Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3138362e3235302e3230302e302f32332d3233203d3e203238313632.roa
File:                     3138362e3235302e3230302e302f32332d3233203d3e203238313632.roa (raw, json)
Hash identifier:          IyaZN7KtZfkFg2Wm1BzUKQvjquSrbibqTFUdfbEMvvY=
Subject key identifier:   04:27:19:17:40:89:B4:71:C9:00:4F:29:42:75:C1:77:7B:74:0A:FD
Certificate issuer:       /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial:       121A47A3613D71675DEC47950D46C749F6228C1B
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3138362e3235302e3230302e302f32332d3233203d3e203238313632.roa
Signing time:             Fri 03 Nov 2023 19:36:15 +0000
ROA not before:           Fri 03 Nov 2023 19:31:15 +0000
ROA not after:            Fri 01 Nov 2024 19:36:15 +0000
asID:                     28162
IP address blocks:        186.250.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1a:47:a3:61:3d:71:67:5d:ec:47:95:0d:46:c7:49:f6:22:8c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
        Validity
            Not Before: Nov  3 19:31:15 2023 GMT
            Not After : Nov  1 19:36:15 2024 GMT
        Subject: CN=042719174089B471C9004F294275C1777B740AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:e6:f4:02:5e:f8:b4:8d:c6:f4:5e:27:a5:
                    03:6c:14:68:84:5e:65:16:31:8a:d3:59:7e:17:b3:
                    08:f1:92:2d:b5:66:03:3e:b6:be:c1:ee:63:a9:06:
                    9a:b1:9d:ed:3d:cb:61:dd:40:44:e6:e7:b7:e7:c3:
                    9e:fb:cf:a2:ed:52:fe:eb:d2:e3:3a:87:89:c5:61:
                    32:49:03:bd:8b:12:06:d8:6e:56:d8:49:70:2d:16:
                    9a:d4:8a:50:d0:56:3a:fb:8b:18:17:48:c8:d8:03:
                    2d:64:22:3c:3d:5f:8c:9b:90:8f:e2:9d:61:64:4c:
                    2a:0a:bc:0f:d1:5e:b0:99:64:c6:f0:41:b1:11:11:
                    44:46:1f:3c:d6:3b:e1:b1:ce:91:ad:51:5b:83:2e:
                    95:b0:65:b7:f7:79:a9:c6:2e:a7:6d:14:84:a1:33:
                    36:a5:97:63:85:3b:7c:dc:ba:57:a3:39:ce:37:69:
                    03:56:8e:ac:13:2c:a1:b7:ae:ec:f9:fc:9a:49:76:
                    12:cf:22:d4:b4:87:9c:02:e7:8c:91:b2:c5:be:2e:
                    24:fb:96:01:07:71:57:c6:22:14:8f:fa:1a:a1:52:
                    82:1b:f2:31:2e:af:48:6e:2a:5d:1c:c2:79:65:91:
                    8f:84:9d:dd:12:0e:0f:7a:64:b5:7d:d2:b2:4e:2b:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:27:19:17:40:89:B4:71:C9:00:4F:29:42:75:C1:77:7B:74:0A:FD
            X509v3 Authority Key Identifier:
                keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3138362e3235302e3230302e302f32332d3233203d3e203238313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:9d:5a:d4:30:1a:a8:5e:16:7e:ef:45:62:91:f0:cb:a7:6a:
