Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e31322e302f32322d3232203d3e20323632373039.roa
File:                     3138372e3131312e31322e302f32322d3232203d3e20323632373039.roa (raw, json)
Hash identifier:          jmQLBbaX2WHv3+KOaJUIyIN5zNMOOSDu0Vn0U1KCEeE=
Subject key identifier:   F9:F1:A3:E2:5B:60:1A:74:7C:1B:AC:4E:85:8C:FC:B8:59:C7:D1:B5
Certificate issuer:       /CN=36614F42717E12040199B59CE8FFFD30F0784B36
Certificate serial:       0B2CDD5C9674A58FB2DFB7A4357FAF72A077CECC
Authority key identifier: 36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e31322e302f32322d3232203d3e20323632373039.roa
Signing time:             Thu 10 Nov 2022 18:31:57 +0000
ROA not before:           Thu 10 Nov 2022 18:26:57 +0000
ROA not after:            Thu 09 Nov 2023 18:31:57 +0000
asID:                     262709
IP address blocks:        187.111.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2c:dd:5c:96:74:a5:8f:b2:df:b7:a4:35:7f:af:72:a0:77:ce:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614F42717E12040199B59CE8FFFD30F0784B36
        Validity
            Not Before: Nov 10 18:26:57 2022 GMT
            Not After : Nov  9 18:31:57 2023 GMT
        Subject: CN=F9F1A3E25B601A747C1BAC4E858CFCB859C7D1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:1c:e7:af:93:b3:c6:f8:38:0a:bf:aa:95:
                    35:6f:d9:37:57:e6:8d:4c:59:c5:39:56:bd:79:d5:
                    0c:93:79:ca:51:ae:fb:a1:a1:4a:6b:b0:67:f7:80:
                    96:71:53:3c:a3:6e:a0:2a:44:d5:c9:06:0b:7c:eb:
                    96:ce:2f:eb:96:a9:40:0c:f0:7c:1a:b3:7d:95:1b:
                    97:9c:3c:13:3f:05:f7:47:d4:89:31:5b:0b:e9:30:
                    3b:99:04:8e:8a:26:c0:25:c5:fa:88:1d:56:e6:23:
                    02:2c:bf:88:a8:4b:7c:ae:07:b8:61:73:c4:af:14:
                    97:31:33:ae:b7:65:38:92:62:91:8d:fd:c0:d0:32:
                    c4:38:c4:53:29:bd:76:fc:49:8d:1a:04:67:4f:2a:
                    d7:b0:34:db:97:3c:37:54:5a:b2:0b:52:ee:d1:ba:
                    73:45:1e:56:c4:d6:20:71:6b:a8:12:f8:00:9f:ec:
                    f8:6c:43:e6:91:e3:d8:8c:7c:8c:71:aa:2e:92:0f:
                    3f:38:aa:ab:20:12:90:8c:36:77:fe:bf:c3:1c:66:
                    b4:a5:41:91:07:bc:14:67:e9:78:41:72:5e:a0:6a:
                    e9:4a:96:14:3d:97:41:14:77:50:07:b7:b4:b4:a2:
                    93:08:15:39:02:d1:a9:6a:47:6e:4f:8e:63:26:fb:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:A3:E2:5B:60:1A:74:7C:1B:AC:4E:85:8C:FC:B8:59:C7:D1:B5
            X509v3 Authority Key Identifier:
                keyid:36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/36614F42717E12040199B59CE8FFFD30F0784B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e31322e302f32322d3232203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:91:7a:8c:23:81:c0:7a:da:4e:1b:8e:53:85:58:be:03:96:
         59:02:d3:be:c2:58:0f:75:c1:0f:24:28:9b:59:93:01:2e:40:
         89:84:df:c2:2e:b1:e5:16:45:ac:96:7d:9e:db:3b:fd:91:4d:
         05:a5:93:ef:10:16:47:36:79:c5:60:c7:30:43:5a:1b:04:b2:
         9c:ba:12:bf:b8:32:30:43:5a:3e:ff:9b:a4:98:4a:80:c2:dd:
         04:f2:d3:de:f2:99:ae:43:cb:51:7e:08:c6:81:5b:62:24:f9:
         a4:20:14:22:bc:96:0c:92:cd:79:6d:fc:72:a9:0e:4f:c2:ed:
         21:a8:ad:b1:3d:0a:42:8d:e5:32:96:ce:88:22:a2:a9:28:5c:
         12:37:0d:19:c4:31:9e:ff:56:5a:2f:3f:71:40:32:c1:c1:d9:
         69:50:15:9d:65:50:f5:2f:e5:f5:7b:1c:dc:5b:86:ea:8f:b9:
         d4:7a:1e:66:36:30:93:65:25:29:44:9a:cb:98:9b:bf:32:d6:
         f5:f3:a8:00:f7:6d:b7:59:a8:09:52:8c:a6:56:59:c5:e3:73:
         fa:71:b8:96:db:1c:cc:dc:31:6c:7e:fd:38:40:38:ca:1e:b4:
         90:ca:91:cf:7b:d8:e9:2e:38:8e:c3:8f:bd:72:97:c4:b1:6e:
         de:5f:b5:d4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCyzdXJZ0pY+y37ekNX+vcqB3zswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY2MTRGNDI3MTdFMTIwNDAxOTlCNTlDRThGRkZEMzBG
MDc4NEIzNjAeFw0yMjExMTAxODI2NTdaFw0yMzExMDkxODMxNTdaMDMxMTAvBgNV
BAMTKEY5RjFBM0UyNUI2MDFBNzQ3QzFCQUM0RTg1OENGQ0I4NTlDN0QxQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJxznr5Ozxvg4Cr+qlTVv2TdX
5o1MWcU5Vr151QyTecpRrvuhoUprsGf3gJZxUzyjbqAqRNXJBgt865bOL+uWqUAM
8Hwas32VG5ecPBM/BfdH1IkxWwvpMDuZBI6KJsAlxfqIHVbmIwIsv4ioS3yuB7hh
c8SvFJcxM663ZTiSYpGN/cDQMsQ4xFMpvXb8SY0aBGdPKtewNNuXPDdUWrILUu7R
unNFHlbE1iBxa6gS+ACf7PhsQ+aR49iMfIxxqi6SDz84qqsgEpCMNnf+v8McZrSl
QZEHvBRn6XhBcl6gaulKlhQ9l0EUd1AHt7S0opMIFTkC0alqR25PjmMm+yUdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+fGj4ltgGnR8G6xOhYz8uFnH0bUwHwYDVR0j
BBgwFoAUNmFPQnF+EgQBmbWc6P/9MPB4SzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGg4aTNKTHFuOG1qOXJtRVplZDJvbmhtalFqYnZXNU55U25hSndES1g4
YnEvMC8zNjYxNEY0MjcxN0UxMjA0MDE5OUI1OUNFOEZGRkQzMEYwNzg0QjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2NjE0RjQyNzE3RTEyMDQw
MTk5QjU5Q0U4RkZGRDMwRjA3ODRCMzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoOGkzSkxxbjhtajlybUVaZWQyb25obWpRamJ2VzVOeVNuYUp3REtYOGJxLzAv
MzEzODM3MmUzMTMxMzEyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7bwwwDQYJKoZIhvcNAQELBQADggEBACOReowj
gcB62k4bjlOFWL4DllkC077CWA91wQ8kKJtZkwEuQImE38IuseUWRayWfZ7bO/2R
TQWlk+8QFkc2ecVgxzBDWhsEspy6Er+4MjBDWj7/m6SYSoDC3QTy097yma5Dy1F+
CMaBW2Ik+aQgFCK8lgySzXlt/HKpDk/C7SGorbE9CkKN5TKWzogioqkoXBI3DRnE
MZ7/VlovP3FAMsHB2WlQFZ1lUPUv5fV7HNxbhuqPudR6HmY2MJNlJSlEmsuYm78y
1vXzqAD3bbdZqAlSjKZWWcXjc/pxuJbbHMzcMWx+/ThAOMoetJDKkc972OkuOI7D
j71yl8Sxbt5ftdQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org