Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa
File:                     3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (raw, json)
Hash identifier:          FjHgjfYOvPfWwxOi26rE3H+lPE9N9Kjwe000ivqQVcc=
Subject key identifier:   71:A5:80:C3:E6:4B:F4:5E:51:64:F7:59:F6:C6:C5:34:E2:D4:F6:3B
Certificate issuer:       /CN=47EF8FA7F3A3AE4912AD1712C85268F6B9E79104
Certificate serial:       72549573D8BEE07C118722EC12DAA925372B668E
Authority key identifier: 47:EF:8F:A7:F3:A3:AE:49:12:AD:17:12:C8:52:68:F6:B9:E7:91:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     53120
IP address blocks:        187.111.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:54:95:73:d8:be:e0:7c:11:87:22:ec:12:da:a9:25:37:2b:66:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47EF8FA7F3A3AE4912AD1712C85268F6B9E79104
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=71A580C3E64BF45E5164F759F6C6C534E2D4F63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:bd:c0:8c:33:59:8c:da:c5:dc:15:06:32:
                    e6:c3:57:97:22:e1:40:24:b8:4d:70:86:70:e4:da:
                    d8:4b:79:20:dc:94:1b:b8:70:25:0f:95:98:02:cc:
                    e2:f8:ad:ed:31:79:31:84:68:de:19:ce:e7:aa:b7:
                    47:5a:78:1b:36:1c:b5:f9:0a:ed:a8:3e:74:d3:5e:
                    64:8d:90:79:10:a1:6a:70:58:c9:2d:21:dc:87:79:
                    9b:b2:df:fa:5c:84:3a:50:14:da:1f:95:52:ee:68:
                    3e:3f:e0:47:7d:5b:5e:de:9e:fc:59:0d:e1:8a:20:
                    2f:f3:67:99:ba:7b:85:b4:5d:61:9e:d2:4c:e6:27:
                    b1:45:e0:0a:c7:34:e6:f7:2a:d1:07:9c:c1:7c:50:
                    b8:15:39:9a:22:96:3f:cd:a0:b4:a7:2c:6f:ea:b7:
                    40:d9:65:9e:bd:31:6f:50:18:fb:a9:b3:b4:79:f0:
                    c6:a7:76:24:57:7d:45:6b:82:6b:b3:cd:67:99:77:
                    9b:b6:fa:fb:1a:8f:c2:65:57:cb:87:11:33:32:ae:
                    33:02:45:8d:ef:e9:b5:df:ee:5b:99:23:a6:df:ac:
                    aa:65:73:a6:51:5c:ae:4c:2d:08:34:21:e9:85:ff:
                    fa:3c:0a:98:cb:1f:c2:02:96:99:47:8a:1c:cd:a0:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A5:80:C3:E6:4B:F4:5E:51:64:F7:59:F6:C6:C5:34:E2:D4:F6:3B
            X509v3 Authority Key Identifier:
                keyid:47:EF:8F:A7:F3:A3:AE:49:12:AD:17:12:C8:52:68:F6:B9:E7:91:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:4e:ce:05:ac:67:6e:c6:4e:cf:8c:ae:6b:48:d9:a7:dc:1a:
         28:9a:f3:59:f1:a7:06:d0:26:f1:8b:50:7b:ed:0e:4c:46:3f:
         0c:84:1c:69:1d:11:84:26:03:19:ca:3e:82:37:74:b7:80:7c:
         06:40:dc:29:bf:18:93:e0:f7:72:13:3b:d0:d2:21:b1:35:f1:
         91:46:20:28:c8:c4:58:14:93:42:63:35:f5:31:e2:d3:9e:f7:
         16:9a:52:49:4d:a3:1a:17:3e:68:e6:8c:bb:4b:95:8f:a3:1d:
         7b:80:f7:85:c9:03:6b:71:a4:3a:6a:d1:2a:0d:b1:1d:f2:18:
         b4:a7:24:f9:c6:cc:9f:03:57:29:ea:47:91:ca:73:57:7b:9b:
         a1:3e:94:8f:e4:e6:a3:3b:23:4a:96:58:1e:7b:72:78:53:dd:
         de:43:d1:8d:05:a7:a4:04:7f:c3:77:c3:e6:d2:aa:fe:a4:c4:
         d0:e7:cb:a9:27:d3:63:f0:61:ec:0c:04:b3:51:d1:6a:fe:30:
         8d:3f:2e:24:ad:e2:53:23:65:43:f7:79:69:0a:73:1e:b3:38:
         d8:9d:d6:ef:99:d0:a0:6a:ad:21:92:97:49:79:d0:bc:8b:67:
         1b:c5:58:99:04:a9:36:4a:67:9f:15:bd:b5:c9:01:82:43:cf:
         fa:b4:3d:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUclSVc9i+4HwRhyLsEtqpJTcrZo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdFRjhGQTdGM0EzQUU0OTEyQUQxNzEyQzg1MjY4RjZC
OUU3OTEwNDAeFw0yNDAzMjUyMjUwNDBaFw0yNTAzMjQyMjU1NDBaMDMxMTAvBgNV
BAMTKDcxQTU4MEMzRTY0QkY0NUU1MTY0Rjc1OUY2QzZDNTM0RTJENEY2M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFc73AjDNZjNrF3BUGMubDV5ci
4UAkuE1whnDk2thLeSDclBu4cCUPlZgCzOL4re0xeTGEaN4Zzueqt0daeBs2HLX5
Cu2oPnTTXmSNkHkQoWpwWMktIdyHeZuy3/pchDpQFNoflVLuaD4/4Ed9W17envxZ
DeGKIC/zZ5m6e4W0XWGe0kzmJ7FF4ArHNOb3KtEHnMF8ULgVOZoilj/NoLSnLG/q
t0DZZZ69MW9QGPups7R58MandiRXfUVrgmuzzWeZd5u2+vsaj8JlV8uHETMyrjMC
RY3v6bXf7luZI6bfrKplc6ZRXK5MLQg0IemF//o8CpjLH8IClplHihzNoC8vAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcaWAw+ZL9F5RZPdZ9sbFNOLU9jswHwYDVR0j
BBgwFoAUR++Pp/OjrkkSrRcSyFJo9rnnkQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru
eW8vMC80N0VGOEZBN0YzQTNBRTQ5MTJBRDE3MTJDODUyNjhGNkI5RTc5MTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3RUY4RkE3RjNBM0FFNDkx
MkFEMTcxMkM4NTI2OEY2QjlFNzkxMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1cmNBSnpNRkxGOGU0Z3BINkplalJEcTNqdlBKamJrbTFtOW1SQlNEbnlvLzAv
MzEzODM3MmUzMTMxMzEyZTMxMzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMz
MzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu28QMA0GCSqGSIb3DQEBCwUAA4IBAQCgTs4FrGdu
xk7PjK5rSNmn3BoomvNZ8acG0Cbxi1B77Q5MRj8MhBxpHRGEJgMZyj6CN3S3gHwG
QNwpvxiT4PdyEzvQ0iGxNfGRRiAoyMRYFJNCYzX1MeLTnvcWmlJJTaMaFz5o5oy7
S5WPox17gPeFyQNrcaQ6atEqDbEd8hi0pyT5xsyfA1cp6keRynNXe5uhPpSP5Oaj
OyNKllgee3J4U93eQ9GNBaekBH/Dd8Pm0qr+pMTQ58upJ9Nj8GHsDASzUdFq/jCN
Py4kreJTI2VD93lpCnMeszjYndbvmdCgaq0hkpdJedC8i2cbxViZBKk2SmefFb21
yQGCQ8/6tD3c
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org