Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e302e302f32302d3230203d3e20323632373039.roa
File:                     3138372e3131312e302e302f32302d3230203d3e20323632373039.roa (raw, json)
Hash identifier:          ISWuGDJdDfDHah0CXZTDn9j1G7V7SBPmIPglqP3xeNE=
Subject key identifier:   D6:1E:8D:5C:E7:26:08:C6:A4:AC:FB:B5:D2:B6:67:63:F0:94:CB:3D
Certificate issuer:       /CN=36614F42717E12040199B59CE8FFFD30F0784B36
Certificate serial:       1BC7E13AAD9C5D5BD69B76E94508F3C82B9AC031
Authority key identifier: 36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e302e302f32302d3230203d3e20323632373039.roa
Signing time:             Thu 10 Nov 2022 18:29:33 +0000
ROA not before:           Thu 10 Nov 2022 18:24:33 +0000
ROA not after:            Thu 09 Nov 2023 18:29:33 +0000
asID:                     262709
IP address blocks:        187.111.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c7:e1:3a:ad:9c:5d:5b:d6:9b:76:e9:45:08:f3:c8:2b:9a:c0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614F42717E12040199B59CE8FFFD30F0784B36
        Validity
            Not Before: Nov 10 18:24:33 2022 GMT
            Not After : Nov  9 18:29:33 2023 GMT
        Subject: CN=D61E8D5CE72608C6A4ACFBB5D2B66763F094CB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:d9:b5:76:56:96:7a:df:e0:62:f0:9a:93:
                    cc:c6:4d:60:a5:eb:27:5d:ef:2b:c2:2f:07:0a:fd:
                    5b:f7:a2:e2:bd:bb:39:be:d3:e4:af:f6:4c:c7:ab:
                    b5:e6:e9:93:d5:80:1a:2b:71:5e:3f:fd:89:1e:4f:
                    43:c4:d7:6e:ef:13:7f:1d:e1:09:ab:9a:60:3a:7c:
                    f5:79:da:28:c4:31:84:de:1d:df:3e:24:69:03:c1:
                    b3:52:d0:de:76:28:50:42:5c:b8:3b:15:15:9f:f8:
                    25:f8:12:73:46:d8:cb:89:ce:55:8a:21:91:ee:6e:
                    d7:b7:3f:3a:25:3d:91:33:ab:ce:ff:fc:0b:f3:d5:
                    70:c3:a9:ef:35:49:95:10:23:4e:79:84:1c:54:23:
                    8b:7b:ea:d8:ec:37:5a:9c:f4:d8:37:7a:f8:81:9b:
                    64:20:e3:74:cd:de:63:ca:b2:e5:84:d7:c1:e5:f8:
                    00:41:12:a5:99:62:ed:8c:2b:bf:d6:e4:18:58:f1:
                    07:3c:e8:04:c8:54:e0:c3:9c:fe:d7:b3:44:ea:29:
                    66:a2:15:41:88:1a:de:a0:45:ff:0b:7d:a8:33:bf:
                    cf:6e:76:d3:83:09:fd:56:59:53:67:ce:06:b3:43:
                    bf:37:6c:c9:3f:7d:2a:d5:ef:c7:9f:db:8c:7f:7c:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1E:8D:5C:E7:26:08:C6:A4:AC:FB:B5:D2:B6:67:63:F0:94:CB:3D
            X509v3 Authority Key Identifier:
                keyid:36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/36614F42717E12040199B59CE8FFFD30F0784B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e302e302f32302d3230203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:8b:52:cd:c7:82:c0:06:94:4f:f1:b2:27:8a:9b:fd:4c:fb:
