Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          EcEKXn+7SSnW0e39RL7JImbx7on9wHE99pPQU/yynY4=
Subject key identifier:   D9:3D:BC:3D:D8:77:CA:2A:87:1E:17:0E:43:0E:7D:5F:A5:C9:F4:D0
Certificate issuer:       /CN=3BEB08169B14107D9668F7CD71FD6569C8FA1613
Certificate serial:       046D36541F81D6C964851168767BCCF59AAB289E
Authority key identifier: 3B:EB:08:16:9B:14:10:7D:96:68:F7:CD:71:FD:65:69:C8:FA:16:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BEB08169B14107D9668F7CD71FD6569C8FA1613.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
Signing time:             Mon 04 Mar 2024 18:39:03 +0000
ROA not before:           Mon 04 Mar 2024 18:34:03 +0000
ROA not after:            Mon 03 Mar 2025 18:39:03 +0000
asID:                     270579
IP address blocks:        189.126.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6d:36:54:1f:81:d6:c9:64:85:11:68:76:7b:cc:f5:9a:ab:28:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BEB08169B14107D9668F7CD71FD6569C8FA1613
        Validity
            Not Before: Mar  4 18:34:03 2024 GMT
            Not After : Mar  3 18:39:03 2025 GMT
        Subject: CN=D93DBC3DD877CA2A871E170E430E7D5FA5C9F4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:1d:52:0c:21:7c:34:5b:de:19:cb:70:d1:
                    2c:c2:36:ea:ed:5d:7b:ca:91:34:1e:eb:78:0e:f9:
                    e9:5e:f1:45:25:2b:0a:1e:ff:ae:39:26:71:f6:ac:
                    c6:af:3c:c1:ef:d9:72:90:02:ef:29:04:50:78:3a:
                    23:6d:b0:8d:3a:0e:9f:83:6b:9c:32:32:68:6c:bb:
                    00:41:ad:d1:6b:fd:ca:12:a6:27:61:64:cb:8d:3e:
                    56:0c:b4:34:c6:3a:31:24:47:a3:2f:b3:63:4e:06:
                    be:f8:af:f0:b9:27:e8:f6:05:18:fc:00:f8:29:85:
                    e4:4a:09:21:24:a8:e4:79:d6:52:fe:a5:1d:1a:ad:
                    bd:9a:6a:83:24:bb:96:50:4c:48:e5:3e:83:74:fc:
                    69:79:ad:15:df:5c:2c:de:75:e2:32:4e:9a:43:f5:
                    e5:cc:b1:84:e5:f3:b2:a7:3e:c8:2c:12:d5:ed:6b:
                    17:fe:f6:3d:09:52:9b:99:00:ef:88:69:8e:5c:0c:
                    fb:43:b2:d3:d0:cb:58:87:6d:60:5b:da:12:2c:8f:
                    af:ac:aa:0d:25:df:f8:18:d6:70:13:b3:0c:3f:5d:
                    c8:1b:75:5e:02:20:56:53:10:a6:aa:e2:e3:b2:f8:
                    91:f7:fa:aa:94:5d:d2:e2:90:da:70:ba:bb:2d:7e:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3D:BC:3D:D8:77:CA:2A:87:1E:17:0E:43:0E:7D:5F:A5:C9:F4:D0
            X509v3 Authority Key Identifier:
                keyid:3B:EB:08:16:9B:14:10:7D:96:68:F7:CD:71:FD:65:69:C8:FA:16:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3BEB08169B14107D9668F7CD71FD6569C8FA1613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BEB08169B14107D9668F7CD71FD6569C8FA1613.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:7f:16:54:fc:dc:20:1d:72:18:15:9c:c6:59:45:bb:f5:e8:
         67:40:e4:2c:d7:60:f1:84:e2:cf:cd:22:11:52:c0:ea:68:b4:
         75:b2:9e:c7:7a:55:e2:38:8e:78:0f:a9:76:13:cd:dc:73:ed:
         c0:95:31:c5:c5:c0:91:76:30:99:ab:f9:0b:1e:35:ba:70:27:
         9d:73:dc:3b:e4:e1:fc:90:cb:43:50:d0:60:8d:ae:dd:65:e0:
         ae:38:81:f1:81:31:32:87:60:5d:71:bb:2f:b0:b3:c5:21:9b:
         51:7f:40:0e:e9:1c:56:50:b2:f0:2b:fa:5c:f7:e3:23:96:48:
         79:30:56:bd:11:b3:b4:d1:93:f4:c5:94:fa:ee:9f:ee:b1:cb:
         fb:e7:d7:fb:8c:02:04:6b:b8:2c:b3:43:62:ca:8d:5c:aa:5f:
         f7:f4:15:42:c1:51:cf:1c:7c:a1:6d:bb:d9:aa:25:eb:5d:08:
         f8:db:70:42:40:8b:ce:c8:8e:66:f4:34:2a:77:7a:52:ae:1c:
         4f:1e:34:d7:23:c7:16:e0:8e:b2:26:b1:5d:60:b5:fa:de:64:
         c9:8e:56:4c:a9:1e:19:d7:52:c8:0d:d7:74:87:5b:ce:ea:58:
         e3:2b:9a:ab:9c:44:0d:7b:f3:20:58:26:56:0c:a9:4d:01:b4:
         36:f4:b6:84
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBG02VB+B1slkhRFodnvM9ZqrKJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JFQjA4MTY5QjE0MTA3RDk2NjhGN0NENzFGRDY1NjlD
OEZBMTYxMzAeFw0yNDAzMDQxODM0MDNaFw0yNTAzMDMxODM5MDNaMDMxMTAvBgNV
BAMTKEQ5M0RCQzNERDg3N0NBMkE4NzFFMTcwRTQzMEU3RDVGQTVDOUY0RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnwx1SDCF8NFveGctw0SzCNurt
XXvKkTQe63gO+ele8UUlKwoe/645JnH2rMavPMHv2XKQAu8pBFB4OiNtsI06Dp+D
a5wyMmhsuwBBrdFr/coSpidhZMuNPlYMtDTGOjEkR6Mvs2NOBr74r/C5J+j2BRj8
APgpheRKCSEkqOR51lL+pR0arb2aaoMku5ZQTEjlPoN0/Gl5rRXfXCzedeIyTppD
9eXMsYTl87KnPsgsEtXtaxf+9j0JUpuZAO+IaY5cDPtDstPQy1iHbWBb2hIsj6+s
qg0l3/gY1nATsww/XcgbdV4CIFZTEKaq4uOy+JH3+qqUXdLikNpwurstfnsdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2T28Pdh3yiqHHhcOQw59X6XJ9NAwHwYDVR0j
BBgwFoAUO+sIFpsUEH2WaPfNcf1lacj6FhMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0t5aFN0RFVFTG1nbWVFZGZMOTdudjNkaWt1UXhmQzhwTUFNNXY0a1Zm
VkEvMC8zQkVCMDgxNjlCMTQxMDdEOTY2OEY3Q0Q3MUZENjU2OUM4RkExNjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCRUIwODE2OUIxNDEwN0Q5
NjY4RjdDRDcxRkQ2NTY5QzhGQTE2MTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLeWhTdERVRUxtZ21lRWRmTDk3bnYzZGlrdVF4ZkM4cE1BTTV2NGtWZlZBLzAv
MzEzODM5MmUzMTMyMzYyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9flQwDQYJKoZIhvcNAQELBQADggEBAER/FlT8
3CAdchgVnMZZRbv16GdA5CzXYPGE4s/NIhFSwOpotHWynsd6VeI4jngPqXYTzdxz
7cCVMcXFwJF2MJmr+QseNbpwJ51z3Dvk4fyQy0NQ0GCNrt1l4K44gfGBMTKHYF1x
uy+ws8Uhm1F/QA7pHFZQsvAr+lz34yOWSHkwVr0Rs7TRk/TFlPrun+6xy/vn1/uM
AgRruCyzQ2LKjVyqX/f0FULBUc8cfKFtu9mqJetdCPjbcEJAi87Ijmb0NCp3elKu
HE8eNNcjxxbgjrImsV1gtfreZMmOVkypHhnXUsgN13SHW87qWOMrmqucRA178yBY
JlYMqU0BtDb0toQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org