Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa
File:                     3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa (raw, json)
Hash identifier:          9q2sxy9KlyZEj+LZCMWWM0ZW+I4b1aJRb4egl1rmavM=
Subject key identifier:   68:6D:7B:0F:47:54:97:8A:6E:F8:52:0A:04:76:04:A9:C5:38:F5:5C
Certificate issuer:       /CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
Certificate serial:       57872234843D1B1EBE95F4AE4D1BFABDCC7D0F75
Authority key identifier: 2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa
Signing time:             Mon 24 Jul 2023 01:00:00 +0000
ROA not before:           Mon 24 Jul 2023 00:55:00 +0000
ROA not after:            Mon 22 Jul 2024 01:00:00 +0000
asID:                     270716
IP address blocks:        189.127.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:87:22:34:84:3d:1b:1e:be:95:f4:ae:4d:1b:fa:bd:cc:7d:0f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
        Validity
            Not Before: Jul 24 00:55:00 2023 GMT
            Not After : Jul 22 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:f5:8a:04:c4:8a:df:7c:7a:30:9f:7f:e0:
                    92:90:1a:f6:ab:29:66:c7:4c:c7:25:7a:ac:ea:ce:
                    ca:be:56:69:da:dd:42:d2:9f:10:93:44:cb:13:20:
                    33:93:e7:f7:43:4e:7a:99:a9:18:45:31:82:b2:6a:
                    d4:21:c9:57:e9:78:3a:c3:a9:5c:cc:33:1c:54:eb:
                    08:46:aa:3f:9f:fd:a6:66:03:65:34:7d:ca:28:30:
                    8a:1a:81:04:7a:54:73:e6:0e:a9:88:a7:a7:e8:53:
                    02:dc:c2:0f:fa:bc:2b:09:53:92:5e:64:11:01:78:
                    61:18:98:f3:b9:4d:d8:b3:08:4f:80:ff:4e:7f:20:
                    f7:0f:b0:a2:5b:ee:ef:f1:b1:a4:44:cd:fd:87:a9:
                    42:41:65:a3:4d:af:48:37:76:e7:55:85:98:34:f9:
                    05:a7:ca:23:27:b5:de:58:5e:fa:00:72:d0:f6:84:
                    7b:a4:a9:90:b2:26:31:79:69:8e:f9:c2:f3:75:f0:
                    b0:7a:35:2d:78:aa:94:6b:8f:fd:a1:35:ff:b7:53:
                    8b:be:ee:f5:75:9d:82:92:1f:81:48:e4:06:29:69:
                    05:c9:d5:d0:6e:df:69:84:ce:ce:98:bb:94:62:eb:
                    52:9b:11:cf:d9:aa:22:23:c4:b3:b9:ca:c6:df:e5:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6D:7B:0F:47:54:97:8A:6E:F8:52:0A:04:76:04:A9:C5:38:F5:5C
            X509v3 Authority Key Identifier:
                keyid:2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:06:72:51:fa:8c:06:00:50:8f:50:2f:9f:49:e5:e3:06:37:
         8b:be:d2:12:2f:7f:f5:ac:64:9a:a2:ee:db:ad:dc:f0:ab:b7:
         55:75:40:9f:c7:c8:d7:2b:0f:4e:89:06:d6:66:8b:cf:3b:c1:
         64:1e:a6:f3:ec:44:d1:d9:23:70:24:3d:59:c6:61:5b:fb:7d:
         89:5e:63:bf:30:64:74:8e:97:82:9d:e8:82:6b:6c:5b:6e:f4:
         cb:fa:21:97:7e:e3:24:4b:38:27:af:d5:4a:4d:1c:89:e3:5f:
         7a:5e:44:ad:f3:8e:71:86:3a:3f:68:25:fb:59:6d:5f:64:4e:
         1a:0c:03:fb:d6:3e:49:17:3d:4c:54:cd:1d:8c:06:49:8c:55:
