Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/3138392e37362e37362e302f32342d3234203d3e203532373532.roa
File:                     3138392e37362e37362e302f32342d3234203d3e203532373532.roa (raw, json)
Hash identifier:          krjGu3BwMCZYlLzgWaFiqWd9DM5lo+4WSOpL1c2tseI=
Subject key identifier:   10:9B:30:E2:A9:79:19:52:C4:C5:F2:09:67:44:64:30:94:9A:67:C9
Certificate issuer:       /CN=49F08990C69AD6EA89454E7CF1EF5A283511DBA2
Certificate serial:       677966F00D9DBA4B609DB6888CBD796345105D6F
Authority key identifier: 49:F0:89:90:C6:9A:D6:EA:89:45:4E:7C:F1:EF:5A:28:35:11:DB:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49F08990C69AD6EA89454E7CF1EF5A283511DBA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/3138392e37362e37362e302f32342d3234203d3e203532373532.roa
Signing time:             Tue 08 Aug 2023 12:36:28 +0000
ROA not before:           Tue 08 Aug 2023 12:31:28 +0000
ROA not after:            Tue 06 Aug 2024 12:36:28 +0000
asID:                     52752
IP address blocks:        189.76.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:79:66:f0:0d:9d:ba:4b:60:9d:b6:88:8c:bd:79:63:45:10:5d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F08990C69AD6EA89454E7CF1EF5A283511DBA2
        Validity
            Not Before: Aug  8 12:31:28 2023 GMT
            Not After : Aug  6 12:36:28 2024 GMT
        Subject: CN=109B30E2A9791952C4C5F20967446430949A67C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:c2:90:c4:35:db:85:9e:13:bd:42:f2:dd:
                    85:8b:a3:3c:fb:b8:26:69:69:4d:a6:3d:b5:8f:60:
                    cd:43:69:b4:47:46:3c:ec:1b:6d:ee:2a:c5:e8:ab:
                    10:7d:64:ef:03:f9:a5:15:0a:b4:d5:1d:53:eb:75:
                    f9:da:d1:4d:41:95:a8:e8:be:1b:22:d7:6b:20:a9:
                    88:1c:0e:d2:5b:5b:76:22:eb:51:a7:a7:ab:db:96:
                    45:fd:2e:36:23:15:b0:b5:60:af:90:df:8c:c4:f8:
                    90:56:c0:fd:7b:7b:58:7f:75:c4:0a:62:8e:31:08:
                    54:77:c4:da:a4:45:79:f6:4e:3a:62:16:3a:63:a0:
                    d3:f9:ff:df:33:ca:5f:c4:08:59:ff:91:ea:3e:f4:
                    fe:47:ca:04:96:a8:c1:77:91:df:b8:7d:2c:aa:ee:
                    1c:e1:39:08:a5:f0:4e:10:eb:4f:0e:6f:bc:ca:85:
                    59:c9:78:6b:3c:c8:5b:e0:2a:96:d9:8a:ee:1e:d1:
                    0a:b6:06:d9:37:00:0c:cf:80:6a:42:b3:7e:ad:3e:
                    29:f6:a0:63:38:d1:c4:0b:84:50:f8:b2:89:a4:e4:
                    90:83:80:4b:05:52:b3:ff:70:32:67:cb:0f:10:58:
                    b5:c4:00:39:d4:84:b5:f3:54:97:be:e5:f7:34:48:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:30:E2:A9:79:19:52:C4:C5:F2:09:67:44:64:30:94:9A:67:C9
            X509v3 Authority Key Identifier:
                keyid:49:F0:89:90:C6:9A:D6:EA:89:45:4E:7C:F1:EF:5A:28:35:11:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/49F08990C69AD6EA89454E7CF1EF5A283511DBA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49F08990C69AD6EA89454E7CF1EF5A283511DBA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/3138392e37362e37362e302f32342d3234203d3e203532373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b6:83:1f:d2:08:b0:6f:b0:b3:18:f9:7b:35:9b:d3:f8:36:
         dc:99:9e:4a:ab:c9:41:c6:72:25:d3:a8:5a:19:40:76:11:c7:
         bf:36:3a:88:de:d7:91:34:b6:a5:84:49:cf:1d:1f:79:59:14:
         9f:8c:60:e5:25:c1:51:15:f4:ee:14:24:2b:6a:03:1f:be:10:
         cd:f1:e1:80:04:2c:66:6e:cc:46:6c:7f:18:de:83:9a:56:1a:
         c3:27:f2:ef:f6:24:51:85:2e:5c:92:4b:4f:01:0e:e2:8f:f0:
         a5:a7:c9:8d:ee:a5:26:87:56:14:17:d9:99:c1:e3:1d:08:4a:
         77:a1:96:ee:36:e6:e0:e6:24:f6:3f:8d:cf:d8:16:16:7e:65:
         e7:96:b0:4c:d0:70:51:91:0e:05:7a:a1:1b:31:b5:83:53:a8:
         3c:d4:ee:bc:77:c5:3c:51:cf:37:c1:28:47:bf:39:0a:4d:12:
         e3:8d:69:fd:d5:12:ad:01:61:fa:b1:7e:1e:a2:85:e1:7f:51:
         cb:cf:e7:ce:77:af:da:6b:87:b8:64:f0:d5:84:a0:13:e0:94:
         06:b5:67:6d:da:d3:73:29:cc:6f:cf:a0:f4:ff:bc:c1:2a:b7:
         70:3f:c8:3f:c0:a8:23:85:d8:73:ef:c2:9b:75:2f:ba:80:78:
         70:e8:c2:35
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZ3lm8A2duktgnbaIjL15Y0UQXW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlGMDg5OTBDNjlBRDZFQTg5NDU0RTdDRjFFRjVBMjgz
NTExREJBMjAeFw0yMzA4MDgxMjMxMjhaFw0yNDA4MDYxMjM2MjhaMDMxMTAvBgNV
BAMTKDEwOUIzMEUyQTk3OTE5NTJDNEM1RjIwOTY3NDQ2NDMwOTQ5QTY3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC658KQxDXbhZ4TvULy3YWLozz7
uCZpaU2mPbWPYM1DabRHRjzsG23uKsXoqxB9ZO8D+aUVCrTVHVPrdfna0U1Blajo
vhsi12sgqYgcDtJbW3Yi61Gnp6vblkX9LjYjFbC1YK+Q34zE+JBWwP17e1h/dcQK
Yo4xCFR3xNqkRXn2TjpiFjpjoNP5/98zyl/ECFn/keo+9P5HygSWqMF3kd+4fSyq
7hzhOQil8E4Q608Ob7zKhVnJeGs8yFvgKpbZiu4e0Qq2Btk3AAzPgGpCs36tPin2
oGM40cQLhFD4somk5JCDgEsFUrP/cDJnyw8QWLXEADnUhLXzVJe+5fc0SMGNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEJsw4ql5GVLExfIJZ0RkMJSaZ8kwHwYDVR0j
BBgwFoAUSfCJkMaa1uqJRU588e9aKDUR26IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm1vbm9tR3hKbU51WVh6QTZVbkprb2hrNFUyWGQzS0dFQ0o4ODJMb0xK
Q1YvMC80OUYwODk5MEM2OUFENkVBODk0NTRFN0NGMUVGNUEyODM1MTFEQkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5RjA4OTkwQzY5QUQ2RUE4
OTQ1NEU3Q0YxRUY1QTI4MzUxMURCQTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJtb25vbUd4Sm1OdVlYekE2VW5Ka29oazRVMlhkM0tHRUNKODgyTG9MSkNWLzAv
MzEzODM5MmUzNzM2MmUzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM3
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1MTDANBgkqhkiG9w0BAQsFAAOCAQEAj7aDH9IIsG+w
sxj5ezWb0/g23JmeSqvJQcZyJdOoWhlAdhHHvzY6iN7XkTS2pYRJzx0feVkUn4xg
5SXBURX07hQkK2oDH74QzfHhgAQsZm7MRmx/GN6DmlYawyfy7/YkUYUuXJJLTwEO
4o/wpafJje6lJodWFBfZmcHjHQhKd6GW7jbm4OYk9j+Nz9gWFn5l55awTNBwUZEO
BXqhGzG1g1OoPNTuvHfFPFHPN8EoR785Ck0S441p/dUSrQFh+rF+HqKF4X9Ry8/n
znev2muHuGTw1YSgE+CUBrVnbdrTcynMb8+g9P+8wSq3cD/IP8CoI4XYc+/Cm3Uv
uoB4cOjCNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org