Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/3138392e3131332e3131322e302f32302d3234203d3e203238323133.roa
File:                     3138392e3131332e3131322e302f32302d3234203d3e203238323133.roa (raw, json)
Hash identifier:          zRbLuj+AQHiHILe9jue9mbsWc3GCFDPRtOFeMqeNoJw=
Subject key identifier:   69:1B:CF:53:72:A9:8D:24:34:8A:B0:89:60:15:2F:7D:DA:7C:45:5C
Certificate issuer:       /CN=B4DFF47C5B3118AFC71F35AA50D26565D807E777
Certificate serial:       7C8230A0844DCF44E435A5CDBD9D3FCBB6A1872E
Authority key identifier: B4:DF:F4:7C:5B:31:18:AF:C7:1F:35:AA:50:D2:65:65:D8:07:E7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/3138392e3131332e3131322e302f32302d3234203d3e203238323133.roa
Signing time:             Wed 03 Jan 2024 11:41:29 +0000
ROA not before:           Wed 03 Jan 2024 11:36:29 +0000
ROA not after:            Fri 03 Jan 2025 11:41:29 +0000
asID:                     28213
IP address blocks:        189.113.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:82:30:a0:84:4d:cf:44:e4:35:a5:cd:bd:9d:3f:cb:b6:a1:87:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DFF47C5B3118AFC71F35AA50D26565D807E777
        Validity
            Not Before: Jan  3 11:36:29 2024 GMT
            Not After : Jan  3 11:41:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:cc:59:b6:ba:88:9c:af:b8:88:a5:d1:96:
                    04:d5:70:09:49:b3:85:24:96:91:47:dd:d9:9f:30:
                    3a:f8:22:be:12:e1:79:8c:0d:c1:3c:db:f9:2d:ab:
                    a6:51:5e:b3:b6:e3:05:ee:a2:58:1d:9e:f0:34:c6:
                    f0:8b:03:50:21:61:f8:62:11:8e:20:40:23:9c:ee:
                    d2:6c:7f:34:44:db:47:75:fa:3e:97:1e:bd:9a:a1:
                    56:9a:c9:db:f5:a0:3d:64:52:8e:4f:b8:fb:6a:af:
                    89:a3:d9:05:b0:f4:72:e4:86:10:f6:56:4c:d2:11:
                    4d:a5:ec:9c:86:8e:d2:07:67:91:ba:0c:3c:cf:48:
                    c4:d0:b8:ea:bd:df:28:1a:ed:a4:3a:47:d2:32:8b:
                    b7:19:5b:1f:58:36:42:62:35:01:66:2e:ca:01:48:
                    48:81:3e:6e:fd:54:ae:72:de:10:52:f8:17:41:34:
                    fb:ed:c8:e7:80:24:bd:52:df:b5:b9:f7:ce:b5:76:
                    79:eb:03:1b:22:9f:1e:ab:8d:52:30:79:ce:96:8e:
                    2c:79:87:09:02:74:a1:ee:d4:a4:35:f8:fb:a9:ad:
                    50:65:68:9d:e0:b3:88:80:ff:6a:43:02:5d:43:7d:
                    a0:87:3b:fb:25:bc:0d:90:53:fc:90:16:a5:d0:4a:
                    3b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1B:CF:53:72:A9:8D:24:34:8A:B0:89:60:15:2F:7D:DA:7C:45:5C
            X509v3 Authority Key Identifier:
                keyid:B4:DF:F4:7C:5B:31:18:AF:C7:1F:35:AA:50:D2:65:65:D8:07:E7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/3138392e3131332e3131322e302f32302d3234203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:db:56:98:4d:cf:62:5f:23:c1:07:15:f0:b5:2d:18:87:a0:
         80:6c:e0:4c:d3:83:6c:bd:3c:36:ab:cb:0b:a8:65:57:01:f5:
         5b:cb:7b:4c:ce:10:60:a5:69:6e:94:24:95:50:80:95:c6:bc:
         8c:a9:6f:08:10:23:ee:71:b6:d0:d0:e5:7f:28:b8:0a:79:f7:
         ed:20:8b:b6:aa:3a:fa:03:d6:24:a1:fb:8c:a0:97:04:38:e3:
