Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/0/3138372e34392e3136302e302f32322d3234203d3e20323730343639.roa
File:                     3138372e34392e3136302e302f32322d3234203d3e20323730343639.roa (raw, json)
Hash identifier:          8n+oTDWA2zuVSb4t8GxF3OyTpFtWNRyn0OubPQprY8E=
Subject key identifier:   D1:D5:CE:30:89:D8:19:AD:B8:ED:27:E6:F4:45:A1:14:D4:32:E5:2C
Certificate issuer:       /CN=B655BC220C7C20908CA98E00554E5C93B2815921
Certificate serial:       4F7CCE54C06C6AC607A14E1B67D8DD477CF0969B
Authority key identifier: B6:55:BC:22:0C:7C:20:90:8C:A9:8E:00:55:4E:5C:93:B2:81:59:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B655BC220C7C20908CA98E00554E5C93B2815921.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/0/3138372e34392e3136302e302f32322d3234203d3e20323730343639.roa
Signing time:             Thu 07 Mar 2024 22:57:13 +0000
ROA not before:           Thu 07 Mar 2024 22:52:13 +0000
ROA not after:            Thu 06 Mar 2025 22:57:13 +0000
asID:                     270469
IP address blocks:        187.49.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7c:ce:54:c0:6c:6a:c6:07:a1:4e:1b:67:d8:dd:47:7c:f0:96:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B655BC220C7C20908CA98E00554E5C93B2815921
        Validity
            Not Before: Mar  7 22:52:13 2024 GMT
            Not After : Mar  6 22:57:13 2025 GMT
        Subject: CN=D1D5CE3089D819ADB8ED27E6F445A114D432E52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:d6:73:0c:1d:1e:08:24:67:5d:d7:be:71:
                    2d:7b:1e:3a:67:f5:30:f3:e0:7f:ab:0e:8a:8a:b7:
                    8e:cb:32:cc:d1:e2:62:7d:7a:11:0b:2a:f4:8a:fa:
                    f4:6d:16:3d:0f:eb:ec:83:71:04:44:b0:72:d3:fe:
                    d4:fe:ba:1f:47:28:11:95:83:a0:d1:52:0a:72:4e:
                    d1:9e:55:1b:67:fe:aa:54:60:3d:a4:40:22:cc:fb:
                    72:cb:f1:9d:f0:f1:6a:0e:ee:5e:2a:c6:b8:9d:c5:
                    8e:5b:69:16:49:e3:f1:2c:46:75:7b:34:fa:60:ce:
                    a7:c1:49:c7:3e:0f:74:be:51:a2:08:e8:a8:fb:53:
                    fa:c7:9d:51:cd:3a:95:8f:dc:ea:a3:35:b7:1b:f8:
                    a9:ce:52:72:39:1b:b1:77:6d:5c:e0:12:7e:05:f7:
                    50:78:bc:46:ea:3b:7d:52:16:d7:03:bf:f6:d4:30:
                    6f:1c:b3:74:69:9a:76:3b:7c:cc:ec:12:1b:6c:21:
                    58:65:b0:66:01:97:50:a8:6b:aa:09:e6:17:db:87:
                    9c:a3:d5:f5:73:a1:bb:e8:0f:0e:1d:a7:8d:3c:b5:
                    37:5e:3b:4c:e2:e4:c9:74:a4:45:35:16:8e:b7:60:
                    f9:9a:8d:88:c8:95:3b:c4:28:08:2e:57:a4:a5:c0:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D5:CE:30:89:D8:19:AD:B8:ED:27:E6:F4:45:A1:14:D4:32:E5:2C
            X509v3 Authority Key Identifier:
