Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3234203d3e20323632393839.roa
File:                     3138392e38342e3133362e302f32312d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          YJHQqkBN5z2E5QQZ/nve9AdZ26j1vag/Ag3IY2epZlk=
Subject key identifier:   D2:04:E0:1D:8E:AE:71:E5:95:37:32:FB:CD:D1:79:64:FD:99:6B:4E
Certificate issuer:       /CN=30EC14818870F287A0496328742C6ECE8AD0FA82
Certificate serial:       29B105E8ACF51CC4FD3A07A8760A7B7FE0F656F7
Authority key identifier: 30:EC:14:81:88:70:F2:87:A0:49:63:28:74:2C:6E:CE:8A:D0:FA:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30EC14818870F287A0496328742C6ECE8AD0FA82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3234203d3e20323632393839.roa
Signing time:             Wed 03 Jan 2024 22:42:13 +0000
ROA not before:           Wed 03 Jan 2024 22:37:13 +0000
ROA not after:            Wed 01 Jan 2025 22:42:13 +0000
asID:                     262989
IP address blocks:        189.84.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b1:05:e8:ac:f5:1c:c4:fd:3a:07:a8:76:0a:7b:7f:e0:f6:56:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC14818870F287A0496328742C6ECE8AD0FA82
        Validity
            Not Before: Jan  3 22:37:13 2024 GMT
            Not After : Jan  1 22:42:13 2025 GMT
        Subject: CN=D204E01D8EAE71E5953732FBCDD17964FD996B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:f8:c7:32:2b:89:67:70:fc:cd:5a:f7:cc:
                    c7:aa:b7:d4:a5:16:92:c9:97:df:8e:4a:7b:e5:e7:
                    92:ec:97:e6:0a:e6:5b:5b:65:bc:44:21:dc:dd:0c:
                    70:64:bd:6e:54:31:6f:fd:66:b2:d2:ab:88:c5:e5:
                    ce:7c:ad:9f:c9:05:62:cb:90:c0:4d:74:44:75:72:
                    a7:83:55:75:bf:25:5a:83:d6:fe:02:c3:9a:b9:f1:
                    52:86:84:2f:fd:0b:10:23:02:6e:a0:4e:18:c9:c4:
                    9d:e5:21:b7:72:de:71:61:57:aa:48:58:38:4c:5a:
                    fd:9f:f9:01:96:78:2c:62:23:74:ed:cc:4e:db:db:
                    f3:39:3a:4b:35:d7:e2:22:c1:b3:75:56:53:77:ce:
                    54:b4:54:7a:fa:bf:84:03:f1:e7:b0:11:04:cf:ed:
                    08:1c:da:31:e6:3d:c4:c1:6a:ab:9b:f0:69:ac:d2:
                    f5:71:a8:85:55:08:4d:5c:cb:96:f5:a5:5d:82:f7:
                    e0:3a:45:7e:ed:60:db:2f:99:62:73:7c:f0:13:22:
                    10:2d:ba:73:89:c8:d4:89:c1:02:d6:4c:ba:1f:8b:
                    dd:34:3b:c6:05:ac:36:35:53:ef:3d:e0:75:8c:6f:
                    24:e7:1d:98:62:32:f5:52:86:ab:53:2d:46:da:54:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:E0:1D:8E:AE:71:E5:95:37:32:FB:CD:D1:79:64:FD:99:6B:4E
            X509v3 Authority Key Identifier:
