25:7e:69:b3:f1:62:ea:94:a8:e6:78:08:75:71:a1:
         6d:77:3a:06:63:16:7f:92:00:ca:16:b0:5d:bb:4d:fb:ab:2e:
         d0:4f:23:fc:bd:da:3c:fb:56:f6:2b:45:23:1d:72:05:51:55:
         a9:38:8f:82:c8:f1:2f:05:db:a4:58:06:62:8f:ba:92:6e:c7:
         3e:a9:1a:92:cd:ed:65:fb:0e:fb:34:16:f3:ef:3a:bb:a9:c5:
         6a:a2:cf:32
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUYlex5s+EgkuTU2D79M4UQzn+hLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUxQzQ4MTQwRTgwNkIxRTQ1MUY1N0U1QkRGMzc2QkVG
NDMwODk4OTAeFw0yMTA5MTUxODI3MDBaFw0yMjA5MTQxODMyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjVDOTE0ODlCOTY4MjRDMUU4
QTU0QUQ1NzcwNkE5QjgzRTE0QTdDNjkzQ0M5RkNFQjdBRkRERTRERDkyOEU4RjhE
NzkxMjk0MUNDRkUxNEY4MDFGOEI2NDEwMzYyRjFBNUMxOUJGMUM1NTZBRkM2QTky
OUFGMzY3NEU2NzM5MEQ0Q0ZBNkMyOUQ0NDcyQUFENzJGNUMwQUU3N0RBQjZEMkMx
MTg3OENGMzAzNzI5REQ5RkJDNTY2QjFEMDFBQTFDNDkwMDQyQUM3MDJFRkVCQjE3
RTBEMTZCNDEwMTk4MkFBOUZBODQ3NUE0RTJGOUQzOEEwQ0I2REE1MUMwNkREMzE3
QTAyRkIyRjAxNDM2QUM0NUMwNjU0NDc0RUM1RTFCODY5QzA3Q0ZEQzBEREI3Mzg0
Q0YwOUU2MTY0QTk4RTVEMzc5QUZCQzQ3MEZEQ0RENzZDMjU3OUIzQjU3OTE2M0Iy
Mjk1QkRBOEI2NjcxMjZEMTUwOTkxRTQzQ0FFMjIyNDM5MjlGMjk1OEUwREEwODA2
RTFBNDNGRTYzOUNFNjQ2MDkyRjZCRjJGQjQ0QUY0ODRFOEVGMkZERjU1NjNCNDU1
RkU3QTJBRjBCMEY2OUI2OUU3RDVBMTlERTI5ODg0MTc0MEFCNERCQjgyMDlFNUI3
RUY1NTdCQzQ5N0U3OTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtckUibloJMHopUrVdwapuD4Up8aTzJ/Ot6/d5N2Sjo+NeRKUHM/h
T4Afi2QQNi8aXBm/HFVq/GqSmvNnTmc5DUz6bCnURyqtcvXArnfattLBGHjPMDcp
3Z+8VmsdAaocSQBCrHAu/rsX4NFrQQGYKqn6hHWk4vnTigy22lHAbdMXoC+y8BQ2
rEXAZUR07F4bhpwHz9wN23OEzwnmFkqY5dN5r7xHD9zddsJXmztXkWOyKVvai2Zx
JtFQmR5DyuIiQ5KfKVjg2ggG4aQ/5jnOZGCS9r8vtEr0hOjvL99VY7RV/noq8LD2
m2nn1aGd4piEF0CrTbuCCeW371V7xJfnlwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHgiwmyAtmb7hgY0QN2zA0wh1HJSMB8GA1UdIwQYMBaAFNUcSBQOgGseRR9X5b3z
dr70MImJMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VwQTdFOFYxeXBtS2pH
eTVnYks4WUpNUGl3eDJteG1UNE03UG1MeFVpSGlQLzAvRDUxQzQ4MTQwRTgwNkIx
RTQ1MUY1N0U1QkRGMzc2QkVGNDMwODk4OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENTFDNDgxNDBFODA2QjFFNDUxRjU3RTVCREYzNzZCRUY0MzA4
OTg5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FcEE3RThWMXlwbUtqR3k1Z2JL
OFlKTVBpd3gybXhtVDRNN1BtTHhVaUhpUC8wLzMxMzIzODJlMzIzMDMxMmUzNDMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzYzNTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
gMkoMA0GCSqGSIb3DQEBCwUAA4IBAQBvL7GGjIofD0JVAFr0/otMAAHCjilIlkKf
PtCeztrEzBmAr7t5P88Bgo6+0fXzdoL7P3ddoClrYtVZkdqxlclxNqdIbp39nska
9DOb0/NIFT/FZkc7lCQVVE1BmBBsUtu6LXrXz1IX8789o2YIMlyId+i+ZV4JVQM4
BOi9T0yuwfThJ3Sg/EHW0zaVV0bTdQ7FXxVCV9KAdx49HFaFKIBG0nCUnaclfmmz
8WLqlKjmeAh1caFtdzoGYxZ/kgDKFrBdu037qy7QTyP8vdo8+1b2K0UjHXIFUVWp
OI+CyPEvBdukWAZij7qSbsc+qRqSze1l+w77NBbz7zq7qcVqos8y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org