Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32312d3231203d3e203238333630.roa
File:                     3138392e37362e3232342e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          CVnCACeLEwBYQycb666JW1AHCUQkOH1CtxUtDPUrcR4=
Subject key identifier:   F2:78:D4:F6:94:91:0F:DF:B4:46:9D:B3:C8:F6:B8:71:30:CE:DC:30
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       757740AE450C5730B93AC340BA8AA79D197A212B
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32312d3231203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:01 +0000
ROA not before:           Sat 06 Apr 2024 02:41:01 +0000
ROA not after:            Sat 05 Apr 2025 02:46:01 +0000
asID:                     28360
IP address blocks:        189.76.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:77:40:ae:45:0c:57:30:b9:3a:c3:40:ba:8a:a7:9d:19:7a:21:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:41:01 2024 GMT
            Not After : Apr  5 02:46:01 2025 GMT
        Subject: CN=F278D4F694910FDFB4469DB3C8F6B87130CEDC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:39:a1:76:d2:37:d0:9f:e6:06:46:0d:b5:17:
                    b7:e8:f1:bb:96:31:6b:2a:a7:e7:f4:dd:a2:df:b2:
                    0a:e8:4e:65:3c:14:d1:61:7f:5d:d6:32:76:fc:d2:
                    99:3e:f3:ba:d9:ff:95:dd:3d:cb:b5:ee:0c:6c:8e:
                    a6:b6:32:89:74:ac:e3:c0:66:f4:78:2e:26:01:3c:
                    ec:6b:62:3b:8a:a5:73:4a:30:7e:69:cd:8f:2b:62:
                    d0:6c:8c:5e:dd:2f:af:e4:63:ea:fb:9b:57:f6:33:
                    c7:a2:35:30:da:0a:ea:c8:82:4f:1d:b3:d9:7c:8c:
                    9e:ed:3e:55:1b:6d:73:ee:98:36:90:b4:e5:ea:ef:
                    70:95:ea:07:eb:c5:e4:7c:db:81:4a:09:82:a4:b6:
                    20:f6:53:da:e8:37:af:b4:53:26:ed:c5:5a:63:0b:
                    d9:db:57:2c:3c:8e:1e:1e:91:af:c6:3c:d0:79:03:
                    b3:b6:25:ce:5f:15:f6:94:2f:74:1b:b0:c3:16:17:
                    7d:a3:4d:0f:56:01:6b:bc:cc:6b:ec:bd:ce:47:b9:
                    19:74:39:59:09:a9:e8:e6:42:02:be:1a:4d:1f:54:
                    d4:d3:8e:10:44:65:61:69:93:26:9c:10:77:8c:82:
                    fa:ed:0b:9b:ca:d6:63:4b:f5:76:ee:20:6a:c3:0d:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:D4:F6:94:91:0F:DF:B4:46:9D:B3:C8:F6:B8:71:30:CE:DC:30
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:ff:c9:6a:bd:30:45:46:14:4d:a2:71:55:e6:ae:29:0c:ca:
         53:94:e5:ce:bc:c5:12:2a:31:42:b7:41:a3:ec:53:e8:1a:73:
         51:a7:a5:ef:d7:94:38:50:20:a2:94:52:9d:c5:d8:68:64:9b:
         cb:5c:8d:70:a6:65:36:c5:9e:5b:be:56:d3:3c:c5:ff:e6:13:
         fb:d4:9c:ac:f4:11:1a:c7:f8:f0:c1:e7:c1:d8:79:f5:f4:55:
         8f:00:f0:98:a8:25:f8:32:0a:8e:2e:f5:27:b1:8b:83:5b:10:
         a4:61:0d:ef:15:14:28:51:04:09:d8:19:db:3f:a3:b0:9f:79:
         a2:b2:8d:ed:ba:bc:16:e0:0b:b2:97:7e:ab:c0:33:6b:fa:1e:
         fb:4a:48:93:d3:a5:8a:be:a4:e0:a1:a4:08:76:8f:e9:ec:d3:
         ec:b8:03:45:20:6c:fb:d4:99:45:7e:6c:ea:db:ae:da:8c:07:
         3d:d8:f2:31:7c:4f:b8:8c:6b:cc:ac:1f:24:12:25:ff:17:ed:
         00:99:df:70:cc:97:29:87:6d:69:a3:de:1a:0c:d5:7c:de:71:
         e3:e3:70:75:ac:d4:53:41:3c:f6:78:38:0b:da:79:19:ac:de:
         81:7e:a9:c8:61:52:dc:1d:c9:84:15:80:26:40:f1:73:b9:10:
         89:90:33:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdXdArkUMVzC5OsNAuoqnnRl6ISswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMjQxMDFaFw0yNTA0MDUwMjQ2MDFaMDMxMTAvBgNV
BAMTKEYyNzhENEY2OTQ5MTBGREZCNDQ2OURCM0M4RjZCODcxMzBDRURDMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOaF20jfQn+YGRg21F7fo8buW
MWsqp+f03aLfsgroTmU8FNFhf13WMnb80pk+87rZ/5XdPcu17gxsjqa2Mol0rOPA
ZvR4LiYBPOxrYjuKpXNKMH5pzY8rYtBsjF7dL6/kY+r7m1f2M8eiNTDaCurIgk8d
s9l8jJ7tPlUbbXPumDaQtOXq73CV6gfrxeR824FKCYKktiD2U9roN6+0UybtxVpj
C9nbVyw8jh4eka/GPNB5A7O2Jc5fFfaUL3QbsMMWF32jTQ9WAWu8zGvsvc5HuRl0
OVkJqejmQgK+Gk0fVNTTjhBEZWFpkyacEHeMgvrtC5vK1mNL9XbuIGrDDWOBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8njU9pSRD9+0Rp2zyPa4cTDO3DAwHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzODM5MmUzNzM2MmUzMjMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDvUzgMA0GCSqGSIb3DQEBCwUAA4IBAQBt/8lqvTBF
RhRNonFV5q4pDMpTlOXOvMUSKjFCt0Gj7FPoGnNRp6Xv15Q4UCCilFKdxdhoZJvL
XI1wpmU2xZ5bvlbTPMX/5hP71Jys9BEax/jwwefB2Hn19FWPAPCYqCX4MgqOLvUn
sYuDWxCkYQ3vFRQoUQQJ2BnbP6Own3miso3turwW4Auyl36rwDNr+h77SkiT06WK
vqTgoaQIdo/p7NPsuANFIGz71JlFfmzq267ajAc92PIxfE+4jGvMrB8kEiX/F+0A
md9wzJcph21po94aDNV83nHj43B1rNRTQTz2eDgL2nkZrN6BfqnIYVLcHcmEFYAm
QPFzuRCJkDOS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org