                keyid:30:EC:14:81:88:70:F2:87:A0:49:63:28:74:2C:6E:CE:8A:D0:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/30EC14818870F287A0496328742C6ECE8AD0FA82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30EC14818870F287A0496328742C6ECE8AD0FA82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:e3:c1:4f:1a:85:a0:83:7f:a5:49:04:cc:f9:c0:7e:1f:
         29:b6:b4:63:12:a1:86:d4:fd:2f:4d:a4:de:48:66:64:15:67:
         45:43:60:c6:e5:62:45:c2:17:55:10:4a:56:60:bd:81:fd:81:
         bf:da:10:64:79:2a:62:76:74:64:d6:38:0a:c9:c1:7f:d0:17:
         b1:39:cf:aa:18:49:a1:89:ed:a3:1a:c2:fb:3f:a0:74:55:10:
         41:fa:04:06:cf:7b:4a:20:b6:ea:a3:e6:70:cc:06:5f:0f:10:
         df:7d:a9:67:a0:b6:0d:75:e1:69:ad:a0:4a:d4:28:8a:c1:de:
         86:7f:00:e9:45:1f:f3:99:66:0e:0d:61:24:c4:69:76:95:22:
         89:10:99:34:a3:2b:62:c0:95:86:71:8d:2e:08:9d:3c:59:2d:
         6c:29:b9:3a:81:88:d8:ec:6a:66:0a:4a:3d:1d:35:97:01:a5:
         65:05:a3:7c:32:1c:cc:ad:2f:cf:b0:d9:ba:1d:f2:99:51:5b:
         3f:94:ed:29:f4:d6:6a:1a:bd:6a:48:0c:17:e0:ef:2b:20:4b:
         be:d8:0b:a8:29:0c:cf:ca:10:e7:73:06:52:e5:2e:e3:34:08:
         bf:c2:56:bf:fd:8c:aa:85:9e:f2:b9:0c:65:15:26:77:c9:b5:
         16:92:6c:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKbEF6Kz1HMT9Ogeodgp7f+D2VvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBFQzE0ODE4ODcwRjI4N0EwNDk2MzI4NzQyQzZFQ0U4
QUQwRkE4MjAeFw0yNDAxMDMyMjM3MTNaFw0yNTAxMDEyMjQyMTNaMDMxMTAvBgNV
BAMTKEQyMDRFMDFEOEVBRTcxRTU5NTM3MzJGQkNERDE3OTY0RkQ5OTZCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjWfjHMiuJZ3D8zVr3zMeqt9Sl
FpLJl9+OSnvl55Lsl+YK5ltbZbxEIdzdDHBkvW5UMW/9ZrLSq4jF5c58rZ/JBWLL
kMBNdER1cqeDVXW/JVqD1v4Cw5q58VKGhC/9CxAjAm6gThjJxJ3lIbdy3nFhV6pI
WDhMWv2f+QGWeCxiI3TtzE7b2/M5Oks11+IiwbN1VlN3zlS0VHr6v4QD8eewEQTP
7Qgc2jHmPcTBaqub8Gms0vVxqIVVCE1cy5b1pV2C9+A6RX7tYNsvmWJzfPATIhAt
unOJyNSJwQLWTLofi900O8YFrDY1U+894HWMbyTnHZhiMvVShqtTLUbaVPlhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0gTgHY6uceWVNzL7zdF5ZP2Za04wHwYDVR0j
BBgwFoAUMOwUgYhw8oegSWModCxuzorQ+oIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMC8zMEVDMTQ4MTg4NzBGMjg3QTA0OTYzMjg3NDJDNkVDRThBRDBGQTgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwRUMxNDgxODg3MEYyODdB
MDQ5NjMyODc0MkM2RUNFOEFEMEZBODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzAv
MzEzODM5MmUzODM0MmUzMTMzMzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzOTM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO9VIgwDQYJKoZIhvcNAQELBQADggEBAAGf48FP
GoWgg3+lSQTM+cB+Hym2tGMSoYbU/S9NpN5IZmQVZ0VDYMblYkXCF1UQSlZgvYH9
gb/aEGR5KmJ2dGTWOArJwX/QF7E5z6oYSaGJ7aMawvs/oHRVEEH6BAbPe0ogtuqj
5nDMBl8PEN99qWegtg114WmtoErUKIrB3oZ/AOlFH/OZZg4NYSTEaXaVIokQmTSj
K2LAlYZxjS4InTxZLWwpuTqBiNjsamYKSj0dNZcBpWUFo3wyHMytL8+w2bod8plR
Wz+U7Sn01moavWpIDBfg7ysgS77YC6gpDM/KEOdzBlLlLuM0CL/CVr/9jKqFnvK5
DGUVJnfJtRaSbFg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org