Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/3138392e33382e31362e302f32302d3234203d3e203238353736.roa
File:                     3138392e33382e31362e302f32302d3234203d3e203238353736.roa (raw, json)
Hash identifier:          6TyFeYzSuQYrUgq0YJVYdDd8zRmqnBPxL83rer9AAio=
Subject key identifier:   CA:C7:58:C6:31:E7:6A:B6:F2:36:09:79:08:F1:C6:72:D9:E0:3F:FF
Certificate issuer:       /CN=0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134
Certificate serial:       0B7D1B9D4E9227A566C67FD7A050D8A2D5DAE395
Authority key identifier: 0D:2F:1A:C4:20:6F:6E:2C:C7:92:6E:DC:A9:F1:8D:2E:87:51:61:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/3138392e33382e31362e302f32302d3234203d3e203238353736.roa
Signing time:             Wed 03 Apr 2024 18:30:39 +0000
ROA not before:           Wed 03 Apr 2024 18:25:39 +0000
ROA not after:            Wed 02 Apr 2025 18:30:39 +0000
asID:                     28576
IP address blocks:        189.38.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7d:1b:9d:4e:92:27:a5:66:c6:7f:d7:a0:50:d8:a2:d5:da:e3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134
        Validity
            Not Before: Apr  3 18:25:39 2024 GMT
            Not After : Apr  2 18:30:39 2025 GMT
        Subject: CN=CAC758C631E76AB6F236097908F1C672D9E03FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:0c:92:e9:b0:9f:bf:6d:c9:fe:5d:b5:8f:
                    74:d2:18:57:32:5f:31:2c:2e:9d:e6:6c:ab:f9:0a:
                    0d:8c:28:e9:b0:f6:eb:70:12:d8:1d:19:4a:80:dc:
                    59:2a:a5:7d:0d:69:e3:a0:a9:30:84:78:42:b3:10:
                    34:53:a5:cd:5b:45:49:20:ba:51:dc:7a:08:98:18:
                    06:85:52:66:da:17:41:fd:fe:0f:c8:9f:80:4a:2f:
                    d0:d4:c9:4f:7e:1c:55:ca:f8:4b:76:13:42:6e:c3:
                    75:87:a8:ae:45:46:80:41:c4:53:2e:1d:1a:75:c9:
                    ac:69:96:1a:d8:60:fe:9c:c6:88:68:29:c1:c1:25:
                    66:64:01:32:8c:14:9f:94:7f:81:26:9f:c8:b5:97:
                    50:63:eb:75:20:16:a8:bb:3d:c7:14:c8:22:96:29:
                    2b:52:2f:1f:ca:5a:12:5d:50:19:22:dd:3d:35:bb:
                    4c:e0:67:a7:7c:d7:56:80:c9:21:14:4c:42:57:0c:
                    9a:0e:cf:ac:d6:e0:a5:fd:8a:6b:a3:7b:2e:2a:5b:
                    2f:67:5f:56:b2:8a:3c:85:9f:b8:33:9c:80:bc:bf:
                    0a:2c:96:8d:e9:33:84:ec:95:cb:ec:51:7d:cb:99:
                    64:11:43:29:d9:c9:1a:98:ca:66:ea:57:dc:6f:32:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C7:58:C6:31:E7:6A:B6:F2:36:09:79:08:F1:C6:72:D9:E0:3F:FF
            X509v3 Authority Key Identifier:
                keyid:0D:2F:1A:C4:20:6F:6E:2C:C7:92:6E:DC:A9:F1:8D:2E:87:51:61:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/3138392e33382e31362e302f32302d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:74:2e:40:49:2d:64:ed:11:d9:e9:69:26:9d:4b:20:51:bd:
