Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e3132302e3132382e302f32302d3234203d3e20323632323732.roa
File:                     3138372e3132302e3132382e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          VKTuoXzU3xsXcOOiZse5S/v2nKVVL1mxXGUXn0K6sxg=
Subject key identifier:   CA:37:F5:88:E8:AE:52:54:63:84:9B:B2:82:D8:B0:1F:96:F9:03:6A
Certificate issuer:       /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial:       79B452E5E6DFAB0086DD625F73E11D70691DCDDF
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e3132302e3132382e302f32302d3234203d3e20323632323732.roa
Signing time:             Mon 20 May 2024 13:11:28 +0000
ROA not before:           Mon 20 May 2024 13:06:28 +0000
ROA not after:            Mon 19 May 2025 13:11:28 +0000
asID:                     262272
IP address blocks:        187.120.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b4:52:e5:e6:df:ab:00:86:dd:62:5f:73:e1:1d:70:69:1d:cd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
        Validity
            Not Before: May 20 13:06:28 2024 GMT
            Not After : May 19 13:11:28 2025 GMT
        Subject: CN=CA37F588E8AE525463849BB282D8B01F96F9036A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:90:5c:f1:f4:72:28:26:ff:32:69:af:4c:
                    53:0a:27:83:ba:35:37:53:8a:1d:4d:a2:9b:30:33:
                    aa:ec:13:45:1f:f1:cb:2c:66:8a:98:80:21:be:86:
                    b7:70:dd:04:c9:63:21:24:8c:7d:7d:8e:e0:c2:a9:
                    45:a1:0e:2b:57:b1:2b:bf:41:6c:2f:4f:0d:97:2f:
                    f1:db:cb:1d:9b:82:a8:04:8a:d6:a2:72:05:50:86:
                    aa:22:46:05:fa:55:3e:db:e4:aa:4c:46:9a:c0:ec:
                    d2:8d:a2:5f:a3:5e:b4:9f:a4:23:b6:65:44:bf:a3:
                    dd:9e:0e:7a:76:4f:a0:0e:fc:8f:21:54:08:1d:36:
                    5d:be:b0:e7:9e:0b:44:aa:32:48:9b:8c:dc:b2:14:
                    77:32:fa:23:ec:a5:85:af:95:98:3c:4b:bc:66:30:
                    38:03:e3:02:81:58:e4:c0:38:27:e6:4d:d4:8b:c3:
                    c1:33:72:aa:83:d8:a3:1d:05:85:64:03:56:f9:26:
                    4c:e7:a8:98:84:73:48:2d:94:f0:94:23:dc:58:51:
                    58:77:0c:68:f4:9a:40:e1:9f:48:21:39:7a:6d:6e:
                    d2:12:97:37:ec:71:de:8d:ce:eb:b3:95:bb:17:27:
                    a5:f3:68:b1:66:39:63:ab:d5:05:94:30:b4:68:7c:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:37:F5:88:E8:AE:52:54:63:84:9B:B2:82:D8:B0:1F:96:F9:03:6A
            X509v3 Authority Key Identifier:
                keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e3132302e3132382e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:40:8e:6f:a1:96:47:b5:5d:7c:01:b1:0b:5a:86:69:ad:54:
         94:a9:9b:73:af:a2:2f:4d:11:9b:18:74:6e:2e:d8:a3:28:29:
         84:8f:ba:89:2c:71:fc:3f:a9:b7:b0:44:6c:99:05:a6:a9:5d:
         16:4a:18:82:5f:30:e1:81:d4:dc:16:ac:c7:de:ae:2e:56:aa:
         82:6c:04:88:15:8c:99:4d:a6:b2:1b:b9:9f:47:56:a5:44:d2:
         98:4a:90:91:ef:5c:e9:04:d6:4e:6e:c2:45:5a:68:c3:d8:8c:
         f7:82:9f:56:67:eb:23:dd:72:c5:69:f4:30:94:25:8a:11:95:
         54:df:60:23:6c:82:d6:82:76:42:e4:5e:c1:02:95:fe:73:d8:
         5f:0f:2b:ee:c0:6c:89:c4:22:a8:6e:60:6e:ca:4a:88:76:a9:
         fa:0a:7f:b7:7f:d9:8e:bb:50:c1:cf:cf:ff:0b:f1:6d:78:6c:
         73:06:68:7b:66:28:46:64:1b:74:a7:ae:83:e1:77:56:29:8c:
         7c:4e:32:d4:de:96:ce:ec:5c:56:7c:e0:55:bb:33:4c:28:c9:
         40:d2:2f:bb:cd:35:8f:48:4b:bf:61:fb:0f:52:9d:f2:91:e9:
         44:e2:42:82:2b:40:be:b6:43:cc:f9:d9:aa:84:3d:64:a0:35:
         13:d6:63:cc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUebRS5ebfqwCG3WJfc+EdcGkdzd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwOTU5NzAxRTA1N0Q3Q0NBQjM5QTc2QzJCNkFGNkU1
MTM0ODExRTAeFw0yNDA1MjAxMzA2MjhaFw0yNTA1MTkxMzExMjhaMDMxMTAvBgNV
BAMTKENBMzdGNTg4RThBRTUyNTQ2Mzg0OUJCMjgyRDhCMDFGOTZGOTAzNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRpBc8fRyKCb/MmmvTFMKJ4O6
NTdTih1NopswM6rsE0Uf8cssZoqYgCG+hrdw3QTJYyEkjH19juDCqUWhDitXsSu/
QWwvTw2XL/Hbyx2bgqgEitaicgVQhqoiRgX6VT7b5KpMRprA7NKNol+jXrSfpCO2
ZUS/o92eDnp2T6AO/I8hVAgdNl2+sOeeC0SqMkibjNyyFHcy+iPspYWvlZg8S7xm
MDgD4wKBWOTAOCfmTdSLw8EzcqqD2KMdBYVkA1b5JkznqJiEc0gtlPCUI9xYUVh3
DGj0mkDhn0ghOXptbtISlzfscd6NzuuzlbsXJ6XzaLFmOWOr1QWUMLRofCrPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyjf1iOiuUlRjhJuygtiwH5b5A2owHwYDVR0j
BBgwFoAUHglZcB4FfXzKs5p2wravblE0gR4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNmWHVZS1RoeDRvUGZvZnhHUVU2Q0pwc21MbXlzd05tQzZXdTZyMW1n
VUsvMC8xRTA5NTk3MDFFMDU3RDdDQ0FCMzlBNzZDMkI2QUY2RTUxMzQ4MTFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFMDk1OTcwMUUwNTdEN0ND
QUIzOUE3NkMyQjZBRjZFNTEzNDgxMUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzZlh1WUtUaHg0b1Bmb2Z4R1FVNkNKcHNtTG15c3dObUM2V3U2cjFtZ1VLLzAv
MzEzODM3MmUzMTMyMzAyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLt4gDANBgkqhkiG9w0BAQsFAAOCAQEABkCO
b6GWR7VdfAGxC1qGaa1UlKmbc6+iL00Rmxh0bi7YoygphI+6iSxx/D+pt7BEbJkF
pqldFkoYgl8w4YHU3Basx96uLlaqgmwEiBWMmU2mshu5n0dWpUTSmEqQke9c6QTW
Tm7CRVpow9iM94KfVmfrI91yxWn0MJQlihGVVN9gI2yC1oJ2QuRewQKV/nPYXw8r
7sBsicQiqG5gbspKiHap+gp/t3/ZjrtQwc/P/wvxbXhscwZoe2YoRmQbdKeug+F3
VimMfE4y1N6WzuxcVnzgVbszTCjJQNIvu801j0hLv2H7D1Kd8pHpROJCgitAvrZD
zPnZqoQ9ZKA1E9ZjzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org