Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e362e302f32342d3234203d3e203238333036.roa
File:                     3138392e33382e362e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          a5+LwrpPyS7uqyUR/Xf5k4DQmxl2gwhuDUq29y7Rpis=
Subject key identifier:   09:56:A1:C2:6B:C0:36:A9:FE:2F:7C:5C:CB:B0:82:0A:A1:E5:53:D0
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       7A480272A5991D27ED09A140ED55C80C7BD2356B
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e362e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:13 +0000
ROA not before:           Tue 25 Jun 2024 15:16:13 +0000
ROA not after:            Tue 24 Jun 2025 15:21:13 +0000
asID:                     28306
IP address blocks:        189.38.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:48:02:72:a5:99:1d:27:ed:09:a1:40:ed:55:c8:0c:7b:d2:35:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:13 2024 GMT
            Not After : Jun 24 15:21:13 2025 GMT
        Subject: CN=0956A1C26BC036A9FE2F7C5CCBB0820AA1E553D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:08:9f:79:f8:9c:42:d5:eb:c3:c6:3d:1b:
                    9d:c5:a8:de:c6:b4:15:47:09:7b:72:83:85:4b:6a:
                    fb:fc:ae:d1:d6:54:0c:de:e2:0a:b5:a3:53:fd:16:
                    67:59:c5:1f:5e:3a:9f:61:a9:40:ef:fd:a7:17:70:
                    7a:b2:99:c8:b5:b9:00:d4:9d:41:cd:40:f9:58:e4:
                    40:dd:c0:13:1b:3c:cf:88:d8:f3:0a:fd:4d:1b:c5:
                    f6:1c:d7:d8:26:c3:4c:67:fd:3a:c5:af:07:e3:3c:
                    ff:81:2f:37:72:b0:f6:11:e7:b6:81:de:2d:13:19:
                    b1:38:20:b5:7f:9d:0b:fb:4e:f1:da:6a:e4:8e:ef:
                    dc:9d:8a:c5:31:ab:f3:71:c2:fd:78:48:c5:8e:d4:
                    6f:ef:31:ef:d7:be:16:9a:9b:96:95:d7:08:1d:15:
                    8f:ae:49:17:2e:81:e1:31:3b:2c:47:fd:0b:81:b5:
                    d4:17:9d:71:d5:9f:b8:9a:99:5d:8c:5b:a1:af:82:
                    05:ca:90:a6:a4:8a:17:7c:a3:9e:6f:00:2d:13:10:
                    41:01:5b:3a:09:3d:55:4c:66:0c:40:05:3d:9f:02:
                    56:2a:f6:89:33:0c:fb:a5:9a:71:3d:4c:69:28:93:
                    d4:32:fa:51:d4:a2:80:07:3e:6d:2a:67:13:71:a5:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:56:A1:C2:6B:C0:36:A9:FE:2F:7C:5C:CB:B0:82:0A:A1:E5:53:D0
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e362e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:cf:40:a6:04:0c:e3:25:2d:e9:2e:10:26:ff:33:77:aa:2b:
         84:1a:ba:6f:62:fa:67:4d:9b:ce:0b:78:64:d4:8b:41:6d:c0:
         a8:32:a7:b0:01:53:bf:8f:ee:9f:39:a8:61:2a:cb:59:41:e8:
         0e:bc:f2:88:7d:1b:14:e0:d4:d8:34:e7:59:bf:b5:2b:90:51:
         88:cf:13:de:d4:b2:11:b1:83:2a:f2:d7:1a:39:6e:1c:0d:41:
         dd:40:9d:ef:06:ec:1f:ec:ef:6f:fd:d2:14:28:34:b5:04:43:
         d1:f4:b2:89:4c:46:f7:51:96:44:e2:f7:a7:70:3b:c7:b0:ba:
         b2:fb:a9:e9:6c:f3:18:43:ed:8d:4f:55:04:24:8c:cf:2c:7c:
         93:e9:86:d6:6f:b5:65:3c:6d:17:f0:2c:c4:b1:3c:87:09:75:
         1e:5b:b9:af:47:86:a5:f0:8d:da:fd:1d:5c:a7:cb:b5:8c:d8:
         af:27:df:44:a1:35:7c:19:4b:5e:d0:ae:b6:7a:b3:79:12:47:
         7c:7a:e1:80:c2:43:48:56:6c:76:45:e1:1e:0d:67:b0:89:a1:
         f5:e2:8c:c9:09:75:cb:b9:3f:28:4d:e2:e9:4c:ce:25:6c:79:
         2e:8a:c0:f7:95:64:d1:4e:3b:12:fa:cf:fa:c0:46:bd:72:50:
         d0:50:da:38
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUekgCcqWZHSftCaFA7VXIDHvSNWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MTNaFw0yNTA2MjQxNTIxMTNaMDMxMTAvBgNV
BAMTKDA5NTZBMUMyNkJDMDM2QTlGRTJGN0M1Q0NCQjA4MjBBQTFFNTUzRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mQifeficQtXrw8Y9G53FqN7G
tBVHCXtyg4VLavv8rtHWVAze4gq1o1P9FmdZxR9eOp9hqUDv/acXcHqymci1uQDU
nUHNQPlY5EDdwBMbPM+I2PMK/U0bxfYc19gmw0xn/TrFrwfjPP+BLzdysPYR57aB
3i0TGbE4ILV/nQv7TvHaauSO79ydisUxq/Nxwv14SMWO1G/vMe/Xvhaam5aV1wgd
FY+uSRcugeExOyxH/QuBtdQXnXHVn7iamV2MW6GvggXKkKakihd8o55vAC0TEEEB
WzoJPVVMZgxABT2fAlYq9okzDPulmnE9TGkok9Qy+lHUooAHPm0qZxNxpbD5AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUCVahwmvANqn+L3xcy7CCCqHlU9AwHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzODM5MmUzMzM4MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzMw
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC9JgYwDQYJKoZIhvcNAQELBQADggEBAGbPQKYEDOMlLeku
ECb/M3eqK4Qaum9i+mdNm84LeGTUi0FtwKgyp7ABU7+P7p85qGEqy1lB6A688oh9
GxTg1Ng051m/tSuQUYjPE97UshGxgyry1xo5bhwNQd1Ane8G7B/s72/90hQoNLUE
Q9H0solMRvdRlkTi96dwO8ewurL7qels8xhD7Y1PVQQkjM8sfJPphtZvtWU8bRfw
LMSxPIcJdR5bua9HhqXwjdr9HVyny7WM2K8n30ShNXwZS17QrrZ6s3kSR3x64YDC
Q0hWbHZF4R4NZ7CJofXijMkJdcu5PyhN4ulMziVseS6KwPeVZNFOOxL6z/rARr1y
UNBQ2jg=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:49 2025 by rpki-client