         1a:13:0a:68:f5:58:30:55:61:bc:c6:f8:e7:5d:35:f9:8c:f9:
         c7:86:55:32:16:b6:b2:2c:d3:d4:ab:d8:62:65:96:63:0a:3b:
         2c:85:90:3b:af:e2:79:10:13:3d:90:e5:b4:8b:a0:e9:18:92:
         84:f1:c6:9d:0f:9f:5f:d8:88:ff:61:f0:a0:bf:e1:8e:6c:7d:
         4c:cf:aa:18:b4:fb:da:c7:ac:1b:c0:25:0c:87:27:51:ee:4f:
         d3:69:92:ab:1c:b6:ea:86:c9:9f:ef:12:92:ba:00:51:70:1f:
         e3:81:1b:59:dc:1f:d1:09:f4:8d:e1:ee:39:c0:09:2d:02:e7:
         b4:f0:bb:4a:6e:02:f1:03:10:83:0c:86:84:5e:6f:e5:86:f5:
         1d:0e:f6:8d:72:0e:8e:9b:a8:85:58:ef:c3:21:19:b8:c7:46:
         3e:fe:66:69:86:a6:0c:c1:81:7d:d0:fb:11:1c:ea:c9:b3:65:
         8a:d1:ec:ee:f8:52:d9:61:c0:77:41:0f:0b:fa:db:fe:d3:c0:
         6b:67:3e:c4:aa:58:5e:40:11:b8:83:54:6b:49:87:56:e4:59:
         89:81:5b:27:ca:c3:a2:f7:77:ee:6e:0e:90:70:eb:47:3a:3d:
         71:c2:e0:89
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC30bnU6SJ6Vmxn/XoFDYotXa45UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQyRjFBQzQyMDZGNkUyQ0M3OTI2RURDQTlGMThEMkU4
NzUxNjEzNDAeFw0yNDA0MDMxODI1MzlaFw0yNTA0MDIxODMwMzlaMDMxMTAvBgNV
BAMTKENBQzc1OEM2MzFFNzZBQjZGMjM2MDk3OTA4RjFDNjcyRDlFMDNGRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm6gyS6bCfv23J/l21j3TSGFcy
XzEsLp3mbKv5Cg2MKOmw9utwEtgdGUqA3FkqpX0NaeOgqTCEeEKzEDRTpc1bRUkg
ulHcegiYGAaFUmbaF0H9/g/In4BKL9DUyU9+HFXK+Et2E0Juw3WHqK5FRoBBxFMu
HRp1yaxplhrYYP6cxohoKcHBJWZkATKMFJ+Uf4Emn8i1l1Bj63UgFqi7PccUyCKW
KStSLx/KWhJdUBki3T01u0zgZ6d811aAySEUTEJXDJoOz6zW4KX9imujey4qWy9n
X1ayijyFn7gznIC8vwoslo3pM4TslcvsUX3LmWQRQynZyRqYymbqV9xvMgurAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUysdYxjHnarbyNgl5CPHGctngP/8wHwYDVR0j
BBgwFoAUDS8axCBvbizHkm7cqfGNLodRYTQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0NHV0x1YW1XQlJTWnJ6eUFWZzZyd1BhOGQ2NWhvN2FnNEY5Wnl4WkJj
NU4vMS8wRDJGMUFDNDIwNkY2RTJDQzc5MjZFRENBOUYxOEQyRTg3NTE2MTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBEMkYxQUM0MjA2RjZFMkND
NzkyNkVEQ0E5RjE4RDJFODc1MTYxMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdDR1dMdWFtV0JSU1pyenlBVmc2cndQYThkNjVobzdhZzRGOVp5eFpCYzVOLzEv
MzEzODM5MmUzMzM4MmUzMTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM1
MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0mEDANBgkqhkiG9w0BAQsFAAOCAQEAVnQuQEktZO0R
2elpJp1LIFG9GhMKaPVYMFVhvMb45101+Yz5x4ZVMha2sizT1KvYYmWWYwo7LIWQ
O6/ieRATPZDltIug6RiShPHGnQ+fX9iI/2HwoL/hjmx9TM+qGLT72sesG8AlDIcn
Ue5P02mSqxy26obJn+8SkroAUXAf44EbWdwf0Qn0jeHuOcAJLQLntPC7Sm4C8QMQ
gwyGhF5v5Yb1HQ72jXIOjpuohVjvwyEZuMdGPv5maYamDMGBfdD7ERzqybNlitHs
7vhS2WHAd0EPC/rb/tPAa2c+xKpYXkARuINUa0mHVuRZiYFbJ8rDovd37m4OkHDr
Rzo9ccLgiQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org