Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32312d3231203d3e203238333630.roa
File:                     3138392e37362e3231362e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          HHSqwjoCT9mLCpBf95JRnZrg77b1ri6qnhyODv59N0s=
Subject key identifier:   7D:6E:45:67:A1:EE:B9:B9:04:56:64:00:53:C0:C1:04:2C:26:46:CD
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       338334FBFCB035501C40598282567BE5A0265B2B
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32312d3231203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:55 +0000
ROA not before:           Sat 06 Apr 2024 02:40:55 +0000
ROA not after:            Sat 05 Apr 2025 02:45:55 +0000
asID:                     28360
IP address blocks:        189.76.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:83:34:fb:fc:b0:35:50:1c:40:59:82:82:56:7b:e5:a0:26:5b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:55 2024 GMT
            Not After : Apr  5 02:45:55 2025 GMT
        Subject: CN=7D6E4567A1EEB9B90456640053C0C1042C2646CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:75:76:65:5f:61:5e:89:13:9a:3b:96:65:
                    9b:29:ba:1e:62:89:73:51:d5:f8:58:b2:59:08:5a:
                    d4:14:65:28:8e:e7:c5:19:3f:c2:ff:06:ad:09:63:
                    3c:2a:db:03:84:40:97:5a:4b:88:96:df:59:ec:b7:
                    5d:ec:1c:c1:2d:97:2e:5b:52:32:a8:eb:38:e0:0c:
                    08:2d:5e:9e:08:f0:a9:fc:25:79:31:5b:5a:9b:79:
                    e3:09:fa:38:97:16:cf:ff:97:63:b1:00:fc:0d:15:
                    47:63:26:ab:53:81:74:ec:99:c8:c4:0c:b1:f8:7a:
                    a4:84:41:03:ac:3d:56:fe:60:a9:54:b2:b7:2b:bf:
                    05:8f:b4:2e:96:30:dd:81:b7:f6:ca:56:59:3f:bf:
                    85:f8:34:7a:cf:84:60:e9:79:a1:23:8e:73:04:5e:
                    d2:f1:47:6c:ff:2c:90:aa:94:16:e4:1c:d1:e1:05:
                    88:5f:2c:a0:48:83:08:9a:10:26:9b:f2:f7:bc:3a:
                    28:c9:ed:f7:c8:71:af:22:19:f5:f6:17:4b:e0:3a:
                    ce:90:8d:14:79:83:47:95:68:72:f4:97:a5:28:3c:
                    a0:e3:96:a3:61:77:a9:f0:40:13:17:e3:45:98:9d:
                    50:54:01:69:60:5d:74:3f:99:c7:ac:50:9e:10:cb:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6E:45:67:A1:EE:B9:B9:04:56:64:00:53:C0:C1:04:2C:26:46:CD
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:38:2c:46:0e:1e:37:5f:fe:62:a3:72:a0:96:e3:0d:2f:
         68:b2:87:06:b6:3c:d1:4b:26:e2:32:ab:5a:94:32:b3:6d:f5:
         ca:ce:51:20:67:24:38:8e:91:ad:75:0d:28:15:db:33:2b:c1:
         cf:d4:78:7f:4e:1b:87:fc:92:2d:22:be:74:95:52:4b:12:11:
         c7:4a:a7:d4:1b:70:01:b6:2d:b4:85:29:db:1f:a5:02:7e:47:
         b2:56:17:b7:4c:a4:a6:8b:3f:03:61:07:07:91:16:c3:6c:28:
         2a:01:34:de:eb:a8:d2:2e:0a:d8:24:b7:02:0b:d2:a8:6a:45:
         b3:af:f7:7a:9c:ae:37:14:78:8e:06:35:f9:4f:d0:56:93:c2:
         aa:10:8b:ee:2b:37:79:9c:fe:ba:0b:86:96:55:ff:23:59:48:
         08:45:47:d4:d8:2c:4a:6b:b4:ac:99:5c:96:32:30:da:9b:5f:
         b1:d4:d2:2d:b9:be:56:66:d4:e5:21:bf:f2:34:b5:01:94:f5:
         a5:16:93:ca:57:7c:df:00:42:f5:ae:df:bb:2d:fa:e7:23:d2:
         c5:88:87:34:e2:a3:32:93:ab:8e:75:ed:c0:a9:1b:2b:8b:f9:
         19:a7:c4:9b:51:6c:ff:ec:f3:bb:a2:f6:0d:11:9b:a7:ed:11:
         5f:52:fe:c2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM4M0+/ywNVAcQFmCglZ75aAmWyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMjQwNTVaFw0yNTA0MDUwMjQ1NTVaMDMxMTAvBgNV
BAMTKDdENkU0NTY3QTFFRUI5QjkwNDU2NjQwMDUzQzBDMTA0MkMyNjQ2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMnV2ZV9hXokTmjuWZZspuh5i
iXNR1fhYslkIWtQUZSiO58UZP8L/Bq0JYzwq2wOEQJdaS4iW31nst13sHMEtly5b
UjKo6zjgDAgtXp4I8Kn8JXkxW1qbeeMJ+jiXFs//l2OxAPwNFUdjJqtTgXTsmcjE
DLH4eqSEQQOsPVb+YKlUsrcrvwWPtC6WMN2Bt/bKVlk/v4X4NHrPhGDpeaEjjnME
XtLxR2z/LJCqlBbkHNHhBYhfLKBIgwiaECab8ve8OijJ7ffIca8iGfX2F0vgOs6Q
jRR5g0eVaHL0l6UoPKDjlqNhd6nwQBMX40WYnVBUAWlgXXQ/mcesUJ4QyzbNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfW5FZ6HuubkEVmQAU8DBBCwmRs0wHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzODM5MmUzNzM2MmUzMjMxMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDvUzYMA0GCSqGSIb3DQEBCwUAA4IBAQB9jTgsRg4e
N1/+YqNyoJbjDS9osocGtjzRSybiMqtalDKzbfXKzlEgZyQ4jpGtdQ0oFdszK8HP
1Hh/ThuH/JItIr50lVJLEhHHSqfUG3ABti20hSnbH6UCfkeyVhe3TKSmiz8DYQcH
kRbDbCgqATTe66jSLgrYJLcCC9KoakWzr/d6nK43FHiOBjX5T9BWk8KqEIvuKzd5
nP66C4aWVf8jWUgIRUfU2CxKa7SsmVyWMjDam1+x1NItub5WZtTlIb/yNLUBlPWl
FpPKV3zfAEL1rt+7LfrnI9LFiIc04qMyk6uOde3AqRsri/kZp8SbUWz/7PO7ovYN
EZun7RFfUv7C
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org