         1a:79:8f:90:a4:3b:8b:52:83:9a:6e:47:99:65:fd:e3:e4:da:
         98:f7:16:ac:10:4e:30:c0:76:71:7f:d6:53:6b:fa:b4:05:c1:
         f5:4a:8c:c9:46:7e:d9:e2:1e:0d:3a:e9:33:0b:0a:07:b2:93:
         fe:9b:d4:61:0f:97:4f:8b:98:74:df:e4:6e:06:6f:00:6e:53:
         ea:30:25:90:75:ae:78:49:b7:ba:2a:3c:3e:eb:42:5e:a5:b6:
         a7:18:a8:ef:61:35:85:50:43:38:8c:6f:d5:6a:4a:b4:dd:a9:
         4b:88:46:48:ea:30:ac:a9:5c:5c:a8:32:0a:d8:89:b6:a9:4c:
         7b:cb:0f:92:36:81:3c:8e:14:c8:c6:7a:34:96:c1:89:a0:54:
         1e:30:c3:be:71:a9:76:22:0f:bd:a7:07:2e:6f:90:cc:b8:22:
         df:cd:19:a4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfIIwoIRNz0TkNaXNvZ0/y7ahhy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRERkY0N0M1QjMxMThBRkM3MUYzNUFBNTBEMjY1NjVE
ODA3RTc3NzAeFw0yNDAxMDMxMTM2MjlaFw0yNTAxMDMxMTQxMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDZCQUNDNTlCNkJBODg5Q0FG
Qjg4OEE1RDE5NjA0RDU3MDA5NDlCMzg1MjQ5NjkxNDdEREQ5OUYzMDNBRjgyMkJF
MTJFMTc5OEMwREMxM0NEQkY5MkRBQkE2NTE1RUIzQjZFMzA1RUVBMjU4MUQ5RUYw
MzRDNkYwOEIwMzUwMjE2MUY4NjIxMThFMjA0MDIzOUNFRUQyNkM3RjM0NDREQjQ3
NzVGQTNFOTcxRUJEOUFBMTU2OUFDOURCRjVBMDNENjQ1MjhFNEZCOEZCNkFBRjg5
QTNEOTA1QjBGNDcyRTQ4NjEwRjY1NjRDRDIxMTREQTVFQzlDODY4RUQyMDc2Nzkx
QkEwQzNDQ0Y0OEM0RDBCOEVBQkRERjI4MUFFREE0M0E0N0QyMzI4QkI3MTk1QjFG
NTgzNjQyNjIzNTAxNjYyRUNBMDE0ODQ4ODEzRTZFRkQ1NEFFNzJERTEwNTJGODE3
NDEzNEZCRURDOEU3ODAyNEJENTJERkI1QjlGN0NFQjU3Njc5RUIwMzFCMjI5RjFF
QUI4RDUyMzA3OUNFOTY4RTJDNzk4NzA5MDI3NEExRUVENEE0MzVGOEZCQTlBRDUw
NjU2ODlERTBCMzg4ODBGRjZBNDMwMjVENDM3REEwODczQkZCMjVCQzBEOTA1M0ZD
OTAxNkE1RDA0QTNCOTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1rrMWba6iJyvuIil0ZYE1XAJSbOFJJaRR93ZnzA6+CK+EuF5jA3B
PNv5LaumUV6ztuMF7qJYHZ7wNMbwiwNQIWH4YhGOIEAjnO7SbH80RNtHdfo+lx69
mqFWmsnb9aA9ZFKOT7j7aq+Jo9kFsPRy5IYQ9lZM0hFNpeycho7SB2eRugw8z0jE
0Ljqvd8oGu2kOkfSMou3GVsfWDZCYjUBZi7KAUhIgT5u/VSuct4QUvgXQTT77cjn
gCS9Ut+1uffOtXZ56wMbIp8eq41SMHnOlo4seYcJAnSh7tSkNfj7qa1QZWid4LOI
gP9qQwJdQ32ghzv7JbwNkFP8kBal0Eo7kQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGkbz1NyqY0kNIqwiWAVL33afEVcMB8GA1UdIwQYMBaAFLTf9HxbMRivxx81qlDS
ZWXYB+d3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NMMTU4elVuR0NCQ05p
dG9RWWFaR2pEcncyanFuc3FEN055U3g5VGdlTFJ1LzAvQjRERkY0N0M1QjMxMThB
RkM3MUYzNUFBNTBEMjY1NjVEODA3RTc3Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNERGRjQ3QzVCMzExOEFGQzcxRjM1QUE1MEQyNjU2NUQ4MDdF
Nzc3LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DTDE1OHpVbkdDQkNOaXRvUVlh
WkdqRHJ3MmpxbnNxRDdOeVN4OVRnZUxSdS8wLzMxMzgzOTJlMzEzMTMzMmUzMTMx
MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzIzMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
vXFwMA0GCSqGSIb3DQEBCwUAA4IBAQBz21aYTc9iXyPBBxXwtS0Yh6CAbOBM04Ns
vTw2q8sLqGVXAfVby3tMzhBgpWlulCSVUICVxryMqW8IECPucbbQ0OV/KLgKefft
IIu2qjr6A9YkofuMoJcEOOMaeY+QpDuLUoOabkeZZf3j5NqY9xasEE4wwHZxf9ZT
a/q0BcH1SozJRn7Z4h4NOukzCwoHspP+m9RhD5dPi5h03+RuBm8AblPqMCWQda54
Sbe6Kjw+60JepbanGKjvYTWFUEM4jG/Vakq03alLiEZI6jCsqVxcqDIK2Im2qUx7
yw+SNoE8jhTIxno0lsGJoFQeMMO+cal2Ig+9pwcub5DMuCLfzRmk
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org