Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138372e34392e3132382e302f32302d3234203d3e203238313435.roa
File:                     3138372e34392e3132382e302f32302d3234203d3e203238313435.roa (raw, json)
Hash identifier:          IZiteXk96VxGMI1h4LFWrbjWnDs1pNAOovNRioEFwi8=
Subject key identifier:   07:E7:31:57:44:9B:1C:FB:73:DF:50:26:4F:03:92:FB:2C:3D:59:EB
Certificate issuer:       /CN=791B8D485A23826792942D3A94738A4EE7360CFA
Certificate serial:       09D60F7A5093AF9721FE9D4ABC664171E5416993
Authority key identifier: 79:1B:8D:48:5A:23:82:67:92:94:2D:3A:94:73:8A:4E:E7:36:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/791B8D485A23826792942D3A94738A4EE7360CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138372e34392e3132382e302f32302d3234203d3e203238313435.roa
Signing time:             Sun 29 Oct 2023 13:38:22 +0000
ROA not before:           Sun 29 Oct 2023 13:33:22 +0000
ROA not after:            Sun 27 Oct 2024 13:38:22 +0000
asID:                     28145
IP address blocks:        187.49.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d6:0f:7a:50:93:af:97:21:fe:9d:4a:bc:66:41:71:e5:41:69:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=791B8D485A23826792942D3A94738A4EE7360CFA
        Validity
            Not Before: Oct 29 13:33:22 2023 GMT
            Not After : Oct 27 13:38:22 2024 GMT
        Subject: CN=07E73157449B1CFB73DF50264F0392FB2C3D59EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:d7:f7:4b:7d:76:02:cb:e6:0e:59:80:4b:
                    71:d6:53:83:34:cd:a5:bb:d9:04:0e:99:8a:8c:15:
                    c3:e4:69:31:91:f4:88:77:ab:d1:35:52:e2:2b:e9:
                    9e:c7:8c:b3:32:67:16:9b:f3:da:6a:1c:3b:ba:e2:
                    30:ec:1d:92:d1:2c:a9:c1:2e:b1:b1:fd:0d:82:ae:
                    97:9f:ea:a8:07:c0:c9:d1:d9:c6:86:84:b5:20:7b:
                    b7:e0:2b:9f:f7:61:0d:f2:fb:e7:a0:17:29:93:b3:
                    ad:72:e3:4a:d6:38:61:11:59:8c:74:9a:b2:8d:6a:
                    2a:03:36:29:a0:cc:27:18:86:3c:66:e6:5d:9c:05:
                    cb:8a:ca:68:7a:af:01:1a:9d:80:5c:27:cb:02:74:
                    4c:c0:4a:f8:58:df:49:cd:0d:c0:ae:dc:d7:4e:29:
                    ba:ab:0b:2b:6a:de:a3:d2:d2:be:dd:46:53:40:ff:
                    1c:21:3d:6d:3e:7e:65:d6:20:8e:b3:80:6c:4d:2b:
                    8c:1b:62:2c:43:f1:01:8e:d2:8c:90:f9:bf:c9:f2:
                    62:d9:cb:9d:2c:5e:0c:ab:12:cd:f0:d5:95:8e:ed:
                    44:b1:aa:b2:27:eb:e4:2b:e6:bc:c4:cc:73:01:da:
                    a4:0d:c9:4b:46:41:b6:33:9a:a6:9c:7c:f9:7b:3a:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E7:31:57:44:9B:1C:FB:73:DF:50:26:4F:03:92:FB:2C:3D:59:EB
            X509v3 Authority Key Identifier:
                keyid:79:1B:8D:48:5A:23:82:67:92:94:2D:3A:94:73:8A:4E:E7:36:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/791B8D485A23826792942D3A94738A4EE7360CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/791B8D485A23826792942D3A94738A4EE7360CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138372e34392e3132382e302f32302d3234203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:34:73:e9:cd:51:46:88:d0:66:83:39:92:ab:37:0c:1a:
         f7:2a:a0:fa:2b:90:eb:99:fe:9f:e1:62:37:f5:80:9e:3c:e7:
         10:de:18:94:a7:20:81:14:b7:dc:c5:f0:76:86:9f:d8:f4:b3:
         2b:64:1b:51:9b:b2:b6:10:a4:11:e1:9f:bb:3f:2b:66:31:59:
         ce:49:5f:24:15:07:5e:83:d8:e5:96:74:99:dc:24:0a:5a:bf:
         77:3c:b4:7e:4d:c5:92:26:97:6e:ec:ab:c6:cf:cb:40:89:eb:
         dc:bc:9e:28:de:2b:0c:9c:8b:20:5b:b3:da:be:98:3b:57:9a:
         1e:e1:7c:10:aa:1c:9d:e6:1c:0c:54:a4:1a:41:b4:5d:aa:10:
         fa:63:06:3e:95:2a:f4:a9:c6:28:d5:75:23:16:ac:bd:e5:fd:
         96:f9:8a:12:29:84:79:4e:6e:6e:90:56:1e:d2:14:ce:50:99:
         57:39:5e:03:f7:0d:9e:00:95:53:5b:f6:be:7c:69:27:23:53:
         04:e0:a8:06:18:de:af:a3:70:76:cd:a6:07:f6:3c:c4:a6:35:
         95:da:06:0d:fb:44:37:f4:38:6e:de:fd:99:2f:c1:19:58:ef:
         89:c7:a8:a5:f9:dd:1d:d5:d2:14:be:21:c5:54:4c:fc:e1:5d:
         80:1a:63:2e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCdYPelCTr5ch/p1KvGZBceVBaZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkxQjhENDg1QTIzODI2NzkyOTQyRDNBOTQ3MzhBNEVF
NzM2MENGQTAeFw0yMzEwMjkxMzMzMjJaFw0yNDEwMjcxMzM4MjJaMDMxMTAvBgNV
BAMTKDA3RTczMTU3NDQ5QjFDRkI3M0RGNTAyNjRGMDM5MkZCMkMzRDU5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrx9f3S312AsvmDlmAS3HWU4M0
zaW72QQOmYqMFcPkaTGR9Ih3q9E1UuIr6Z7HjLMyZxab89pqHDu64jDsHZLRLKnB
LrGx/Q2Crpef6qgHwMnR2caGhLUge7fgK5/3YQ3y++egFymTs61y40rWOGERWYx0
mrKNaioDNimgzCcYhjxm5l2cBcuKymh6rwEanYBcJ8sCdEzASvhY30nNDcCu3NdO
KbqrCytq3qPS0r7dRlNA/xwhPW0+fmXWII6zgGxNK4wbYixD8QGO0oyQ+b/J8mLZ
y50sXgyrEs3w1ZWO7USxqrIn6+Qr5rzEzHMB2qQNyUtGQbYzmqacfPl7OnoFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUB+cxV0SbHPtz31AmTwOS+yw9WeswHwYDVR0j
BBgwFoAUeRuNSFojgmeSlC06lHOKTuc2DPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wx
RVUvMC83OTFCOEQ0ODVBMjM4MjY3OTI5NDJEM0E5NDczOEE0RUU3MzYwQ0ZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5MUI4RDQ4NUEyMzgyNjc5
Mjk0MkQzQTk0NzM4QTRFRTczNjBDRkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dXRmhtN2hNaWp1ejNEWmtRMlJ0NDVmbWVuQ1g0MjRiajluTlBaMndMMUVVLzAv
MzEzODM3MmUzNDM5MmUzMTMyMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuzGAMA0GCSqGSIb3DQEBCwUAA4IBAQBmPjRz6c1R
RojQZoM5kqs3DBr3KqD6K5Drmf6f4WI39YCePOcQ3hiUpyCBFLfcxfB2hp/Y9LMr
ZBtRm7K2EKQR4Z+7PytmMVnOSV8kFQdeg9jllnSZ3CQKWr93PLR+TcWSJpdu7KvG
z8tAievcvJ4o3isMnIsgW7Pavpg7V5oe4XwQqhyd5hwMVKQaQbRdqhD6YwY+lSr0
qcYo1XUjFqy95f2W+YoSKYR5Tm5ukFYe0hTOUJlXOV4D9w2eAJVTW/a+fGknI1ME
4KgGGN6vo3B2zaYH9jzEpjWV2gYN+0Q39Dhu3v2ZL8EZWO+Jx6il+d0d1dIUviHF
VEz84V2AGmMu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org