Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa
File:                     3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa (raw, json)
Hash identifier:          wOpukV8RW583fZ7vDX+G1phDnnsMO1vQo9lyD1Wo/SA=
Subject key identifier:   D8:77:A3:61:6B:88:C4:FB:24:41:D7:B4:6F:AE:CE:BD:DD:35:29:01
Certificate issuer:       /CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
Certificate serial:       19988B1CABFC49C42367C9A261CBD7FFBCF2A3F8
Authority key identifier: B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa
Signing time:             Fri 13 Oct 2023 14:44:11 +0000
ROA not before:           Fri 13 Oct 2023 14:39:11 +0000
ROA not after:            Fri 11 Oct 2024 14:44:11 +0000
asID:                     61796
IP address blocks:        201.159.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:98:8b:1c:ab:fc:49:c4:23:67:c9:a2:61:cb:d7:ff:bc:f2:a3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
        Validity
            Not Before: Oct 13 14:39:11 2023 GMT
            Not After : Oct 11 14:44:11 2024 GMT
        Subject: CN=D877A3616B88C4FB2441D7B46FAECEBDDD352901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:cc:3d:29:b8:58:d9:30:9d:51:12:de:42:
                    e0:3a:d3:ba:b3:44:24:10:6a:6d:73:6c:20:6b:a6:
                    83:fc:25:b2:1f:c3:fc:8a:ee:05:26:69:0a:cf:77:
                    53:08:1c:4e:7d:40:b2:06:ad:58:04:6c:12:a6:88:
                    34:99:2b:10:73:be:55:a5:44:25:9a:22:cf:c0:e7:
                    01:86:b7:ca:42:d4:fb:48:d0:4c:d4:e7:bb:a9:64:
                    d6:61:0e:0e:a1:c3:ab:cb:a4:c2:8e:ec:e6:5a:96:
                    f9:e4:13:1b:9e:74:98:cc:a4:6f:3f:1d:16:0a:dd:
                    c4:bb:b9:c4:82:ab:3d:69:05:63:0c:b5:8f:85:c5:
                    e3:c2:b3:e2:6e:7b:15:e6:ba:23:52:06:d3:2a:a1:
                    66:6f:e9:99:50:8c:38:ac:f8:64:ad:da:ff:09:ae:
                    8b:66:bf:57:11:75:73:b6:82:d0:a6:26:e7:13:9d:
                    51:71:e2:9c:fc:49:c2:d9:a7:8b:b1:32:54:10:9b:
                    24:3e:08:91:18:cd:be:75:ec:b0:13:91:a9:4d:40:
                    7c:19:a9:fc:89:f1:15:4f:99:db:c2:df:20:41:bc:
                    0f:43:29:eb:93:7a:14:d2:3e:41:c5:1e:83:98:20:
                    ff:b0:c8:0c:a5:f2:94:df:5d:0e:76:37:89:bf:9e:
                    10:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:77:A3:61:6B:88:C4:FB:24:41:D7:B4:6F:AE:CE:BD:DD:35:29:01
            X509v3 Authority Key Identifier:
                keyid:B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:6c:75:72:a9:28:87:b2:bf:47:71:d4:30:f0:67:28:07:
