Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32322d3232203d3e203238333630.roa
File:                     3138392e37362e3232342e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier:          F83Nekj2PXBXxUL7WItEmgDJWjYStQcRWVqFL0isX+M=
Subject key identifier:   26:48:6A:30:A9:4F:F4:34:06:7F:76:37:DC:7A:0C:C6:9D:1C:C5:2E
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       07A214474A3F6CCDFCC624899AB0AFEF9A53CB34
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32322d3232203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:26 +0000
ROA not before:           Sat 06 Apr 2024 02:40:26 +0000
ROA not after:            Sat 05 Apr 2025 02:45:26 +0000
asID:                     28360
IP address blocks:        189.76.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a2:14:47:4a:3f:6c:cd:fc:c6:24:89:9a:b0:af:ef:9a:53:cb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:26 2024 GMT
            Not After : Apr  5 02:45:26 2025 GMT
        Subject: CN=26486A30A94FF434067F7637DC7A0CC69D1CC52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:eb:3b:72:21:4d:5f:16:8d:49:6b:b3:9c:
                    c0:c7:07:b8:6e:fb:33:be:a8:e9:c4:08:0c:b7:f5:
                    65:0e:a8:0a:83:24:2f:21:a7:7f:85:70:33:eb:6f:
                    da:a1:b1:9a:0f:eb:15:9d:6a:1e:e5:b6:9c:b4:4d:
                    58:fe:c9:cb:e2:65:35:87:a1:5f:ce:6a:45:5c:42:
                    95:61:9d:38:d2:81:cc:88:ec:46:61:2a:84:ac:37:
                    1f:55:5c:10:49:47:79:90:ab:61:7e:45:71:27:2f:
                    3d:1a:36:84:8f:34:67:71:68:2a:35:9b:bc:63:69:
                    39:28:15:a4:41:1e:4b:7b:8f:4c:54:db:1a:aa:56:
                    3d:65:2c:a1:f1:51:e7:39:13:a8:f3:5a:87:ea:f8:
                    4e:14:c4:88:07:6b:83:93:35:e2:37:59:42:c5:ec:
                    3f:ca:b0:f9:6a:94:7a:bb:c7:58:22:15:46:21:f7:
                    64:60:a1:c6:b2:1c:ba:16:14:12:31:be:3a:b7:9e:
                    65:b6:38:29:19:54:7a:ad:81:d4:c8:34:d7:7b:07:
                    5f:cc:71:cc:a7:46:88:cf:4d:94:f9:e6:40:d8:7f:
                    26:21:4b:a5:6c:74:57:eb:79:67:2b:17:26:78:dc:
                    fc:1a:60:c5:ca:a9:a9:1c:64:7e:af:a5:57:35:77:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:48:6A:30:A9:4F:F4:34:06:7F:76:37:DC:7A:0C:C6:9D:1C:C5:2E
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32322d3232203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:0e:55:fc:f5:54:b1:29:31:6a:ba:89:9b:88:be:9a:95:
         c1:16:cf:b1:bb:80:08:63:41:6c:bc:4d:91:e6:18:27:70:4b:
         a6:61:f7:0a:a2:8f:bc:8c:dd:78:dd:15:1c:78:8e:f4:50:15:
         4d:65:0f:6b:4a:9f:06:0b:40:b7:75:b6:a4:f4:0a:ef:96:f7:
         ff:59:d0:ba:2c:48:53:b3:60:f5:66:c1:a4:cc:93:62:1a:ad:
         76:46:0b:7d:12:13:c5:16:c3:1c:ed:c5:7b:d7:48:17:64:6d:
         df:56:9e:a8:b5:98:f3:bd:b2:40:95:8d:4e:a7:c5:26:20:a1:
         ed:42:f0:b3:1d:43:a6:9b:56:69:ba:44:d0:0f:e7:4e:ce:30:
         e6:c0:d6:70:8c:35:f6:33:f3:d6:e0:dc:25:0d:b5:90:67:6a:
         a5:17:80:69:9f:37:14:d0:90:e7:9d:34:ca:ce:5b:15:49:d8:
         6d:64:fd:f3:d8:0b:72:df:b8:aa:14:4f:eb:8d:34:44:27:c9:
         d1:44:29:6e:bb:80:18:c6:76:50:c1:1e:af:9e:42:64:97:53:
         2b:bf:06:55:3b:91:c5:28:94:13:bc:65:05:1b:cf:87:a4:4c:
         84:52:15:c7:c9:f3:5f:44:eb:48:93:ad:1e:51:b0:3e:22:e6:
         ed:b4:6a:17
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB6IUR0o/bM38xiSJmrCv75pTyzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMjQwMjZaFw0yNTA0MDUwMjQ1MjZaMDMxMTAvBgNV
BAMTKDI2NDg2QTMwQTk0RkY0MzQwNjdGNzYzN0RDN0EwQ0M2OUQxQ0M1MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWUes7ciFNXxaNSWuznMDHB7hu
+zO+qOnECAy39WUOqAqDJC8hp3+FcDPrb9qhsZoP6xWdah7ltpy0TVj+ycviZTWH
oV/OakVcQpVhnTjSgcyI7EZhKoSsNx9VXBBJR3mQq2F+RXEnLz0aNoSPNGdxaCo1
m7xjaTkoFaRBHkt7j0xU2xqqVj1lLKHxUec5E6jzWofq+E4UxIgHa4OTNeI3WULF
7D/KsPlqlHq7x1giFUYh92RgocayHLoWFBIxvjq3nmW2OCkZVHqtgdTINNd7B1/M
ccynRojPTZT55kDYfyYhS6VsdFfreWcrFyZ43PwaYMXKqakcZH6vpVc1d9bVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJkhqMKlP9DQGf3Y33HoMxp0cxS4wHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzODM5MmUzNzM2MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvUzgMA0GCSqGSIb3DQEBCwUAA4IBAQBszQ5V/PVU
sSkxarqJm4i+mpXBFs+xu4AIY0FsvE2R5hgncEumYfcKoo+8jN143RUceI70UBVN
ZQ9rSp8GC0C3dbak9Arvlvf/WdC6LEhTs2D1ZsGkzJNiGq12Rgt9EhPFFsMc7cV7
10gXZG3fVp6otZjzvbJAlY1Op8UmIKHtQvCzHUOmm1ZpukTQD+dOzjDmwNZwjDX2
M/PW4NwlDbWQZ2qlF4BpnzcU0JDnnTTKzlsVSdhtZP3z2Aty37iqFE/rjTREJ8nR
RCluu4AYxnZQwR6vnkJkl1MrvwZVO5HFKJQTvGUFG8+HpEyEUhXHyfNfROtIk60e
UbA+IubttGoX
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org