Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231342e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3231342e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          3YmS7xT4vKUZy7atKFqhNbNIjEIL4NUo5K8F4CMYz5Y=
Subject key identifier:   3D:B2:11:C2:B2:14:BC:4F:C2:00:47:AF:96:20:6B:39:AC:1A:CC:B7
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       3CD616C4E4327F547905E2F12FC5B9EAA8464168
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231342e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:59 +0000
ROA not before:           Sat 06 Apr 2024 02:40:59 +0000
ROA not after:            Sat 05 Apr 2025 02:45:59 +0000
asID:                     28360
IP address blocks:        189.76.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:16:c4:e4:32:7f:54:79:05:e2:f1:2f:c5:b9:ea:a8:46:41:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:59 2024 GMT
            Not After : Apr  5 02:45:59 2025 GMT
        Subject: CN=3DB211C2B214BC4FC20047AF96206B39AC1ACCB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:3b:f2:0f:3d:e2:5a:13:25:61:83:7c:55:
                    08:3b:58:27:7f:29:7a:11:96:43:1a:bc:72:e0:d4:
                    d2:24:ab:66:2f:9f:82:dd:8c:56:8b:f2:81:0f:2d:
                    4e:6e:ce:3c:2a:80:55:2d:74:80:44:eb:07:d3:d5:
                    09:80:28:3e:fa:6e:2a:e5:cf:17:39:84:01:9f:a4:
                    fc:d2:6f:46:cb:ff:df:6c:ca:f6:1c:70:cd:de:9a:
                    41:9e:04:38:98:91:23:c1:51:2d:4e:b4:ee:a4:17:
                    10:61:84:fa:c2:44:fd:7d:ef:af:06:52:a1:09:88:
                    d0:3e:89:63:e0:de:fd:18:7e:78:86:f8:21:b9:b0:
                    3f:d7:f7:8c:9c:39:cb:f7:55:6f:4f:2a:0c:03:13:
                    15:de:ce:db:22:56:15:e9:04:9b:08:94:68:a1:0e:
                    91:dc:bd:0c:61:9e:38:3c:34:5b:06:f5:bd:87:ff:
                    1a:32:1e:47:6a:37:07:a4:2e:d3:e2:41:2d:be:42:
                    2b:3b:cd:9b:02:8b:b5:74:e2:ee:f2:49:58:a0:21:
                    05:99:d2:ea:9c:d6:da:5a:65:7d:23:54:cb:36:d3:
                    c9:51:31:bd:49:25:e0:47:4a:30:92:b7:03:73:f5:
                    58:fb:0d:81:55:70:fc:42:97:ca:f2:d3:b3:89:59:
                    ba:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B2:11:C2:B2:14:BC:4F:C2:00:47:AF:96:20:6B:39:AC:1A:CC:B7
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231342e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:e3:a1:cb:e0:ab:24:12:9f:73:13:3d:8f:aa:aa:87:54:f9:
         19:e0:d4:79:f9:ca:10:91:fe:79:eb:d5:58:c2:cf:8b:c5:12:
         2d:06:60:4e:53:62:69:60:de:36:e6:85:45:29:75:64:98:26:
         54:6c:c3:78:85:f9:92:6e:74:98:a0:d1:0b:94:e8:c1:75:03:
         e0:23:14:c7:2e:df:f2:7a:f1:b8:31:c7:59:d7:1a:97:56:e0:
         42:04:c4:9f:c4:ee:69:55:23:91:8b:fa:66:cd:ad:96:69:44:
         55:54:ee:f7:e3:21:2c:96:bb:92:f4:01:6d:0a:e2:c9:e9:42:
         00:2e:cf:af:0c:d6:17:46:e6:92:f2:e4:c8:38:41:8f:91:f4:
         48:e5:42:8b:6a:7d:34:a8:2e:3e:1c:94:72:e7:22:7d:77:37:
         47:89:57:8e:fc:96:7f:79:00:85:b9:12:63:ec:e7:67:f4:67:
         41:17:52:4b:39:16:1b:91:34:3f:a6:57:15:1a:1c:c3:04:5a:
         ac:e4:18:04:f9:09:fb:68:6b:67:04:bf:0f:d1:ac:ce:64:cf:
         94:46:ef:3c:73:3b:c9:96:58:88:03:50:b7:f1:e3:11:ff:11:
         b2:fb:a7:af:d2:da:84:8f:e6:5b:22:6d:24:3f:a3:9b:58:39:
         85:bc:2a:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPNYWxOQyf1R5BeLxL8W56qhGQWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMjQwNTlaFw0yNTA0MDUwMjQ1NTlaMDMxMTAvBgNV
BAMTKDNEQjIxMUMyQjIxNEJDNEZDMjAwNDdBRjk2MjA2QjM5QUMxQUNDQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbjvyDz3iWhMlYYN8VQg7WCd/
KXoRlkMavHLg1NIkq2Yvn4LdjFaL8oEPLU5uzjwqgFUtdIBE6wfT1QmAKD76birl
zxc5hAGfpPzSb0bL/99syvYccM3emkGeBDiYkSPBUS1OtO6kFxBhhPrCRP19768G
UqEJiNA+iWPg3v0YfniG+CG5sD/X94ycOcv3VW9PKgwDExXeztsiVhXpBJsIlGih
DpHcvQxhnjg8NFsG9b2H/xoyHkdqNwekLtPiQS2+Qis7zZsCi7V04u7ySVigIQWZ
0uqc1tpaZX0jVMs208lRMb1JJeBHSjCStwNz9Vj7DYFVcPxCl8ry07OJWbr5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPbIRwrIUvE/CAEevliBrOawazLcwHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzODM5MmUzNzM2MmUzMjMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvUzWMA0GCSqGSIb3DQEBCwUAA4IBAQBg46HL4Ksk
Ep9zEz2PqqqHVPkZ4NR5+coQkf5569VYws+LxRItBmBOU2JpYN425oVFKXVkmCZU
bMN4hfmSbnSYoNELlOjBdQPgIxTHLt/yevG4McdZ1xqXVuBCBMSfxO5pVSORi/pm
za2WaURVVO734yEslruS9AFtCuLJ6UIALs+vDNYXRuaS8uTIOEGPkfRI5UKLan00
qC4+HJRy5yJ9dzdHiVeO/JZ/eQCFuRJj7Odn9GdBF1JLORYbkTQ/plcVGhzDBFqs
5BgE+Qn7aGtnBL8P0azOZM+URu88czvJlliIA1C38eMR/xGy+6ev0tqEj+ZbIm0k
P6ObWDmFvCqq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org