Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e372e302f32342d3234203d3e20323730353834.roa
File:                     3138372e39342e372e302f32342d3234203d3e20323730353834.roa (raw, json)
Hash identifier:          ibKrbqrtlQ3oifmrmWr9oMaEeJt5HRpZD0jD/EoIdSU=
Subject key identifier:   C0:0A:5C:EE:B2:11:A6:3F:2D:13:C0:B3:03:4A:A3:86:62:79:63:B1
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       4CFD28CC60F389A0AF6E1B2FEAD17C377307EFEB
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e372e302f32342d3234203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:17 +0000
ROA not before:           Fri 31 Mar 2023 16:27:17 +0000
ROA not after:            Fri 29 Mar 2024 16:32:17 +0000
asID:                     270584
IP address blocks:        187.94.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fd:28:cc:60:f3:89:a0:af:6e:1b:2f:ea:d1:7c:37:73:07:ef:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:17 2023 GMT
            Not After : Mar 29 16:32:17 2024 GMT
        Subject: CN=C00A5CEEB211A63F2D13C0B3034AA386627963B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:08:0e:b7:c2:e6:d2:c1:ef:b2:42:ab:1d:
                    7e:85:cb:47:2c:ce:17:8a:a0:cf:f4:5b:f4:54:8f:
                    bb:12:a9:17:cc:bf:6d:b4:e4:cb:16:e9:ec:78:4e:
                    08:f1:3d:35:2b:89:47:2a:ed:e3:74:5d:55:d7:75:
                    f4:9e:be:d6:c1:ee:42:d5:29:5a:04:24:bc:9f:46:
                    09:a7:af:19:af:76:68:28:0a:d3:28:3c:99:74:5d:
                    b4:62:7e:fd:5f:6a:51:87:4a:57:fd:82:a6:da:e4:
                    1d:b8:3d:79:f6:b2:50:72:fc:45:12:5e:62:7a:d2:
                    a8:a6:6b:2d:56:17:df:cf:04:1a:26:cc:be:66:1d:
                    c9:aa:28:e6:b0:77:2a:9a:3c:b9:27:fb:9d:24:30:
                    b7:c5:2b:eb:45:9f:fc:88:8d:7e:ef:ef:64:91:0f:
                    b3:d4:96:22:a7:12:85:e3:88:a8:14:82:6b:e4:27:
                    02:0d:20:c6:03:30:70:8b:83:2c:0b:77:42:36:f6:
                    eb:d4:cc:7a:7c:28:17:21:b6:83:2d:be:d8:be:94:
                    e6:0a:dc:d9:b7:f2:e2:5e:85:da:f8:9f:f4:69:d1:
                    4f:cb:d5:67:93:0a:d7:17:ac:f1:18:6a:41:d6:79:
                    e8:8a:ab:48:82:69:db:91:fc:41:f0:2f:1e:7f:90:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0A:5C:EE:B2:11:A6:3F:2D:13:C0:B3:03:4A:A3:86:62:79:63:B1
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e372e302f32342d3234203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:11:af:80:23:0e:60:9c:61:fc:d3:44:88:d5:5c:cc:52:72:
         36:7e:73:68:41:12:c3:7c:0b:c9:94:ca:e3:33:4d:96:98:df:
         d2:66:4f:e6:a2:96:2e:72:11:73:74:15:20:48:af:b7:45:aa:
         5b:62:0d:1a:55:e4:6a:09:d7:52:6b:d4:4c:10:b7:ab:4c:be:
         74:34:12:77:8c:e0:88:d6:f2:b5:bd:9f:05:6d:3b:d1:a4:4e:
         cb:1e:be:c6:e2:a9:33:3f:fc:86:df:0b:35:ee:8b:6f:31:84:
         bc:ab:5f:cc:8f:6e:19:17:49:e7:3b:f3:ca:55:69:a5:2a:ff:
         39:33:0e:e7:14:ba:a8:82:c3:1a:e5:e3:cf:7e:7f:b5:de:07:
         af:e4:09:96:62:7c:a2:5a:7a:f1:5b:93:41:b0:4a:76:a2:34:
         39:93:79:ee:1e:71:10:2e:87:be:72:46:74:f0:9a:70:9c:77:
         04:c3:5c:cc:4e:41:fb:d4:78:ff:f5:23:5f:1a:34:47:87:62:
         1c:e5:4b:c6:95:e2:e9:b0:95:9d:75:f7:8d:4a:49:58:6a:a4:
         11:da:2f:14:97:8c:8b:56:f3:b5:41:ba:41:17:31:b1:bf:cc:
         e1:66:36:8a:c0:10:64:e9:8c:ea:30:aa:d9:b7:a6:83:92:aa:
         d0:02:c6:c3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUTP0ozGDziaCvbhsv6tF8N3MH7+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlBRUVFNTY3QjA3QkZFRkZFQkE2N0VBNUE4NzJBNjdB
RTI4QTlDNzAeFw0yMzAzMzExNjI3MTdaFw0yNDAzMjkxNjMyMTdaMDMxMTAvBgNV
BAMTKEMwMEE1Q0VFQjIxMUE2M0YyRDEzQzBCMzAzNEFBMzg2NjI3OTYzQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74AgOt8Lm0sHvskKrHX6Fy0cs
zheKoM/0W/RUj7sSqRfMv2205MsW6ex4TgjxPTUriUcq7eN0XVXXdfSevtbB7kLV
KVoEJLyfRgmnrxmvdmgoCtMoPJl0XbRifv1falGHSlf9gqba5B24PXn2slBy/EUS
XmJ60qimay1WF9/PBBomzL5mHcmqKOawdyqaPLkn+50kMLfFK+tFn/yIjX7v72SR
D7PUliKnEoXjiKgUgmvkJwINIMYDMHCLgywLd0I29uvUzHp8KBchtoMtvti+lOYK
3Nm38uJehdr4n/Rp0U/L1WeTCtcXrPEYakHWeeiKq0iCaduR/EHwLx5/kMrPAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUwApc7rIRpj8tE8CzA0qjhmJ5Y7EwHwYDVR0j
BBgwFoAUaa7uVnsHv+/+umfqWocqZ64oqccwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uYWZjMURMb2I4MWVhazl2cTRxNm5qTWpMQmFWR3A0VWRFTnRCYm5wRW5L
LzAvNjlBRUVFNTY3QjA3QkZFRkZFQkE2N0VBNUE4NzJBNjdBRTI4QTlDNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82OUFFRUU1NjdCMDdCRkVGRkVC
QTY3RUE1QTg3MkE2N0FFMjhBOUM3LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
YWZjMURMb2I4MWVhazl2cTRxNm5qTWpMQmFWR3A0VWRFTnRCYm5wRW5LLzAvMzEz
ODM3MmUzOTM0MmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDM1Mzgz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALteBzANBgkqhkiG9w0BAQsFAAOCAQEAExGvgCMOYJxh/NNE
iNVczFJyNn5zaEESw3wLyZTK4zNNlpjf0mZP5qKWLnIRc3QVIEivt0WqW2INGlXk
agnXUmvUTBC3q0y+dDQSd4zgiNbytb2fBW070aROyx6+xuKpMz/8ht8LNe6LbzGE
vKtfzI9uGRdJ5zvzylVppSr/OTMO5xS6qILDGuXjz35/td4Hr+QJlmJ8olp68VuT
QbBKdqI0OZN57h5xEC6HvnJGdPCacJx3BMNczE5B+9R4//UjXxo0R4diHOVLxpXi
6bCVnXX3jUpJWGqkEdovFJeMi1bztUG6QRcxsb/M4WY2isAQZOmM6jCq2bemg5Kq
0ALGww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org