                keyid:B6:55:BC:22:0C:7C:20:90:8C:A9:8E:00:55:4E:5C:93:B2:81:59:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/0/B655BC220C7C20908CA98E00554E5C93B2815921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B655BC220C7C20908CA98E00554E5C93B2815921.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/0/3138372e34392e3136302e302f32322d3234203d3e20323730343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:48:23:4a:e0:cb:44:0f:4a:96:f4:9d:5a:0e:b5:1b:db:ed:
         15:e2:8d:8b:54:59:bb:96:34:22:5c:88:43:c1:86:54:7d:43:
         6b:3f:c5:9f:f9:9a:ce:5f:42:87:d2:c5:94:33:9f:b6:35:5a:
         96:87:1a:2a:14:20:33:50:f4:f6:aa:e2:82:a8:32:14:aa:d9:
         82:25:79:49:6a:dc:f1:d1:03:e7:be:96:90:fd:4d:b5:a0:b0:
         25:8f:5f:48:d2:71:59:0d:77:52:b5:14:4f:66:9a:e7:fc:8a:
         a0:85:06:ac:15:ac:be:98:3c:d1:17:96:b4:79:ec:5c:29:d4:
         5e:e1:49:18:1b:c9:c4:bc:0c:64:fd:70:19:0d:f3:c4:21:db:
         a5:7e:58:28:f5:e1:a0:a5:d3:d3:6b:67:85:cb:cf:92:fb:28:
         0a:ba:0a:fd:47:ef:33:d5:f4:cf:b5:17:c4:4b:80:a7:74:ff:
         a9:42:a7:93:f9:03:7c:fb:fa:e2:ff:3b:ad:f2:4b:ba:75:cf:
         b9:86:88:81:e9:43:2d:9a:94:54:5e:88:cf:a6:6d:c0:35:08:
         38:c0:83:5e:00:fc:c1:64:49:71:06:de:e2:9a:21:b1:29:fe:
         d1:c3:6d:25:01:05:ee:c3:8a:04:85:da:68:7f:7a:1d:31:18:
         fe:c7:eb:e0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT3zOVMBsasYHoU4bZ9jdR3zwlpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY1NUJDMjIwQzdDMjA5MDhDQTk4RTAwNTU0RTVDOTNC
MjgxNTkyMTAeFw0yNDAzMDcyMjUyMTNaFw0yNTAzMDYyMjU3MTNaMDMxMTAvBgNV
BAMTKEQxRDVDRTMwODlEODE5QURCOEVEMjdFNkY0NDVBMTE0RDQzMkU1MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPdZzDB0eCCRnXde+cS17Hjpn
9TDz4H+rDoqKt47LMszR4mJ9ehELKvSK+vRtFj0P6+yDcQREsHLT/tT+uh9HKBGV
g6DRUgpyTtGeVRtn/qpUYD2kQCLM+3LL8Z3w8WoO7l4qxridxY5baRZJ4/EsRnV7
NPpgzqfBScc+D3S+UaII6Kj7U/rHnVHNOpWP3OqjNbcb+KnOUnI5G7F3bVzgEn4F
91B4vEbqO31SFtcDv/bUMG8cs3RpmnY7fMzsEhtsIVhlsGYBl1Coa6oJ5hfbh5yj
1fVzobvoDw4dp408tTdeO0zi5Ml0pEU1Fo63YPmajYjIlTvEKAguV6SlwFCTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0dXOMInYGa247Sfm9EWhFNQy5SwwHwYDVR0j
BBgwFoAUtlW8Igx8IJCMqY4AVU5ck7KBWSEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1d5dHc3ak5hRGhqOWtXd2Vha21oVjk4S0V3Tnl1bUxnYWZMS2Yxc1pV
WHAvMC9CNjU1QkMyMjBDN0MyMDkwOENBOThFMDA1NTRFNUM5M0IyODE1OTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I2NTVCQzIyMEM3QzIwOTA4
Q0E5OEUwMDU1NEU1QzkzQjI4MTU5MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dXeXR3N2pOYURoajlrV3dlYWttaFY5OEtFd055dW1MZ2FmTEtmMXNaVVhwLzAv
MzEzODM3MmUzNDM5MmUzMTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7MaAwDQYJKoZIhvcNAQELBQADggEBABZII0rg
y0QPSpb0nVoOtRvb7RXijYtUWbuWNCJciEPBhlR9Q2s/xZ/5ms5fQofSxZQzn7Y1
WpaHGioUIDNQ9Paq4oKoMhSq2YIleUlq3PHRA+e+lpD9TbWgsCWPX0jScVkNd1K1
FE9mmuf8iqCFBqwVrL6YPNEXlrR57Fwp1F7hSRgbycS8DGT9cBkN88Qh26V+WCj1
4aCl09NrZ4XLz5L7KAq6Cv1H7zPV9M+1F8RLgKd0/6lCp5P5A3z7+uL/O63yS7p1
z7mGiIHpQy2alFReiM+mbcA1CDjAg14A/MFkSXEG3uKaIbEp/tHDbSUBBe7DigSF
2mh/eh0xGP7H6+A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org