Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e302e302f32312d3231203d3e20323632373039.roa
File:                     3138372e3131312e302e302f32312d3231203d3e20323632373039.roa (raw, json)
Hash identifier:          KUgMMXOn4QIr6NIiixQrOrSKP4ZLBznUf6eNw4HV8tw=
Subject key identifier:   AD:1B:F0:A1:CB:4D:A0:35:15:4C:35:06:12:43:E5:60:B8:B0:E0:B4
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       51719BAE3C3C632EAA82877FF28D3B4DF0DE7294
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e302e302f32312d3231203d3e20323632373039.roa
Signing time:             Thu 20 Apr 2023 14:41:33 +0000
ROA not before:           Thu 20 Apr 2023 14:36:33 +0000
ROA not after:            Thu 18 Apr 2024 14:41:33 +0000
asID:                     262709
IP address blocks:        187.111.0.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:71:9b:ae:3c:3c:63:2e:aa:82:87:7f:f2:8d:3b:4d:f0:de:72:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 20 14:36:33 2023 GMT
            Not After : Apr 18 14:41:33 2024 GMT
        Subject: CN=AD1BF0A1CB4DA035154C35061243E560B8B0E0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:86:24:38:50:43:55:17:15:fd:ef:20:b9:
                    9b:28:8f:58:aa:f0:03:60:99:ac:b2:15:04:5a:0b:
                    63:9d:4f:51:bb:97:34:74:73:6f:ed:5d:b9:7e:99:
                    52:78:f1:61:98:46:eb:52:c8:f1:21:f8:a4:56:8e:
                    c9:15:e7:07:a7:4e:c7:8d:5d:cb:fc:8c:61:df:5f:
                    1d:62:5d:12:55:1c:7a:b7:4b:e3:c3:93:6b:b1:3b:
                    cf:79:46:f9:e0:17:17:66:cf:a3:c6:83:8e:d9:23:
                    dd:35:97:8d:6d:84:d0:3b:7b:e3:0b:52:f1:41:ca:
                    29:c1:8d:69:46:94:66:7e:4a:ea:cc:56:85:03:77:
                    fa:45:5d:87:89:63:27:61:e2:ff:de:54:51:2b:c3:
                    d5:35:19:d5:87:a3:02:f9:ed:5b:1b:58:e8:5c:51:
                    fc:1d:55:59:b0:fa:ff:3b:db:55:28:4b:89:59:93:
                    57:9c:eb:db:8d:d0:9a:8c:bc:52:a5:5c:61:3d:1e:
                    d0:0f:fd:95:80:73:91:4f:1b:c7:44:58:71:0c:2f:
                    63:c6:da:f2:da:95:67:7f:71:9b:83:45:c6:e4:86:
                    e3:14:74:69:00:1b:44:5b:19:43:ca:2a:3e:16:3a:
                    70:4c:08:98:b9:01:45:e3:c4:96:0a:7a:08:8f:a5:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1B:F0:A1:CB:4D:A0:35:15:4C:35:06:12:43:E5:60:B8:B0:E0:B4
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e302e302f32312d3231203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:8c:60:de:3a:5e:71:41:e6:f2:41:3a:e4:11:1a:8c:87:ba:
         da:44:88:3a:69:f2:67:b4:25:93:61:d8:4d:87:19:b3:82:6a:
         5d:5b:6c:3f:88:0f:92:8e:20:ad:f2:b4:b1:03:b6:e2:75:f3:
         a1:13:3d:a3:cb:d2:71:a8:28:1d:a9:fb:92:62:5e:db:e2:ea:
         8d:f7:57:00:36:c5:e1:08:ac:8c:2a:80:8d:2b:8f:df:b4:62:
         e3:07:d8:48:a7:56:d8:e5:92:57:e3:17:05:e4:17:97:8f:fd:
         bb:8d:45:14:e8:77:55:be:34:9f:d0:f9:28:45:2f:18:b5:a7:
         f5:48:29:77:30:9b:1b:f0:26:e5:4b:1c:09:e3:cb:47:e3:dd:
         b1:4e:1f:0b:70:af:3f:10:cf:89:da:9f:6d:35:72:1a:fb:2f:
         ac:70:d5:2f:68:bb:56:d4:bb:ed:b7:6b:a0:c3:3b:f7:37:6d:
         f7:93:f9:09:b4:b0:be:92:46:f8:35:7a:ff:81:83:6c:65:d4:
         71:d3:1b:d8:54:e9:eb:75:ba:87:2c:65:18:19:c7:54:84:47:
         dd:2c:73:6c:1f:91:6b:ee:17:94:e3:44:32:24:1f:41:35:35:
         fd:63:35:7a:b8:a8:78:53:d0:28:cc:84:03:00:29:34:dd:4f:
         2b:44:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org