Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e372e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e372e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          XVkjnMJs9cZBN/KKaoojvxXQ3ijiS1qDg49sIksODHY=
Subject key identifier:   42:6E:AB:BD:E3:CA:BE:BC:AC:FE:C1:F8:5A:52:05:A7:97:92:5E:75
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       3C2344E5C6FD20E8D8B71B59A1C03E57C35B97E2
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e372e302f32342d3234203d3e20323632373039.roa
Signing time:             Thu 20 Apr 2023 14:43:31 +0000
ROA not before:           Thu 20 Apr 2023 14:38:31 +0000
ROA not after:            Thu 18 Apr 2024 14:43:31 +0000
asID:                     262709
IP address blocks:        187.111.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:23:44:e5:c6:fd:20:e8:d8:b7:1b:59:a1:c0:3e:57:c3:5b:97:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 20 14:38:31 2023 GMT
            Not After : Apr 18 14:43:31 2024 GMT
        Subject: CN=426EABBDE3CABEBCACFEC1F85A5205A797925E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:cd:48:ff:fb:04:a6:d1:ef:b2:63:f2:65:
                    a9:52:1d:32:68:af:8e:c5:45:a9:10:fe:db:6c:2f:
                    61:69:af:d3:cb:8a:e8:4c:78:da:ee:08:de:7c:a3:
                    26:89:ab:11:54:3f:74:a1:20:a5:c9:1d:59:bb:52:
                    6f:2d:f5:a9:7b:e1:d2:0b:62:5c:8f:e4:a9:2e:e2:
                    83:7e:ef:7a:43:1f:0b:0e:a0:61:38:d4:2c:4f:ac:
                    44:69:51:01:3f:92:53:ed:6a:5c:4e:32:1a:17:86:
                    b2:1f:77:d1:b7:62:f0:aa:a1:e6:e5:7c:44:af:18:
                    a2:b7:9f:6f:c0:49:b0:e5:ad:59:83:90:b5:ec:b8:
                    5a:a9:53:0e:7d:91:4a:70:83:02:54:3c:0b:87:79:
                    e0:b9:23:86:a0:97:e9:0e:f0:c0:8e:09:2e:b1:1f:
                    1a:96:39:12:86:5e:19:7e:92:a5:d5:ae:e4:5e:c9:
                    ed:de:a6:a3:5d:60:aa:6e:7e:36:cc:44:58:52:92:
                    81:f9:e0:34:23:e5:b7:8e:82:7a:88:3b:53:45:1e:
                    09:73:3d:33:c7:57:40:6c:ac:d4:89:25:d1:c3:28:
                    39:15:80:d9:c6:ac:47:1c:75:9f:28:d7:a0:d4:9d:
                    4b:4a:00:4d:57:4d:be:bb:38:a6:4e:b6:5a:5e:5b:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6E:AB:BD:E3:CA:BE:BC:AC:FE:C1:F8:5A:52:05:A7:97:92:5E:75
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e372e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:63:83:62:06:48:0e:f1:c0:a1:c9:86:3f:00:2d:37:37:7f:
         9e:03:2b:44:f0:e6:43:d9:11:46:e4:ce:ec:ff:f0:73:cf:69:
         38:81:75:a1:7e:1a:b5:9a:4a:9c:3d:0c:e9:79:b7:c5:79:e5:
         c8:90:2e:7f:f7:fd:25:4e:2a:6c:2a:0d:2f:6c:0e:1d:38:8e:
         35:81:8d:01:17:99:39:e0:6f:44:cf:6e:6e:ed:c5:3c:26:82:
         7f:45:87:0f:28:f7:69:c3:53:97:01:6f:1f:df:8f:79:da:23:
         10:8b:cf:25:9d:94:1a:08:6e:fe:e2:a4:e7:c1:2a:2f:c0:27:
         34:74:f2:62:ea:df:6e:fa:ee:85:17:36:16:2b:d3:f4:af:46:
         ee:fc:06:05:85:30:18:79:af:dc:bd:20:8b:fc:10:8e:2d:6e:
         09:b5:6d:98:93:98:3f:26:ef:d3:82:b2:48:23:8a:2e:54:84:
         eb:d3:20:ab:cb:29:70:60:a3:37:66:17:53:e0:de:78:6d:cf:
         80:ee:f1:31:34:94:0a:5b:39:f3:5f:91:5b:16:63:7b:da:77:
         59:ee:ea:93:30:a4:17:d2:c7:c9:f5:9b:91:b8:6f:62:5a:a4:
         f2:ad:54:ca:e8:a2:5d:97:5f:ee:5f:32:eb:8b:12:9e:06:d9:
         0f:a6:f1:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPCNE5cb9IOjYtxtZocA+V8Nbl+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg2QjBBMDE2OTE5RkY2MTRCMEJEQTIzRjk3NEM3QkIz
RUVDREEwMDAeFw0yMzA0MjAxNDM4MzFaFw0yNDA0MTgxNDQzMzFaMDMxMTAvBgNV
BAMTKDQyNkVBQkJERTNDQUJFQkNBQ0ZFQzFGODVBNTIwNUE3OTc5MjVFNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHU81I//sEptHvsmPyZalSHTJo
r47FRakQ/ttsL2Fpr9PLiuhMeNruCN58oyaJqxFUP3ShIKXJHVm7Um8t9al74dIL
YlyP5Kku4oN+73pDHwsOoGE41CxPrERpUQE/klPtalxOMhoXhrIfd9G3YvCqoebl
fESvGKK3n2/ASbDlrVmDkLXsuFqpUw59kUpwgwJUPAuHeeC5I4agl+kO8MCOCS6x
HxqWORKGXhl+kqXVruReye3epqNdYKpufjbMRFhSkoH54DQj5beOgnqIO1NFHglz
PTPHV0BsrNSJJdHDKDkVgNnGrEccdZ8o16DUnUtKAE1XTb67OKZOtlpeW3dxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQm6rvePKvrys/sH4WlIFp5eSXnUwHwYDVR0j
BBgwFoAUSGsKAWkZ/2FLC9oj+XTHuz7s2gAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGg4aTNKTHFuOG1qOXJtRVplZDJvbmhtalFqYnZXNU55U25hSndES1g4
YnEvMS80ODZCMEEwMTY5MTlGRjYxNEIwQkRBMjNGOTc0QzdCQjNFRUNEQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4NkIwQTAxNjkxOUZGNjE0
QjBCREEyM0Y5NzRDN0JCM0VFQ0RBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoOGkzSkxxbjhtajlybUVaZWQyb25obWpRamJ2VzVOeVNuYUp3REtYOGJxLzEv
MzEzODM3MmUzMTMxMzEyZTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAu28HMA0GCSqGSIb3DQEBCwUAA4IBAQA8Y4NiBkgO
8cChyYY/AC03N3+eAytE8OZD2RFG5M7s//Bzz2k4gXWhfhq1mkqcPQzpebfFeeXI
kC5/9/0lTipsKg0vbA4dOI41gY0BF5k54G9Ez25u7cU8JoJ/RYcPKPdpw1OXAW8f
34952iMQi88lnZQaCG7+4qTnwSovwCc0dPJi6t9u+u6FFzYWK9P0r0bu/AYFhTAY
ea/cvSCL/BCOLW4JtW2Yk5g/Ju/TgrJII4ouVITr0yCryylwYKM3ZhdT4N54bc+A
7vExNJQKWznzX5FbFmN72ndZ7uqTMKQX0sfJ9ZuRuG9iWqTyrVTK6KJdl1/uXzLr
ixKeBtkPpvEj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:49 2024 by rpki-client on console-ams.rpki-client.org