         23:e2:ff:40:aa:c4:f5:fe:f4:8a:9d:d3:e2:c2:08:f6:a0:a0:
         dd:23:5a:69:b7:2a:47:d2:af:f1:ff:c5:37:59:71:9e:f4:69:
         a8:7d:d6:3f:1e:ce:76:60:10:08:e0:f8:5b:cd:7a:e2:88:f2:
         56:a9:44:5b:3e:db:f7:54:19:b1:e1:18:96:08:d0:a0:8c:a1:
         4c:2a:85:1e:75:14:1b:f9:64:d0:f7:20:3a:ad:ca:2c:33:20:
         c3:86:53:a9:96:07:08:2e:c7:0b:0a:d3:a5:7f:2e:9a:a9:89:
         8f:d0:4b:1d:29:1b:8d:ed:4a:7a:86:ca:e3:f1:20:0b:57:8b:
         37:77:5c:d1:0d:43:a0:ff:ac:4c:a5:0e:1e:2d:74:a0:d5:d3:
         e6:b8:8b:c0:c3:5a:87:66:c7:b8:12:ba:0f:e4:03:44:4b:9c:
         82:77:2f:db:cc:4d:6e:bd:64:2e:38:ff:79:6d:fb:c4:b1:d8:
         21:26:bc:ab:75:1b:90:3c:8d:34:31:c2:bc:db:e0:07:00:34:
         82:ff:7a:ec:43:ce:85:0b:bb:ef:ff:3a:54:37:44:e5:16:8e:
         62:67:29:3d:83:24:05:a9:1b:dd:4b:b3:44:e8:08:71:c6:25:
         63:f9:9b:3f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGZiLHKv8ScQjZ8miYcvX/7zyo/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcwMDREMjdBNkI2NkZCRjkzMkY3M0RBOTkxRTc5MDBF
RDY3MzJGQzAeFw0yMzEwMTMxNDM5MTFaFw0yNDEwMTExNDQ0MTFaMDMxMTAvBgNV
BAMTKEQ4NzdBMzYxNkI4OEM0RkIyNDQxRDdCNDZGQUVDRUJEREQzNTI5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3cw9KbhY2TCdURLeQuA607qz
RCQQam1zbCBrpoP8JbIfw/yK7gUmaQrPd1MIHE59QLIGrVgEbBKmiDSZKxBzvlWl
RCWaIs/A5wGGt8pC1PtI0EzU57upZNZhDg6hw6vLpMKO7OZalvnkExuedJjMpG8/
HRYK3cS7ucSCqz1pBWMMtY+FxePCs+JuexXmuiNSBtMqoWZv6ZlQjDis+GSt2v8J
rotmv1cRdXO2gtCmJucTnVFx4pz8ScLZp4uxMlQQmyQ+CJEYzb517LATkalNQHwZ
qfyJ8RVPmdvC3yBBvA9DKeuTehTSPkHFHoOYIP+wyAyl8pTfXQ52N4m/nhBJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2HejYWuIxPskQde0b67Ovd01KQEwHwYDVR0j
BBgwFoAUtwBNJ6a2b7+TL3PamR55AO1nMvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFNYVd1Ymtuc1dFZnc3dkZoSHp3d2R1NHlxZGszbk1RUkhTaHc1NlVu
bWMvMC9CNzAwNEQyN0E2QjY2RkJGOTMyRjczREE5OTFFNzkwMEVENjczMkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3MDA0RDI3QTZCNjZGQkY5
MzJGNzNEQTk5MUU3OTAwRUQ2NzMyRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxTWFXdWJrbnNXRWZ3N3ZGaEh6d3dkdTR5cWRrM25NUVJIU2h3NTZVbm1jLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJn7YwDQYJKoZIhvcNAQELBQADggEBAKKMbHVy
qSiHsr9HcdQw8GcoByPi/0CqxPX+9Iqd0+LCCPagoN0jWmm3KkfSr/H/xTdZcZ70
aah91j8eznZgEAjg+FvNeuKI8lapRFs+2/dUGbHhGJYI0KCMoUwqhR51FBv5ZND3
IDqtyiwzIMOGU6mWBwguxwsK06V/LpqpiY/QSx0pG43tSnqGyuPxIAtXizd3XNEN
Q6D/rEylDh4tdKDV0+a4i8DDWodmx7gSug/kA0RLnIJ3L9vMTW69ZC44/3lt+8Sx
2CEmvKt1G5A8jTQxwrzb4AcANIL/euxDzoULu+//OlQ3ROUWjmJnKT2DJAWpG91L
s0ToCHHGJWP5mz8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org