         04:b5:6e:6f:16:dc:4f:3d:82:1a:52:d4:99:af:6f:04:6a:56:
         b1:09:0b:4d:c6:72:46:59:71:d7:5c:84:6b:d5:f6:ce:64:fc:
         9a:7b:ca:f9:1c:27:0f:aa:76:03:c5:df:4f:d8:ff:4a:f0:4e:
         29:6c:c0:31:e3:e9:ed:d3:36:a8:da:7e:50:f4:f1:bb:ad:ca:
         df:9c:99:1b:4f:a7:e8:ee:a1:26:1f:48:09:37:80:37:36:3d:
         6e:25:01:e0:c6:9e:03:1e:cc:df:bf:68:d1:31:04:66:5f:60:
         d5:23:b9:51
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUV4ciNIQ9Gx6+lfSuTRv6vcx9D3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYwMTQzODAxMzlBODY3M0MyM0UyQ0Y5QUY2RURBQzQy
MTZFMTA1OTAeFw0yMzA3MjQwMDU1MDBaFw0yNDA3MjIwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0M1NkY1OEEwNEM0OEFERjdD
N0EzMDlGN0ZFMDkyOTAxQUY2QUIyOTY2Qzc0Q0M3MjU3QUFDRUFDRUNBQkU1NjY5
REFERDQyRDI5RjEwOTM0NENCMTMyMDMzOTNFN0Y3NDM0RTdBOTlBOTE4NDUzMTgy
QjI2QUQ0MjFDOTU3RTk3ODNBQzNBOTVDQ0MzMzFDNTRFQjA4NDZBQTNGOUZGREE2
NjYwMzY1MzQ3RENBMjgzMDhBMUE4MTA0N0E1NDczRTYwRUE5ODhBN0E3RTg1MzAy
RENDMjBGRkFCQzJCMDk1MzkyNUU2NDExMDE3ODYxMTg5OEYzQjk0REQ4QjMwODRG
ODBGRjRFN0YyMEY3MEZCMEEyNUJFRUVGRjFCMUE0NDRDREZEODdBOTQyNDE2NUEz
NERBRjQ4Mzc3NkU3NTU4NTk4MzRGOTA1QTdDQTIzMjdCNURFNTg1RUZBMDA3MkQw
RjY4NDdCQTRBOTkwQjIyNjMxNzk2OThFRjlDMkYzNzVGMEIwN0EzNTJENzhBQTk0
NkI4RkZEQTEzNUZGQjc1MzhCQkVFRUY1NzU5RDgyOTIxRjgxNDhFNDA2Mjk2OTA1
QzlENUQwNkVERjY5ODRDRUNFOThCQjk0NjJFQjUyOUIxMUNGRDlBQTIyMjNDNEIz
QjlDQUM2REZFNUZGMTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzFb1igTEit98ejCff+CSkBr2qylmx0zHJXqs6s7KvlZp2t1C0p8Q
k0TLEyAzk+f3Q056makYRTGCsmrUIclX6Xg6w6lczDMcVOsIRqo/n/2mZgNlNH3K
KDCKGoEEelRz5g6piKen6FMC3MIP+rwrCVOSXmQRAXhhGJjzuU3YswhPgP9OfyD3
D7CiW+7v8bGkRM39h6lCQWWjTa9IN3bnVYWYNPkFp8ojJ7XeWF76AHLQ9oR7pKmQ
siYxeWmO+cLzdfCwejUteKqUa4/9oTX/t1OLvu71dZ2Ckh+BSOQGKWkFydXQbt9p
hM7OmLuUYutSmxHP2aoiI8SzucrG3+X/FwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FGhtew9HVJeKbvhSCgR2BKnFOPVcMB8GA1UdIwQYMBaAFC8BQ4ATmoZzwj4s+a9u
2sQhbhBZMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2dDQxYVIyQkhUQmRR
S2VrQlAxaGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzJGMDE0MzgwMTM5QTg2NzND
MjNFMkNGOUFGNkVEQUM0MjE2RTEwNTkuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvMkYwMTQzODAxMzlBODY3M0MyM0UyQ0Y5QUY2RURBQzQyMTZFMTA1
OS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2dDQxYVIyQkhUQmRRS2VrQlAx
aGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzMxMzgzOTJlMzEzMjM3MmUzMTM4Mzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzAzNzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK9
f7wwDQYJKoZIhvcNAQELBQADggEBAHkGclH6jAYAUI9QL59J5eMGN4u+0hIvf/Ws
ZJqi7tut3PCrt1V1QJ/HyNcrD06JBtZmi887wWQepvPsRNHZI3AkPVnGYVv7fYle
Y78wZHSOl4Kd6IJrbFtu9Mv6IZd+4yRLOCev1UpNHInjX3peRK3zjnGGOj9oJftZ
bV9kThoMA/vWPkkXPUxUzR2MBkmMVQS1bm8W3E89ghpS1JmvbwRqVrEJC03GckZZ
cddchGvV9s5k/Jp7yvkcJw+qdgPF30/Y/0rwTilswDHj6e3TNqjaflD08butyt+c
mRtPp+juoSYfSAk3gDc2PW4lAeDGngMezN+/aNExBGZfYNUjuVE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org