Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3138392e392e302e302f31362d3234203d3e203130393534.roa
File:                     3138392e392e302e302f31362d3234203d3e203130393534.roa (raw, json)
Hash identifier:          sg+oWrlVLhOQxba+gZXMsUaY4o4tDNIapwgRAijireE=
Subject key identifier:   0C:41:DE:68:0D:FE:21:48:B0:96:26:FF:47:37:13:2C:7C:7B:75:14
Certificate issuer:       /CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
Certificate serial:       0FA6FB065AC9EDB9DE7E73851CBC41A8C4C80AD1
Authority key identifier: 7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3138392e392e302e302f31362d3234203d3e203130393534.roa
Signing time:             Thu 22 Jun 2023 18:19:16 +0000
ROA not before:           Thu 22 Jun 2023 18:14:16 +0000
ROA not after:            Thu 20 Jun 2024 18:19:16 +0000
asID:                     10954
IP address blocks:        189.9.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a6:fb:06:5a:c9:ed:b9:de:7e:73:85:1c:bc:41:a8:c4:c8:0a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
        Validity
            Not Before: Jun 22 18:14:16 2023 GMT
            Not After : Jun 20 18:19:16 2024 GMT
        Subject: CN=0C41DE680DFE2148B09626FF4737132C7C7B7514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:9c:79:5d:3e:32:49:c4:24:78:19:c7:f9:
                    ab:f9:cb:90:0c:c1:76:58:7d:4d:bc:53:19:58:70:
                    67:a7:0d:07:61:32:41:97:cf:1d:6d:60:dd:ed:64:
                    bd:d1:ea:c4:1b:08:f2:c7:2d:8e:78:f5:e8:ee:ef:
                    f6:90:7e:b4:b0:aa:2d:c4:b9:29:92:16:82:dd:fd:
                    97:34:25:c2:c1:ee:87:0c:2f:e0:c0:7b:4a:55:26:
                    ef:c1:1c:57:94:fd:1e:77:82:5c:d3:bf:d4:1e:6f:
                    58:27:10:ad:fb:21:b0:a9:e1:7f:f8:05:c2:ff:04:
                    4d:22:33:10:f1:ff:90:71:94:17:76:90:e9:1a:63:
                    1a:0c:ac:ab:8b:eb:b0:0f:b7:9e:52:c1:35:62:59:
                    69:c7:57:51:22:bb:84:02:eb:6e:58:2d:79:ff:c9:
                    d1:5c:92:78:86:75:37:d2:21:b3:79:85:fb:01:1a:
                    b5:33:a3:d2:e5:36:49:85:05:b6:49:1b:47:bb:ab:
                    07:94:d3:12:9d:88:da:ac:e9:cd:82:49:a7:84:8f:
                    f3:f7:18:e7:07:55:87:a9:95:5e:b5:d9:58:e4:4f:
                    12:3c:ea:29:84:7a:8e:35:bc:b2:05:54:91:c5:c5:
                    a4:22:f2:f4:f9:c8:4e:77:41:d7:90:30:03:fc:e6:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:41:DE:68:0D:FE:21:48:B0:96:26:FF:47:37:13:2C:7C:7B:75:14
            X509v3 Authority Key Identifier:
                keyid:7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3138392e392e302e302f31362d3234203d3e203130393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.9.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c9:93:e9:31:30:b2:53:67:1d:2c:95:4f:14:12:b5:9f:4d:3d:
         c7:9a:c1:d3:fd:bc:06:9c:fc:b3:28:61:11:72:03:fd:3b:8f:
         3c:c1:94:91:58:41:13:8f:2a:26:08:d4:7b:5f:bc:f8:5b:f0:
         4b:3b:8f:91:65:17:43:23:aa:b0:01:40:2f:f3:6b:7b:ff:99:
         e0:70:9e:db:44:d4:f4:b2:db:46:bf:28:9a:c8:a8:97:c4:d9:
         7a:ca:41:5d:5b:b7:78:c2:c2:b4:bc:76:ec:b1:16:cf:7e:1d:
         66:a8:cb:38:22:7f:99:c2:c2:51:34:59:b4:a0:98:e1:85:e5:
         79:3b:2a:d6:34:ec:f8:c4:bb:e5:83:ae:22:6f:9b:da:11:a8:
         95:5f:2b:a8:8e:56:0d:14:59:ef:d4:81:cd:ae:07:44:b8:b0:
         79:c0:f8:5d:75:33:74:12:77:ee:ee:b7:8a:4b:92:63:5a:1f:
         35:4e:e6:db:3a:3c:22:cb:26:32:92:3c:af:82:09:47:b8:71:
         77:89:34:ea:3b:6e:0a:a1:de:eb:62:3a:68:0e:1c:fc:5a:84:
         75:d6:ab:c7:bd:fe:59:74:e1:c2:36:be:47:64:0b:4c:e9:e6:
         35:8c:3c:35:48:90:57:ec:b5:3f:1f:55:de:3e:f9:41:e8:1a:
         6c:69:26:06
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUD6b7BlrJ7bnefnOFHLxBqMTICtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EzRjkwN0E3RjFFODJBMzEyQTlFQ0QyQzRBM0U0MjAz
MzlDMkM2QTAeFw0yMzA2MjIxODE0MTZaFw0yNDA2MjAxODE5MTZaMDMxMTAvBgNV
BAMTKDBDNDFERTY4MERGRTIxNDhCMDk2MjZGRjQ3MzcxMzJDN0M3Qjc1MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVBpx5XT4yScQkeBnH+av5y5AM
wXZYfU28UxlYcGenDQdhMkGXzx1tYN3tZL3R6sQbCPLHLY549eju7/aQfrSwqi3E
uSmSFoLd/Zc0JcLB7ocML+DAe0pVJu/BHFeU/R53glzTv9Qeb1gnEK37IbCp4X/4
BcL/BE0iMxDx/5BxlBd2kOkaYxoMrKuL67APt55SwTViWWnHV1Eiu4QC625YLXn/
ydFckniGdTfSIbN5hfsBGrUzo9LlNkmFBbZJG0e7qweU0xKdiNqs6c2CSaeEj/P3
GOcHVYeplV612VjkTxI86imEeo41vLIFVJHFxaQi8vT5yE53QdeQMAP85qfPAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUDEHeaA3+IUiwlib/RzcTLHx7dRQwHwYDVR0j
BBgwFoAUej+Qen8egqMSqezSxKPkIDOcLGowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2VScnVaRzJIRmZkUlZtOFJuTFVVQnB5M3NNRkpVdEtLWnBhMTFDQXoy
Y20vMC83QTNGOTA3QTdGMUU4MkEzMTJBOUVDRDJDNEEzRTQyMDMzOUMyQzZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBM0Y5MDdBN0YxRTgyQTMx
MkE5RUNEMkM0QTNFNDIwMzM5QzJDNkEuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NlUnJ1WkcySEZmZFJWbThSbkxVVUJweTNzTUZKVXRLS1pwYTExQ0F6MmNtLzAv
MzEzODM5MmUzOTJlMzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMTMwMzkzNTM0
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8w
DTALBAIAATAFAwMAvQkwDQYJKoZIhvcNAQELBQADggEBAMmT6TEwslNnHSyVTxQS
tZ9NPceawdP9vAac/LMoYRFyA/07jzzBlJFYQROPKiYI1HtfvPhb8Es7j5FlF0Mj
qrABQC/za3v/meBwnttE1PSy20a/KJrIqJfE2XrKQV1bt3jCwrS8duyxFs9+HWao
yzgif5nCwlE0WbSgmOGF5Xk7KtY07PjEu+WDriJvm9oRqJVfK6iOVg0UWe/Ugc2u
B0S4sHnA+F11M3QSd+7ut4pLkmNaHzVO5ts6PCLLJjKSPK+CCUe4cXeJNOo7bgqh
3utiOmgOHPxahHXWq8e9/ll04cI2vkdkC0zp5jWMPDVIkFfstT8fVd4++UHoGmxp
JgY=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:19 2024 by rpki-client on console-ams.rpki-client.org