Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/3138392e39312e3132382e302f32302d3332203d3e203238323035.roa
File:                     3138392e39312e3132382e302f32302d3332203d3e203238323035.roa (raw, json)
Hash identifier:          6RIj93ZgMp3Zc3AbcmUT6ZWd3K8kwkMJuu1tzUgJay0=
Subject key identifier:   4D:B1:5C:9E:CB:71:26:B7:E4:11:7A:F4:8A:1E:20:5C:3D:6F:F1:24
Certificate issuer:       /CN=8932ACC1911E393FFC9CEB81881A0D18DE307D35
Certificate serial:       76AB0AFCC027CD3DDD67B16BE41FEB4B43352E6F
Authority key identifier: 89:32:AC:C1:91:1E:39:3F:FC:9C:EB:81:88:1A:0D:18:DE:30:7D:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8932ACC1911E393FFC9CEB81881A0D18DE307D35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/3138392e39312e3132382e302f32302d3332203d3e203238323035.roa
Signing time:             Wed 22 May 2024 11:28:16 +0000
ROA not before:           Wed 22 May 2024 11:23:16 +0000
ROA not after:            Wed 21 May 2025 11:28:16 +0000
asID:                     28205
IP address blocks:        189.91.128.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ab:0a:fc:c0:27:cd:3d:dd:67:b1:6b:e4:1f:eb:4b:43:35:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8932ACC1911E393FFC9CEB81881A0D18DE307D35
        Validity
            Not Before: May 22 11:23:16 2024 GMT
            Not After : May 21 11:28:16 2025 GMT
        Subject: CN=4DB15C9ECB7126B7E4117AF48A1E205C3D6FF124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:9e:43:30:d4:64:68:15:72:cb:21:3a:fe:
                    b8:dd:56:d3:d0:cc:f3:b3:eb:eb:e9:c3:84:f5:87:
                    b7:f6:3a:f2:6f:fb:9f:a1:c9:06:e8:0a:9b:bf:ef:
                    f5:64:31:fb:93:94:76:6e:3d:f4:a1:ea:9d:5a:65:
                    fc:fc:81:70:66:70:db:21:f8:2b:86:5f:22:c9:f5:
                    c6:d2:7b:10:cb:be:79:e7:1c:cc:a2:07:3c:05:e7:
                    35:b1:02:c8:fb:35:57:fe:0e:aa:73:b1:6f:8a:0f:
                    04:69:ad:29:26:67:46:16:b1:69:a1:8d:d4:99:6c:
                    89:5b:62:74:77:d6:10:65:3b:02:f2:c6:d9:81:fe:
                    ce:a3:19:28:e9:ea:3b:6a:81:40:7c:45:ae:85:ba:
                    fd:e7:e8:d1:f8:dc:76:17:bb:22:8d:fe:15:3f:c6:
                    a6:a3:72:41:45:35:fa:36:ab:ea:0d:fb:78:fd:90:
                    67:aa:9b:63:d5:95:38:8a:a4:17:97:77:79:4a:00:
                    8d:96:98:fe:b1:e4:99:42:79:0b:02:61:0e:ff:f4:
                    6d:a7:d3:02:33:f0:77:a1:5c:2d:9a:2c:9f:5e:aa:
                    4d:29:d3:20:98:8e:75:f4:89:d2:ff:38:b6:c5:45:
                    e9:31:f7:e9:67:83:8e:71:82:ee:d7:19:7d:93:f8:
                    b3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B1:5C:9E:CB:71:26:B7:E4:11:7A:F4:8A:1E:20:5C:3D:6F:F1:24
            X509v3 Authority Key Identifier:
                keyid:89:32:AC:C1:91:1E:39:3F:FC:9C:EB:81:88:1A:0D:18:DE:30:7D:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/8932ACC1911E393FFC9CEB81881A0D18DE307D35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8932ACC1911E393FFC9CEB81881A0D18DE307D35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/3138392e39312e3132382e302f32302d3332203d3e203238323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:35:62:3c:fc:64:91:9d:fc:bb:c1:48:71:bb:91:2d:d1:32:
         d0:b9:c5:e0:4b:80:63:4f:d5:8f:2d:f5:12:3f:42:2a:07:dd:
         c1:af:93:fb:af:e2:b4:51:0a:b4:c8:08:b5:fc:26:b4:5d:f8:
         ef:8d:88:3e:4d:a8:25:91:15:7a:d4:b9:13:4b:db:de:c0:b2:
         00:44:3d:1e:69:4b:c1:6a:10:51:2a:41:25:81:b5:61:69:5a:
         af:8d:16:44:1e:2c:8f:1b:88:ae:7c:ae:59:eb:30:a1:61:5d:
         0f:86:92:14:e8:25:e3:47:5e:9b:45:52:f5:d2:c9:31:ac:95:
         6a:26:94:de:c5:c3:7f:6f:c7:1a:5d:8c:c2:9e:26:a2:db:f6:
         69:00:13:ca:82:c2:87:03:1b:69:1e:0a:c2:b0:0e:63:38:b3:
         9f:58:1a:39:9a:e3:c8:53:7b:44:03:0b:13:5d:1e:b1:09:89:
         6e:c1:5e:da:b8:f0:00:20:42:66:26:87:8f:62:2d:83:00:82:
         8b:37:26:a7:fd:f4:a9:fd:1b:4a:2d:ee:5d:73:f4:6b:e6:8e:
         e3:04:6d:69:7d:81:48:3b:ec:e0:13:18:fa:78:3e:68:d1:9f:
         22:6e:a1:5e:98:bd:86:5e:10:b3:75:3a:77:bc:9a:0e:74:30:
         9b:c0:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org