Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e302e302f32312d3231203d3e203238313335.roa
File:                     3138372e38362e302e302f32312d3231203d3e203238313335.roa (raw, json)
Hash identifier:          oLY+Zf76kPtf76lytW2wmVBBhocPFxLOHSEfNY7uYFU=
Subject key identifier:   69:91:69:BE:2C:0B:D6:ED:35:34:CE:8A:B7:F0:4C:37:AF:91:5C:7C
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       433B9BB0D8A0C887863D4E18DC39F4B05A752502
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e302e302f32312d3231203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:14 +0000
ROA not before:           Wed 13 Mar 2024 11:58:14 +0000
ROA not after:            Wed 12 Mar 2025 12:03:14 +0000
asID:                     28135
IP address blocks:        187.86.0.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3b:9b:b0:d8:a0:c8:87:86:3d:4e:18:dc:39:f4:b0:5a:75:25:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:14 2024 GMT
            Not After : Mar 12 12:03:14 2025 GMT
        Subject: CN=699169BE2C0BD6ED3534CE8AB7F04C37AF915C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:e0:bf:e5:68:1c:a9:ad:db:17:e2:6d:38:
                    d2:0c:6a:22:bd:e9:80:1a:c0:6f:8d:a7:32:f5:6a:
                    a0:a7:22:05:72:ee:f7:7b:d4:71:aa:27:82:45:53:
                    b4:41:c8:31:8c:c3:72:43:ab:d3:d0:69:dd:2a:e2:
                    ab:77:d0:3a:96:5c:2d:9f:da:fe:d4:da:27:a2:fa:
                    25:4e:4f:d1:e2:5c:08:95:36:78:75:6f:42:c5:a9:
                    cb:d5:0a:63:e2:3d:f3:38:fc:92:9d:32:0a:bd:27:
                    40:c4:41:b6:b4:6a:58:de:e0:4f:a1:b3:99:03:fb:
                    39:a1:cf:6a:d2:64:54:1a:3b:54:fa:92:14:c7:93:
                    18:7d:6e:03:32:31:80:82:f1:af:a4:f1:ab:9c:8f:
                    df:cd:8d:2c:9d:c2:9d:16:1b:b9:83:5a:2c:31:87:
                    ef:33:31:24:72:c6:61:c6:b1:94:39:6e:1e:05:1c:
                    28:49:47:36:77:89:52:ce:d3:73:47:96:e1:e1:cc:
                    09:95:ae:b9:72:9e:b2:71:a0:53:41:18:b6:9b:81:
                    00:0b:c6:5d:5e:f0:03:8b:49:2d:8e:f8:48:5c:6d:
                    f6:4a:8d:b2:9c:d6:a3:e8:15:46:12:34:3d:52:91:
                    8b:1a:4f:88:ec:73:eb:de:b9:0b:13:a1:7a:ab:5f:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:91:69:BE:2C:0B:D6:ED:35:34:CE:8A:B7:F0:4C:37:AF:91:5C:7C
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e302e302f32312d3231203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:49:40:f1:df:e7:9a:88:77:fb:5c:2f:a7:ce:b9:59:80:27:
         7c:6e:84:80:3b:09:f4:9e:74:c1:10:88:0e:30:2d:60:8b:8e:
         18:ed:b7:27:64:73:d7:65:fe:8d:68:34:a9:61:d2:48:4e:7c:
         15:65:58:1d:41:83:1c:70:55:e1:b4:1a:f4:e6:4f:5d:8b:7e:
         d4:12:74:4a:fb:0a:a1:a7:b8:8c:09:b2:68:57:12:72:a4:86:
         c3:1d:7e:e2:2d:5d:d5:3f:a5:fa:87:f0:27:05:d3:08:6f:43:
         02:56:c1:62:e4:b4:58:f6:43:a7:b8:6d:31:79:7d:6e:61:3b:
         ae:5c:18:42:92:78:22:b7:0f:0a:41:1c:31:ce:5e:fa:63:02:
         23:4d:bf:8b:57:af:2d:e9:a0:34:12:36:0a:d2:2d:ec:5e:42:
         a2:fe:c0:2f:ba:1b:0a:ad:dd:e2:d5:59:bf:6e:62:02:fb:a5:
         1a:6a:e0:17:2a:d8:e0:e8:97:07:ca:59:0b:9a:8a:93:f4:1c:
         51:f9:c3:63:54:22:08:dc:96:98:25:5f:c3:56:44:96:54:f7:
         2c:40:20:81:58:2a:d6:65:68:7b:3f:ad:11:d9:5d:7f:f5:c7:
         3a:58:42:e7:71:75:1d:da:66:93:96:19:e8:09:08:69:92:c1:
         7c:4d:21:28
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUQzubsNigyIeGPU4Y3Dn0sFp1JQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yNDAzMTMxMTU4MTRaFw0yNTAzMTIxMjAzMTRaMDMxMTAvBgNV
BAMTKDY5OTE2OUJFMkMwQkQ2RUQzNTM0Q0U4QUI3RjA0QzM3QUY5MTVDN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3+C/5Wgcqa3bF+JtONIMaiK9
6YAawG+NpzL1aqCnIgVy7vd71HGqJ4JFU7RByDGMw3JDq9PQad0q4qt30DqWXC2f
2v7U2iei+iVOT9HiXAiVNnh1b0LFqcvVCmPiPfM4/JKdMgq9J0DEQba0alje4E+h
s5kD+zmhz2rSZFQaO1T6khTHkxh9bgMyMYCC8a+k8aucj9/NjSydwp0WG7mDWiwx
h+8zMSRyxmHGsZQ5bh4FHChJRzZ3iVLO03NHluHhzAmVrrlynrJxoFNBGLabgQAL
xl1e8AOLSS2O+EhcbfZKjbKc1qPoFUYSND1SkYsaT4jsc+veuQsToXqrX6KpAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUaZFpviwL1u01NM6Kt/BMN6+RXHwwHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzEzODM3MmUzODM2MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzgzMTMz
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAO7VgAwDQYJKoZIhvcNAQELBQADggEBADlJQPHf55qId/tc
L6fOuVmAJ3xuhIA7CfSedMEQiA4wLWCLjhjttydkc9dl/o1oNKlh0khOfBVlWB1B
gxxwVeG0GvTmT12LftQSdEr7CqGnuIwJsmhXEnKkhsMdfuItXdU/pfqH8CcF0whv
QwJWwWLktFj2Q6e4bTF5fW5hO65cGEKSeCK3DwpBHDHOXvpjAiNNv4tXry3poDQS
NgrSLexeQqL+wC+6Gwqt3eLVWb9uYgL7pRpq4Bcq2ODolwfKWQuaipP0HFH5w2NU
IgjclpglX8NWRJZU9yxAIIFYKtZlaHs/rRHZXX/1xzpYQudxdR3aZpOWGegJCGmS
wXxNISg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org