Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3231203d3e203533303539.roa
File:                     3138392e34352e31362e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          2VPBQ7k0PhQyYisOt06HuQ8Z18Y7Cr7AWYWvTwK2V18=
Subject key identifier:   3D:80:B6:B6:10:5A:3F:FB:0C:B7:1D:DF:9E:3B:ED:76:DB:5F:83:40
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       407F5DF4148513D409137D94402D506226A14EBB
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3231203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:31 +0000
ROA not before:           Fri 03 Mar 2023 12:14:31 +0000
ROA not after:            Fri 01 Mar 2024 12:19:31 +0000
asID:                     53059
IP address blocks:        189.45.16.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7f:5d:f4:14:85:13:d4:09:13:7d:94:40:2d:50:62:26:a1:4e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:31 2023 GMT
            Not After : Mar  1 12:19:31 2024 GMT
        Subject: CN=3D80B6B6105A3FFB0CB71DDF9E3BED76DB5F8340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:7d:ad:ed:65:61:e3:b4:d0:ee:17:64:02:
                    f4:a4:71:59:db:c4:9e:de:6b:fd:f8:9e:1d:99:06:
                    be:2a:0b:70:d4:15:9f:d2:0f:c8:e7:c5:e6:27:1e:
                    8c:9a:fe:3c:95:7d:46:fe:6e:29:6e:3c:58:74:5d:
                    94:cb:cf:eb:7a:73:aa:41:c1:41:5e:ae:df:ef:f4:
                    7f:b3:c2:da:ea:0d:ba:32:34:ac:07:c0:7b:40:f4:
                    cc:16:68:f0:c9:53:6c:90:ca:0a:36:d6:3d:88:b7:
                    09:af:20:81:f1:32:b3:f7:32:07:95:3d:92:6b:27:
                    c8:59:80:b3:3f:5c:43:28:e6:33:84:44:3b:6a:8b:
                    74:18:67:11:86:96:fc:a5:bd:44:98:ef:bc:4e:5c:
                    06:0c:38:89:16:98:45:5a:1b:0d:25:22:06:b5:b2:
                    97:86:e9:bc:94:7d:07:58:80:68:39:f9:b8:7f:a5:
                    ac:01:7f:50:95:5e:86:b8:db:0a:d8:40:13:46:b9:
                    f9:23:62:db:68:7b:e4:f7:2b:d7:5b:38:58:bf:19:
                    fe:c8:cb:26:14:0b:65:9e:69:59:de:c9:55:15:88:
                    12:20:88:10:11:06:5f:ab:8e:5b:c8:87:5a:4d:c5:
                    f4:50:dd:d4:05:12:86:9b:57:e2:e3:43:b7:f7:79:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:B6:B6:10:5A:3F:FB:0C:B7:1D:DF:9E:3B:ED:76:DB:5F:83:40
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:16:fc:33:b6:30:9a:98:d3:d7:2d:07:0b:8a:39:c4:ec:e1:
         e1:3a:91:63:71:90:08:61:b7:c3:c7:bf:9e:a4:c4:3d:32:c7:
         a5:d6:6f:fa:e7:36:f3:1c:9c:74:32:07:19:5e:db:1f:89:3a:
         e2:d1:d3:a3:d8:e8:63:fa:7e:5e:10:71:68:a8:4d:1d:83:7c:
         6b:2c:ca:f8:19:a2:80:4f:a4:50:51:90:1a:af:0e:ce:94:3b:
         0e:8c:d4:88:fe:af:fe:77:ac:65:7b:0e:5f:df:95:d0:1c:68:
         e8:91:27:4b:90:93:30:46:fb:d0:f6:f5:b0:cb:d3:24:77:29:
         05:a1:4e:86:f3:84:36:90:e3:5d:b1:92:1b:6f:de:f6:03:d0:
         fa:74:a7:41:14:e5:c8:a9:4d:33:5b:1f:03:e8:44:a1:0d:28:
         39:20:11:57:3f:05:63:f5:85:07:f0:d4:07:8b:e5:d4:23:41:
         ae:dc:01:75:87:0b:6d:54:ba:cf:ba:27:f9:d8:b1:73:b0:a2:
         6f:7b:15:36:a7:8d:09:ab:e4:2a:04:16:2f:b9:b4:e2:e9:5a:
         6b:ec:04:cf:b4:de:27:b1:5b:de:ac:1a:d4:03:e9:76:33:75:
         e3:91:2a:fe:13:2e:37:25:7b:4f:68:c5:9f:15:2c:0c:c6:f7:
         f8:4b:41:67
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQH9d9BSFE9QJE32UQC1QYiahTrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMDMxMjE0MzFaFw0yNDAzMDExMjE5MzFaMDMxMTAvBgNV
BAMTKDNEODBCNkI2MTA1QTNGRkIwQ0I3MURERjlFM0JFRDc2REI1RjgzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltn2t7WVh47TQ7hdkAvSkcVnb
xJ7ea/34nh2ZBr4qC3DUFZ/SD8jnxeYnHoya/jyVfUb+biluPFh0XZTLz+t6c6pB
wUFert/v9H+zwtrqDboyNKwHwHtA9MwWaPDJU2yQygo21j2ItwmvIIHxMrP3MgeV
PZJrJ8hZgLM/XEMo5jOERDtqi3QYZxGGlvylvUSY77xOXAYMOIkWmEVaGw0lIga1
speG6byUfQdYgGg5+bh/pawBf1CVXoa42wrYQBNGufkjYttoe+T3K9dbOFi/Gf7I
yyYUC2WeaVneyVUViBIgiBARBl+rjlvIh1pNxfRQ3dQFEoabV+LjQ7f3efa1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPYC2thBaP/sMtx3fnjvtdttfg0AwHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM5MmUzNDM1MmUzMTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzMzMw
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA70tEDANBgkqhkiG9w0BAQsFAAOCAQEAYRb8M7YwmpjT
1y0HC4o5xOzh4TqRY3GQCGG3w8e/nqTEPTLHpdZv+uc28xycdDIHGV7bH4k64tHT
o9joY/p+XhBxaKhNHYN8ayzK+BmigE+kUFGQGq8OzpQ7DozUiP6v/nesZXsOX9+V
0Bxo6JEnS5CTMEb70Pb1sMvTJHcpBaFOhvOENpDjXbGSG2/e9gPQ+nSnQRTlyKlN
M1sfA+hEoQ0oOSARVz8FY/WFB/DUB4vl1CNBrtwBdYcLbVS6z7on+dixc7Cib3sV
NqeNCavkKgQWL7m04ulaa+wEz7TeJ7Fb3qwa1APpdjN145Eq/hMuNyV7T2jFnxUs
DMb3+EtBZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org