Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/3138372e3131312e31362e302f32312d3231203d3e203533313230.roa
File:                     3138372e3131312e31362e302f32312d3231203d3e203533313230.roa (raw, json)
Hash identifier:          601zWVZg76qnhEI0oFZFPfFxNoayOtxqMtkiDHCT/nU=
Subject key identifier:   3B:2C:23:6B:85:23:90:E7:FC:6F:56:24:5A:C1:59:57:F0:0D:FE:7C
Certificate issuer:       /CN=20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C
Certificate serial:       36CB973681097B86EE64EC2D43CA5630DCC6DEBD
Authority key identifier: 20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/3138372e3131312e31362e302f32312d3231203d3e203533313230.roa
Signing time:             Thu 06 Oct 2022 19:54:32 +0000
ROA not before:           Thu 06 Oct 2022 19:49:32 +0000
ROA not after:            Thu 05 Oct 2023 19:54:32 +0000
asID:                     53120
IP address blocks:        187.111.16.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:cb:97:36:81:09:7b:86:ee:64:ec:2d:43:ca:56:30:dc:c6:de:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C
        Validity
            Not Before: Oct  6 19:49:32 2022 GMT
            Not After : Oct  5 19:54:32 2023 GMT
        Subject: CN=3B2C236B852390E7FC6F56245AC15957F00DFE7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:e0:e6:bf:88:80:96:d8:fa:5c:03:ea:9d:
                    fd:04:be:be:90:d7:e4:ec:68:e8:a7:05:76:46:23:
                    0b:f7:5e:31:15:0f:b0:de:b6:47:b6:0a:f7:a3:50:
                    66:e6:66:d5:da:1a:d6:cf:a7:50:12:fe:15:b9:1e:
                    cf:8e:60:48:3c:b1:2e:f0:ed:37:48:28:ba:13:1b:
                    05:e0:0b:b4:5e:6c:39:38:c7:49:88:42:57:d3:5e:
                    17:9a:06:2e:84:35:c9:c7:26:ef:88:74:1e:9b:d4:
                    93:82:b1:d1:b1:3c:70:70:36:3e:a7:79:20:8b:63:
                    d8:e7:27:37:11:24:86:0c:7d:bd:ce:06:77:12:25:
                    2d:98:0a:ef:29:35:e0:af:50:43:78:dc:74:3c:27:
                    c7:1c:ca:20:02:06:48:50:47:b3:89:02:47:0d:7b:
                    71:10:c2:6c:18:c8:86:f6:8c:09:5c:16:71:f3:ed:
                    79:a7:5a:60:d0:4a:c3:99:3c:c8:79:02:da:a2:bd:
                    fd:2a:04:c8:c3:a1:26:86:27:61:d7:20:1c:ec:df:
                    8f:6f:5b:1e:2b:7a:34:be:a2:d1:0f:dc:b8:87:2d:
                    4f:ab:0f:9b:ad:9f:3a:28:33:8c:2d:cb:21:94:4e:
                    2b:dc:7f:25:71:8c:16:c8:85:84:a9:da:da:40:c6:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2C:23:6B:85:23:90:E7:FC:6F:56:24:5A:C1:59:57:F0:0D:FE:7C
            X509v3 Authority Key Identifier:
                keyid:20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/3138372e3131312e31362e302f32312d3231203d3e203533313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:13:7f:bf:46:9a:b8:e5:92:a5:c2:9d:d3:7d:e9:79:e2:
