Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37312e302f32342d3234203d3e203532353830.roa
File:                     3138362e3139352e37312e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          VlBRlWucIeFFJfC/znsyGP7WWhw4CDQ1wMmDvoH0cb4=
Subject key identifier:   20:FE:E8:C9:88:84:69:EA:70:EC:C0:23:68:9D:EF:90:25:97:0B:1D
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       78B0724359D2730F6720EE98BFB924046FF93C18
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37312e302f32342d3234203d3e203532353830.roa
Signing time:             Mon 23 Oct 2023 20:26:51 +0000
ROA not before:           Mon 23 Oct 2023 20:21:51 +0000
ROA not after:            Mon 21 Oct 2024 20:26:51 +0000
asID:                     52580
IP address blocks:        186.195.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b0:72:43:59:d2:73:0f:67:20:ee:98:bf:b9:24:04:6f:f9:3c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Oct 23 20:21:51 2023 GMT
            Not After : Oct 21 20:26:51 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:7a:18:2a:f2:d2:76:40:9d:cb:ed:d7:c4:
                    4d:0b:c7:c9:0b:0e:52:1e:bf:cc:04:7f:bd:4a:a7:
                    1f:e9:d0:fb:1e:91:45:bb:5b:15:37:d5:6c:89:d3:
                    8a:8f:fb:5b:8d:e0:92:a7:12:fb:45:8e:11:c2:c4:
                    8e:40:3d:ca:5c:18:97:8b:fd:cc:87:f1:7c:83:09:
                    56:5a:b9:5a:6c:ca:1f:4d:8b:f3:3b:9f:5b:8c:0b:
                    2c:65:7d:d6:0b:08:6d:40:f8:ce:63:3e:9d:13:72:
                    5d:5a:f8:be:3c:9a:fe:82:b0:c6:f7:6e:ca:fb:9a:
                    91:82:1a:71:99:25:ca:7b:87:b1:b5:23:75:5d:3a:
                    0d:ad:a8:a2:b9:b8:9d:57:81:4a:5e:d5:86:36:4f:
                    4e:f1:9b:1f:5a:49:cb:58:f0:b2:cb:0b:7a:91:4a:
                    bc:50:38:52:1c:ea:8d:d1:28:2e:89:04:0f:d0:f3:
                    a4:54:10:c0:bf:79:db:2a:09:89:19:0d:a4:f3:63:
                    58:9d:5e:1e:8a:42:66:44:bd:6b:b8:1a:4b:03:71:
                    1c:13:8b:27:00:42:4c:f2:20:a8:05:14:f9:c9:2a:
                    b0:f3:4f:fc:83:a9:98:a3:e5:35:35:f6:63:6b:a0:
                    e9:47:16:31:de:7e:f5:57:b1:93:ef:c9:32:ab:86:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FE:E8:C9:88:84:69:EA:70:EC:C0:23:68:9D:EF:90:25:97:0B:1D
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37312e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:79:a4:fc:17:d9:17:65:72:6d:a6:0c:a4:5b:16:43:e5:
         ef:97:b3:49:b7:f5:48:2f:50:b5:cc:2e:3a:3c:62:88:40:d4:
         a5:38:6a:c6:77:90:32:c7:ce:11:0d:3e:e0:52:08:9b:72:67:
         d7:b3:9c:da:c7:24:a0:1d:73:7e:d4:69:86:c9:50:ae:01:5c:
         b0:8c:5f:28:5e:9e:ce:72:53:dc:24:8f:f6:c3:e5:3d:12:66:
         44:e7:6b:1d:29:50:7c:93:14:35:a2:00:02:40:e0:5e:cf:88:
         fa:94:ce:c5:d5:c2:1a:76:b6:22:ce:54:9a:5d:80:53:07:34:
         81:d7:68:ed:4f:90:e0:86:d7:8f:94:cf:6f:20:ac:a0:c6:83:
         4e:d7:5b:4d:9a:b8:0d:15:82:2b:64:41:c1:3b:80:fc:6e:1d:
         47:74:64:bd:0c:90:fe:0c:01:b0:27:61:82:9d:42:dd:e2:48:
         fc:1b:7e:d2:b9:68:44:38:c4:7f:70:60:2c:5e:9b:99:57:a5:
         24:54:11:5b:9b:5e:3a:22:d7:85:93:73:5f:8d:ca:53:1a:7d:
         5b:b4:02:af:35:33:e1:50:9c:11:1a:7c:42:44:58:bf:e8:0f:
         89:8f:2e:6a:cb:34:34:36:49:76:83:69:ea:93:67:16:61:f3:
         7a:78:96:ce
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUeLByQ1nScw9nIO6Yv7kkBG/5PBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGQzExMzU1MjdBRjk2NDVBNzNDOUFFMDI4MkFFNzdB
REM5RTI1QzAeFw0yMzEwMjMyMDIxNTFaFw0yNDEwMjEyMDI2NTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc0NDdBMTgyQUYyRDI3NjQw
OURDQkVERDdDNDREMEJDN0M5MEIwRTUyMUVCRkNDMDQ3RkJENEFBNzFGRTlEMEZC
MUU5MTQ1QkI1QjE1MzdENTZDODlEMzhBOEZGQjVCOERFMDkyQTcxMkZCNDU4RTEx
QzJDNDhFNDAzRENBNUMxODk3OEJGRENDODdGMTdDODMwOTU2NUFCOTVBNkNDQTFG
NEQ4QkYzM0I5RjVCOEMwQjJDNjU3REQ2MEIwODZENDBGOENFNjMzRTlEMTM3MjVE
NUFGOEJFM0M5QUZFODJCMEM2Rjc2RUNBRkI5QTkxODIxQTcxOTkyNUNBN0I4N0Ix
QjUyMzc1NUQzQTBEQURBOEEyQjlCODlENTc4MTRBNUVENTg2MzY0RjRFRjE5QjFG
NUE0OUNCNThGMEIyQ0IwQjdBOTE0QUJDNTAzODUyMUNFQThERDEyODJFODkwNDBG
RDBGM0E0NTQxMEMwQkY3OURCMkEwOTg5MTkwREE0RjM2MzU4OUQ1RTFFOEE0MjY2
NDRCRDZCQjgxQTRCMDM3MTFDMTM4QjI3MDA0MjRDRjIyMEE4MDUxNEY5QzkyQUIw
RjM0RkZDODNBOTk4QTNFNTM1MzVGNjYzNkJBMEU5NDcxNjMxREU3RUY1NTdCMTkz
RUZDOTMyQUI4NjBCQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx0R6GCry0nZAncvt18RNC8fJCw5SHr/MBH+9Sqcf6dD7HpFFu1sV
N9VsidOKj/tbjeCSpxL7RY4RwsSOQD3KXBiXi/3Mh/F8gwlWWrlabMofTYvzO59b
jAssZX3WCwhtQPjOYz6dE3JdWvi+PJr+grDG927K+5qRghpxmSXKe4extSN1XToN
raiiubidV4FKXtWGNk9O8ZsfWknLWPCyywt6kUq8UDhSHOqN0SguiQQP0POkVBDA
v3nbKgmJGQ2k82NYnV4eikJmRL1ruBpLA3EcE4snAEJM8iCoBRT5ySqw80/8g6mY
o+U1NfZja6DpRxYx3n71V7GT78kyq4YLwQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCD+6MmIhGnqcOzAI2id75AllwsdMB8GA1UdIwQYMBaAFOL8ETVSevlkWnPJrgKC
rnetyeJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwVDhqaUJXbXlOM1J4
bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvRTJGQzExMzU1MjdBRjk2
NDVBNzNDOUFFMDI4MkFFNzdBREM5RTI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkZDMTEzNTUyN0FGOTY0NUE3M0M5QUUwMjgyQUU3N0FEQzlF
MjVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcFQ4amlCV215TjNSeG5qR29Q
Y1lHcFZSd3VWRjNkTVZ3UmV2M0ZOenRpMS8wLzMxMzgzNjJlMzEzOTM1MmUzNzMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM1MzgzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALrD
RzANBgkqhkiG9w0BAQsFAAOCAQEAGvl5pPwX2Rdlcm2mDKRbFkPl75ezSbf1SC9Q
tcwuOjxiiEDUpThqxneQMsfOEQ0+4FIIm3Jn17Oc2sckoB1zftRphslQrgFcsIxf
KF6eznJT3CSP9sPlPRJmROdrHSlQfJMUNaIAAkDgXs+I+pTOxdXCGna2Is5Uml2A
Uwc0gddo7U+Q4IbXj5TPbyCsoMaDTtdbTZq4DRWCK2RBwTuA/G4dR3RkvQyQ/gwB
sCdhgp1C3eJI/Bt+0rloRDjEf3BgLF6bmVelJFQRW5teOiLXhZNzX43KUxp9W7QC
rzUz4VCcERp8QkRYv+gPiY8uass0NDZJdoNp6pNnFmHzeniWzg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org