Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32332d3233203d3e20323730373136.roa
File:                     3138392e3132372e3138382e302f32332d3233203d3e20323730373136.roa (raw, json)
Hash identifier:          nY9KQDmlWy/hZhzgRtG7MVgN7fGmRubcNAWBpskHwvc=
Subject key identifier:   EA:93:FD:1A:A8:00:82:F0:A6:7C:31:60:7B:FE:6F:31:39:79:A9:D5
Certificate issuer:       /CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
Certificate serial:       5C0F3B06361683DC8BB97A5603DCF02465F3B353
Authority key identifier: 2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32332d3233203d3e20323730373136.roa
Signing time:             Mon 24 Jul 2023 01:00:00 +0000
ROA not before:           Mon 24 Jul 2023 00:55:00 +0000
ROA not after:            Mon 22 Jul 2024 01:00:00 +0000
asID:                     270716
IP address blocks:        189.127.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0f:3b:06:36:16:83:dc:8b:b9:7a:56:03:dc:f0:24:65:f3:b3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
        Validity
            Not Before: Jul 24 00:55:00 2023 GMT
            Not After : Jul 22 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:cd:be:7c:7d:94:41:de:93:17:a9:50:fd:
                    b9:2c:cd:15:94:26:b7:8f:4a:69:60:19:f3:65:55:
                    39:f8:37:22:5d:2f:b0:76:f6:9b:4c:4d:64:be:2c:
                    77:7d:3b:c0:b6:18:36:e3:f6:77:52:90:ab:3e:41:
                    25:e4:97:64:43:3a:81:4b:ce:75:a3:f0:a4:24:0f:
                    28:4b:da:4e:8f:87:27:8d:18:c0:25:ad:95:90:5d:
                    44:92:2e:97:f0:ed:11:04:71:9d:10:70:71:39:fa:
                    5c:fb:4f:2b:ba:a3:68:57:2d:09:9d:55:c0:4e:e2:
                    2c:c5:62:00:b0:b5:8a:8e:32:00:b3:f5:7d:ec:8f:
                    27:cd:e0:54:97:8f:90:0f:60:e2:01:0e:7c:e4:fc:
                    d5:c5:a4:ec:76:81:4d:d5:8d:4f:39:25:21:09:4b:
                    c7:09:2a:91:e0:99:e1:00:94:74:75:a3:e9:da:b2:
                    8c:3c:5a:cf:7c:c4:c7:2d:f8:d0:94:27:6c:68:2e:
                    26:0a:b6:02:ba:fe:57:93:46:14:fa:56:58:1f:49:
                    9a:e8:7e:c9:18:fc:56:18:c2:ad:53:1a:63:58:01:
                    56:0d:16:75:96:55:1c:a6:4d:f5:4e:91:6b:71:4c:
                    c5:d7:ef:43:45:a8:80:fe:25:94:9a:7d:91:88:eb:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:93:FD:1A:A8:00:82:F0:A6:7C:31:60:7B:FE:6F:31:39:79:A9:D5
            X509v3 Authority Key Identifier:
                keyid:2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32332d3233203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:4b:e2:e9:6f:da:f8:e4:c7:55:0c:44:fd:5c:ef:20:a2:31:
         35:da:bc:08:72:8d:eb:f9:f3:3b:07:ea:65:23:16:3f:81:82:
         fc:f6:29:22:60:e7:7c:4b:27:19:21:12:db:c4:b3:7f:05:8e:
         f6:c8:8b:f3:24:c8:de:04:86:2d:1d:67:99:be:c6:57:ea:12:
         90:48:9f:76:6c:94:b0:1a:85:14:19:39:01:c3:08:ad:31:3f:
         19:89:ac:fa:0f:dd:94:3c:aa:81:3e:4b:a7:52:f0:27:25:27:
         73:01:91:e6:91:95:31:23:3b:97:ba:06:71:20:03:be:13:dc:
         67:b2:29:d7:0f:03:7f:e2:e5:a5:4f:59:e9:5d:34:ce:32:5e:
         58:e9:d4:93:bf:a1:d5:1c:87:36:b0:51:9f:eb:4d:62:1c:b7:
         ec:40:21:e8:1a:b1:bd:0d:8d:0b:0e:d0:ef:48:e6:72:7d:61:
         f8:54:6f:50:c9:d5:96:aa:40:40:95:c2:1b:b7:ad:d2:0e:0e:
         5f:e3:d2:bf:ec:a5:16:89:b3:1d:45:9f:3b:02:ca:c1:a7:56:
         ea:f4:b0:aa:59:c1:fa:4b:78:1a:a4:92:c4:e8:f9:13:01:31:
         f9:3c:05:9c:87:cb:64:b6:34:c6:28:e9:41:b8:85:95:bc:33:
         34:c3:00:89
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUXA87BjYWg9yLuXpWA9zwJGXzs1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYwMTQzODAxMzlBODY3M0MyM0UyQ0Y5QUY2RURBQzQy
MTZFMTA1OTAeFw0yMzA3MjQwMDU1MDBaFw0yNDA3MjIwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQyOUNEQkU3QzdEOTQ0MURF
OTMxN0E5NTBGREI5MkNDRDE1OTQyNkI3OEY0QTY5NjAxOUYzNjU1NTM5RjgzNzIy
NUQyRkIwNzZGNjlCNEM0RDY0QkUyQzc3N0QzQkMwQjYxODM2RTNGNjc3NTI5MEFC
M0U0MTI1RTQ5NzY0NDMzQTgxNEJDRTc1QTNGMEE0MjQwRjI4NEJEQTRFOEY4NzI3
OEQxOEMwMjVBRDk1OTA1RDQ0OTIyRTk3RjBFRDExMDQ3MTlEMTA3MDcxMzlGQTVD
RkI0RjJCQkFBMzY4NTcyRDA5OUQ1NUMwNEVFMjJDQzU2MjAwQjBCNThBOEUzMjAw
QjNGNTdERUM4RjI3Q0RFMDU0OTc4RjkwMEY2MEUyMDEwRTdDRTRGQ0Q1QzVBNEVD
NzY4MTRERDU4RDRGMzkyNTIxMDk0QkM3MDkyQTkxRTA5OUUxMDA5NDc0NzVBM0U5
REFCMjhDM0M1QUNGN0NDNEM3MkRGOEQwOTQyNzZDNjgyRTI2MEFCNjAyQkFGRTU3
OTM0NjE0RkE1NjU4MUY0OTlBRTg3RUM5MThGQzU2MThDMkFENTMxQTYzNTgwMTU2
MEQxNjc1OTY1NTFDQTY0REY1NEU5MTZCNzE0Q0M1RDdFRjQzNDVBODgwRkUyNTk0
OUE3RDkxODhFQjU2NTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApCnNvnx9lEHekxepUP25LM0VlCa3j0ppYBnzZVU5+DciXS+wdvab
TE1kvix3fTvAthg24/Z3UpCrPkEl5JdkQzqBS851o/CkJA8oS9pOj4cnjRjAJa2V
kF1Eki6X8O0RBHGdEHBxOfpc+08ruqNoVy0JnVXATuIsxWIAsLWKjjIAs/V97I8n
zeBUl4+QD2DiAQ585PzVxaTsdoFN1Y1POSUhCUvHCSqR4JnhAJR0daPp2rKMPFrP
fMTHLfjQlCdsaC4mCrYCuv5Xk0YU+lZYH0ma6H7JGPxWGMKtUxpjWAFWDRZ1llUc
pk31TpFrcUzF1+9DRaiA/iWUmn2RiOtWUwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FOqT/RqoAILwpnwxYHv+bzE5eanVMB8GA1UdIwQYMBaAFC8BQ4ATmoZzwj4s+a9u
2sQhbhBZMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2dDQxYVIyQkhUQmRR
S2VrQlAxaGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzJGMDE0MzgwMTM5QTg2NzND
MjNFMkNGOUFGNkVEQUM0MjE2RTEwNTkuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvMkYwMTQzODAxMzlBODY3M0MyM0UyQ0Y5QUY2RURBQzQyMTZFMTA1
OS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2dDQxYVIyQkhUQmRRS2VrQlAx
aGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzMxMzgzOTJlMzEzMjM3MmUzMTM4Mzgy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzAzNzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG9
f7wwDQYJKoZIhvcNAQELBQADggEBAAhL4ulv2vjkx1UMRP1c7yCiMTXavAhyjev5
8zsH6mUjFj+Bgvz2KSJg53xLJxkhEtvEs38FjvbIi/MkyN4Ehi0dZ5m+xlfqEpBI
n3ZslLAahRQZOQHDCK0xPxmJrPoP3ZQ8qoE+S6dS8CclJ3MBkeaRlTEjO5e6BnEg
A74T3GeyKdcPA3/i5aVPWeldNM4yXljp1JO/odUchzawUZ/rTWIct+xAIegasb0N
jQsO0O9I5nJ9YfhUb1DJ1ZaqQECVwhu3rdIODl/j0r/spRaJsx1FnzsCysGnVur0
sKpZwfpLeBqkksTo+RMBMfk8BZyHy2S2NMYo6UG4hZW8MzTDAIk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org