Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e312e31362e302f32302d3234203d3e20323632323732.roa
File:                     3138372e312e31362e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          w6zmSzXK1Y4A47NIddmtV+FvlaSBns1HZ2JXwb9tapA=
Subject key identifier:   36:E0:46:7D:E6:33:AF:56:6C:82:AC:98:6D:35:29:C0:09:4E:EF:E7
Certificate issuer:       /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial:       29758456F77DB89842FE197510188A5C18AA871B
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e312e31362e302f32302d3234203d3e20323632323732.roa
Signing time:             Mon 22 Jul 2024 18:02:14 +0000
ROA not before:           Mon 22 Jul 2024 17:57:14 +0000
ROA not after:            Mon 21 Jul 2025 18:02:14 +0000
asID:                     262272
IP address blocks:        187.1.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:75:84:56:f7:7d:b8:98:42:fe:19:75:10:18:8a:5c:18:aa:87:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
        Validity
            Not Before: Jul 22 17:57:14 2024 GMT
            Not After : Jul 21 18:02:14 2025 GMT
        Subject: CN=36E0467DE633AF566C82AC986D3529C0094EEFE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:e6:dc:e5:05:4f:7e:8d:15:44:28:c6:1f:
                    9c:67:45:a6:8f:61:1b:95:4e:c4:29:41:61:6e:a4:
                    39:ba:f2:f9:16:c5:e6:a5:93:72:85:b9:44:94:b8:
                    95:9f:2e:13:4a:f8:77:80:96:ae:82:49:b4:82:40:
                    3a:9a:e9:43:c2:0e:fc:f0:40:94:91:cc:ff:bd:fe:
                    ee:c6:cc:0c:c5:b7:a9:e2:75:cb:ab:56:cb:9a:5e:
                    c6:ab:85:7a:14:a6:6a:67:c4:56:78:41:2b:7f:f8:
                    97:e2:57:72:94:81:38:db:fb:ca:f6:9f:a1:5c:f8:
                    22:87:5e:f2:7a:55:aa:9e:15:d5:7a:29:00:4e:9b:
                    4e:34:9d:19:53:7e:93:43:2e:c2:a8:04:19:4f:13:
                    87:85:b9:1c:98:bb:3e:36:c8:80:86:d6:3a:c8:cf:
                    60:f2:2b:b4:de:9d:37:59:f6:73:a1:c4:ca:c8:10:
                    44:a4:fc:a8:8e:00:a7:4b:95:0b:91:a1:bc:fa:00:
                    4a:d8:50:c7:f2:1e:55:9b:e6:1c:c2:08:b0:a2:13:
                    5f:9f:53:07:5e:c9:a8:04:9f:8d:16:c8:44:42:ad:
                    f2:a5:80:e7:38:a6:22:28:e0:1e:10:14:20:93:d6:
                    cf:40:d8:65:de:49:58:bf:fb:a2:1c:02:74:c8:5f:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E0:46:7D:E6:33:AF:56:6C:82:AC:98:6D:35:29:C0:09:4E:EF:E7
            X509v3 Authority Key Identifier:
                keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e312e31362e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:71:20:e3:86:db:f2:eb:74:4a:6e:72:b5:4b:d0:3d:74:d0:
         60:89:7d:eb:7d:2b:88:00:7b:d9:da:21:d2:14:15:7a:c3:a7:
         93:2f:49:13:8a:38:96:cb:e7:e7:8d:4c:2f:9a:b1:2c:ac:67:
         84:8a:59:db:91:70:03:d3:e7:3a:5e:83:b8:6e:21:82:e7:78:
         d5:14:e8:02:52:f9:9a:04:41:b6:c4:1c:aa:c3:c9:84:c7:c6:
         ce:7a:cb:9e:5c:2a:42:51:09:01:af:3d:46:a3:c6:00:18:e7:
         76:79:66:c5:84:40:9d:c4:6d:25:78:d1:72:e3:0b:fb:99:2e:
         af:39:15:d1:1c:84:95:e5:82:13:48:1e:77:5f:d2:6e:bc:81:
         fc:06:21:92:36:ef:b1:51:e6:28:d2:66:46:88:26:90:b1:c4:
         0b:ae:28:5e:3e:6d:c9:60:eb:1d:06:ab:ed:5a:71:57:85:cf:
         f3:21:45:d9:f5:d8:5b:e7:fc:23:99:01:7a:94:48:98:1d:75:
         ac:b5:31:2d:09:e9:03:b9:c8:76:27:b5:fa:f5:59:a3:48:65:
         85:04:c9:e9:dc:4b:e1:26:a1:8f:18:19:51:e9:7d:27:1b:1d:
         32:93:e9:3e:2a:88:fd:29:8d:7f:cf:1d:44:29:3b:ab:6a:be:
         17:82:29:87
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKXWEVvd9uJhC/hl1EBiKXBiqhxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIzNEY5MUEyOTE2NDQwMjVDMkMyNDYwRDM1NTI3MkEw
NDZCNThERDAeFw0yNDA3MjIxNzU3MTRaFw0yNTA3MjExODAyMTRaMDMxMTAvBgNV
BAMTKDM2RTA0NjdERTYzM0FGNTY2QzgyQUM5ODZEMzUyOUMwMDk0RUVGRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeebc5QVPfo0VRCjGH5xnRaaP
YRuVTsQpQWFupDm68vkWxealk3KFuUSUuJWfLhNK+HeAlq6CSbSCQDqa6UPCDvzw
QJSRzP+9/u7GzAzFt6nidcurVsuaXsarhXoUpmpnxFZ4QSt/+JfiV3KUgTjb+8r2
n6Fc+CKHXvJ6VaqeFdV6KQBOm040nRlTfpNDLsKoBBlPE4eFuRyYuz42yICG1jrI
z2DyK7TenTdZ9nOhxMrIEESk/KiOAKdLlQuRobz6AErYUMfyHlWb5hzCCLCiE1+f
UwdeyagEn40WyERCrfKlgOc4piIo4B4QFCCT1s9A2GXeSVi/+6IcAnTIX8jvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUNuBGfeYzr1ZsgqyYbTUpwAlO7+cwHwYDVR0j
BBgwFoAUAjT5GikWRAJcLCRg01UnKgRrWN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNmWHVZS1RoeDRvUGZvZnhHUVU2Q0pwc21MbXlzd05tQzZXdTZyMW1n
VUsvMi8wMjM0RjkxQTI5MTY0NDAyNUMyQzI0NjBEMzU1MjcyQTA0NkI1OERELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyMzRGOTFBMjkxNjQ0MDI1
QzJDMjQ2MEQzNTUyNzJBMDQ2QjU4REQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzZlh1WUtUaHg0b1Bmb2Z4R1FVNkNKcHNtTG15c3dObUM2V3U2cjFtZ1VLLzIv
MzEzODM3MmUzMTJlMzEzNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzYzMjMy
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLsBEDANBgkqhkiG9w0BAQsFAAOCAQEAknEg44bb8ut0
Sm5ytUvQPXTQYIl9630riAB72doh0hQVesOnky9JE4o4lsvn541ML5qxLKxnhIpZ
25FwA9PnOl6DuG4hgud41RToAlL5mgRBtsQcqsPJhMfGznrLnlwqQlEJAa89RqPG
ABjndnlmxYRAncRtJXjRcuML+5kurzkV0RyEleWCE0ged1/SbryB/AYhkjbvsVHm
KNJmRogmkLHEC64oXj5tyWDrHQar7VpxV4XP8yFF2fXYW+f8I5kBepRImB11rLUx
LQnpA7nIdie1+vVZo0hlhQTJ6dxL4SahjxgZUel9JxsdMpPpPiqI/SmNf88dRCk7
q2q+F4Iphw==
-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org