         f4:ca:c7:72:b8:60:d0:f2:98:c6:13:67:65:e8:58:42:50:4d:
         36:f5:c7:15:62:db:0b:00:34:4a:a5:e8:62:49:a4:9f:33:53:
         13:fc:25:e1:1b:24:51:43:4a:f9:61:9b:8f:a6:ba:8a:66:8b:
         bf:f4:40:37:d4:e6:65:61:b3:cd:ae:24:df:7c:b6:14:a5:e9:
         b7:b0:40:f4:7f:f7:fd:49:38:ac:8e:f3:f3:b7:df:b2:b2:62:
         e5:c5:9e:4c:8a:9e:75:fc:1c:e6:c2:17:1b:c8:ad:71:6f:ef:
         46:b0:7c:6c:58:a3:8b:8a:fb:5b:0d:ba:f4:91:ae:a7:4d:dc:
         fa:00:b1:ff:58:a8:d7:5f:04:cf:99:6a:f6:4c:f4:95:c8:46:
         a3:f3:c3:1a:0f:24:b4:b2:ca:f6:2f:29:0c:ce:02:75:cf:6f:
         f4:28:d7:3a:5c:71:b3:2f:0e:eb:40:56:90:7a:b8:0a:0d:c0:
         07:76:6c:f4:4b:34:d9:41:35:34:e8:a7:3d:14:77:48:a3:07:
         8f:7a:91:2f:9f:a0:7e:43:f2:68:dd:9a:0f:c6:c5:d3:41:e8:
         52:a9:d4:f3:ac:43:dd:2a:53:5e:de:61:65:56:f0:79:7c:64:
         af:bf:06:48
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUEhpHo2E9cWdd7EeVDUbHSfYijBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY3MERDNDE4MzQ5QUNFNUJFRkJGMDA3MjlCRDI4REQ0
QUMyNUNENjAeFw0yMzExMDMxOTMxMTVaFw0yNDExMDExOTM2MTVaMDMxMTAvBgNV
BAMTKDA0MjcxOTE3NDA4OUI0NzFDOTAwNEYyOTQyNzVDMTc3N0I3NDBBRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNub0Al74tI3G9F4npQNsFGiE
XmUWMYrTWX4Xswjxki21ZgM+tr7B7mOpBpqxne09y2HdQETm57fnw577z6LtUv7r
0uM6h4nFYTJJA72LEgbYblbYSXAtFprUilDQVjr7ixgXSMjYAy1kIjw9X4ybkI/i
nWFkTCoKvA/RXrCZZMbwQbEREURGHzzWO+GxzpGtUVuDLpWwZbf3eanGLqdtFISh
Mzall2OFO3zculejOc43aQNWjqwTLKG3ruz5/JpJdhLPItS0h5wC54yRssW+LiT7
lgEHcVfGIhSP+hqhUoIb8jEur0huKl0cwnllkY+End0SDg96ZLV90rJOKy6JAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUBCcZF0CJtHHJAE8pQnXBd3t0Cv0wHwYDVR0j
BBgwFoAUH3DcQYNJrOW++/AHKb0o3UrCXNYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzAvMUY3MERDNDE4MzQ5QUNFNUJFRkJGMDA3MjlCRDI4REQ0QUMyNUNENi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8xRjcwREM0MTgzNDlBQ0U1QkVG
QkYwMDcyOUJEMjhERDRBQzI1Q0Q2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzAvMzEz
ODM2MmUzMjM1MzAyZTMyMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzgz
MTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAG6+sgwDQYJKoZIhvcNAQELBQADggEBAHudWtQwGqhe
Fn7vRWKR8MunavTKx3K4YNDymMYTZ2XoWEJQTTb1xxVi2wsANEql6GJJpJ8zUxP8
JeEbJFFDSvlhm4+muopmi7/0QDfU5mVhs82uJN98thSl6bewQPR/9/1JOKyO8/O3
37KyYuXFnkyKnnX8HObCFxvIrXFv70awfGxYo4uK+1sNuvSRrqdN3PoAsf9YqNdf
BM+ZavZM9JXIRqPzwxoPJLSyyvYvKQzOAnXPb/Qo1zpccbMvDutAVpB6uAoNwAd2
bPRLNNlBNTTopz0Ud0ijB496kS+foH5D8mjdmg/GxdNB6FKp1POsQ90qU17eYWVW
8Hl8ZK+/Bkg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org