         3f:30:94:a4:b4:44:6c:20:9b:15:68:cc:c7:d1:48:7c:48:09:
         bb:d5:9e:89:08:08:33:ff:46:d3:30:39:c2:9a:fd:72:f2:55:
         6d:c2:e4:da:cb:e7:2c:c8:91:d5:d5:e2:ef:d3:88:d2:a5:8e:
         cc:91:7c:e3:9a:03:5f:9d:57:bb:67:aa:ad:8d:74:a3:67:57:
         d2:f0:04:51:2b:41:2a:72:61:03:54:de:2b:28:f7:9c:1c:cb:
         b2:2c:c7:19:2d:6b:5c:5b:91:00:ca:5f:b4:ce:28:23:85:f4:
         fb:e0:84:49:c5:14:83:7d:d8:04:72:ba:80:4f:ca:4a:74:1f:
         a6:2c:2f:31:5d:a0:c7:05:84:82:9d:87:73:f2:f3:db:53:7c:
         d1:30:78:25:ab:8d:91:e9:ce:2c:62:7a:b3:56:db:be:88:c8:
         c7:98:cb:9e:fa:2e:25:6b:65:64:0a:9d:b2:41:b8:df:ea:5b:
         3d:c2:40:a2:6b:af:84:1a:17:5c:5f:f0:96:77:3e:35:56:b1:
         fd:58:07:69:2e:22:e8:21:4f:08:b3:0d:39:9e:1e:68:bf:cd:
         62:cf:59:d4:3c:20:d1:37:65:a0:ad:1f:e3:4b:94:44:01:0c:
         04:35:0f:8b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNsuXNoEJe4buZOwtQ8pWMNzG3r0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBERjNERUJEMDQzRERDNUQ2QjgxQTZFOEU1RkUwNDYw
QUY4REQ1QzAeFw0yMjEwMDYxOTQ5MzJaFw0yMzEwMDUxOTU0MzJaMDMxMTAvBgNV
BAMTKDNCMkMyMzZCODUyMzkwRTdGQzZGNTYyNDVBQzE1OTU3RjAwREZFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyeDmv4iAltj6XAPqnf0Evr6Q
1+TsaOinBXZGIwv3XjEVD7Detke2CvejUGbmZtXaGtbPp1AS/hW5Hs+OYEg8sS7w
7TdIKLoTGwXgC7RebDk4x0mIQlfTXheaBi6ENcnHJu+IdB6b1JOCsdGxPHBwNj6n
eSCLY9jnJzcRJIYMfb3OBncSJS2YCu8pNeCvUEN43HQ8J8ccyiACBkhQR7OJAkcN
e3EQwmwYyIb2jAlcFnHz7XmnWmDQSsOZPMh5Atqivf0qBMjDoSaGJ2HXIBzs349v
Wx4rejS+otEP3LiHLU+rD5utnzooM4wtyyGUTivcfyVxjBbIhYSp2tpAxvwlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOywja4UjkOf8b1YkWsFZV/AN/nwwHwYDVR0j
BBgwFoAUIN8969BD3cXWuBpujl/gRgr43VwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru
eW8vMC8yMERGM0RFQkQwNDNEREM1RDZCODFBNkU4RTVGRTA0NjBBRjhERDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwREYzREVCRDA0M0REQzVE
NkI4MUE2RThFNUZFMDQ2MEFGOERENUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1cmNBSnpNRkxGOGU0Z3BINkplalJEcTNqdlBKamJrbTFtOW1SQlNEbnlvLzAv
MzEzODM3MmUzMTMxMzEyZTMxMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMz
MzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDu28QMA0GCSqGSIb3DQEBCwUAA4IBAQCIChN/v0aa
uOWSpcKd033peeI/MJSktERsIJsVaMzH0Uh8SAm71Z6JCAgz/0bTMDnCmv1y8lVt
wuTay+csyJHV1eLv04jSpY7MkXzjmgNfnVe7Z6qtjXSjZ1fS8ARRK0EqcmEDVN4r
KPecHMuyLMcZLWtcW5EAyl+0zigjhfT74IRJxRSDfdgEcrqAT8pKdB+mLC8xXaDH
BYSCnYdz8vPbU3zRMHglq42R6c4sYnqzVtu+iMjHmMue+i4la2VkCp2yQbjf6ls9
wkCia6+EGhdcX/CWdz41VrH9WAdpLiLoIU8Isw05nh5ov81iz1nUPCDRN2WgrR/j
S5REAQwENQ+L
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org