         1e:5e:63:cb:55:dd:f5:83:69:af:6f:b2:5f:ef:23:0c:f2:13:
         b9:a8:a1:91:a8:38:2a:69:22:34:20:6c:87:1d:68:dc:fa:8a:
         21:03:9b:c9:d8:b2:51:80:4d:96:76:c5:da:0e:e9:18:60:70:
         b0:ba:ff:83:ff:5b:00:ab:02:d8:15:c9:dd:04:0d:c3:1a:cc:
         27:9c:52:7a:f3:81:f4:f6:13:eb:90:76:35:a1:f7:53:87:90:
         2b:0e:de:8b:63:9b:62:2d:24:a2:81:80:26:7c:4f:e5:40:3c:
         c4:af:98:05:62:3c:1d:aa:fa:f0:a3:91:28:6d:08:f5:87:52:
         fc:48:4f:e4:3b:35:60:c7:13:d7:26:6b:8b:63:c6:27:5b:cb:
         1b:16:c4:43:eb:91:a3:3a:b0:5e:ec:c5:86:8d:ad:5d:da:ac:
         da:2d:cd:e7:2d:0e:c6:c6:1b:8d:a6:27:7c:13:07:5c:4d:18:
         81:78:45:ce:85:1e:1e:18:cc:e9:b7:42:d5:0b:1b:57:47:5d:
         50:40:e1:57:87:49:57:5a:7c:b8:72:99:53:6d:ca:ed:aa:ab:
         d2:22:ca:51:3d:35:cb:29:78:2f:40:3d:07:03:d7:08:71:ab:
         06:ba:7f:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG8fhOq2cXVvWm3bpRQjzyCuawDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY2MTRGNDI3MTdFMTIwNDAxOTlCNTlDRThGRkZEMzBG
MDc4NEIzNjAeFw0yMjExMTAxODI0MzNaFw0yMzExMDkxODI5MzNaMDMxMTAvBgNV
BAMTKEQ2MUU4RDVDRTcyNjA4QzZBNEFDRkJCNUQyQjY2NzYzRjA5NENCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xtm1dlaWet/gYvCak8zGTWCl
6ydd7yvCLwcK/Vv3ouK9uzm+0+Sv9kzHq7Xm6ZPVgBorcV4//YkeT0PE127vE38d
4QmrmmA6fPV52ijEMYTeHd8+JGkDwbNS0N52KFBCXLg7FRWf+CX4EnNG2MuJzlWK
IZHubte3PzolPZEzq87//Avz1XDDqe81SZUQI055hBxUI4t76tjsN1qc9Ng3eviB
m2Qg43TN3mPKsuWE18Hl+ABBEqWZYu2MK7/W5BhY8Qc86ATIVODDnP7Xs0TqKWai
FUGIGt6gRf8Lfagzv89udtODCf1WWVNnzgazQ783bMk/fSrV78ef24x/fNCHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1h6NXOcmCMakrPu10rZnY/CUyz0wHwYDVR0j
BBgwFoAUNmFPQnF+EgQBmbWc6P/9MPB4SzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGg4aTNKTHFuOG1qOXJtRVplZDJvbmhtalFqYnZXNU55U25hSndES1g4
YnEvMC8zNjYxNEY0MjcxN0UxMjA0MDE5OUI1OUNFOEZGRkQzMEYwNzg0QjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2NjE0RjQyNzE3RTEyMDQw
MTk5QjU5Q0U4RkZGRDMwRjA3ODRCMzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoOGkzSkxxbjhtajlybUVaZWQyb25obWpRamJ2VzVOeVNuYUp3REtYOGJxLzAv
MzEzODM3MmUzMTMxMzEyZTMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNjMy
MzczMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu28AMA0GCSqGSIb3DQEBCwUAA4IBAQAoi1LNx4LA
BpRP8bInipv9TPseXmPLVd31g2mvb7Jf7yMM8hO5qKGRqDgqaSI0IGyHHWjc+ooh
A5vJ2LJRgE2WdsXaDukYYHCwuv+D/1sAqwLYFcndBA3DGswnnFJ684H09hPrkHY1
ofdTh5ArDt6LY5tiLSSigYAmfE/lQDzEr5gFYjwdqvrwo5EobQj1h1L8SE/kOzVg
xxPXJmuLY8YnW8sbFsRD65GjOrBe7MWGja1d2qzaLc3nLQ7GxhuNpid8EwdcTRiB
eEXOhR4eGMzpt0LVCxtXR11QQOFXh0lXWny4cplTbcrtqqvSIspRPTXLKXgvQD0H
A9cIcasGun+3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org