Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/0/3138392e38342e302e302f32302d3234203d3e203238333632.roa
File:                     3138392e38342e302e302f32302d3234203d3e203238333632.roa (raw, json)
Hash identifier:          6w7SIdQgfM9m/IC1XpRk8pMNteLNSDBxTMvkeTwxPLE=
Subject key identifier:   7E:9C:3F:5E:FE:27:0A:45:D9:EA:63:3D:44:B2:D6:3C:1D:47:FD:A3
Certificate issuer:       /CN=EE5717DAEA660CFD0197F96EF655B259883897BB
Certificate serial:       4E20A20C55960C029E5BA5DE4A8DA3DB39227A46
Authority key identifier: EE:57:17:DA:EA:66:0C:FD:01:97:F9:6E:F6:55:B2:59:88:38:97:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE5717DAEA660CFD0197F96EF655B259883897BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/0/3138392e38342e302e302f32302d3234203d3e203238333632.roa
Signing time:             Fri 08 Sep 2023 14:08:47 +0000
ROA not before:           Fri 08 Sep 2023 14:03:47 +0000
ROA not after:            Fri 06 Sep 2024 14:08:47 +0000
asID:                     28362
IP address blocks:        189.84.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:20:a2:0c:55:96:0c:02:9e:5b:a5:de:4a:8d:a3:db:39:22:7a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5717DAEA660CFD0197F96EF655B259883897BB
        Validity
            Not Before: Sep  8 14:03:47 2023 GMT
            Not After : Sep  6 14:08:47 2024 GMT
        Subject: CN=7E9C3F5EFE270A45D9EA633D44B2D63C1D47FDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:f1:c1:da:c0:95:ca:88:50:97:94:2e:ed:
                    89:91:f9:46:7b:a1:8d:cd:15:b1:e6:00:20:dd:44:
                    1f:28:24:3f:71:31:18:0a:91:c8:3f:36:b4:1b:32:
                    5e:bf:72:64:7f:f7:17:e5:a6:ff:fb:d4:22:b6:20:
                    1e:88:1e:2a:97:5a:be:d0:4b:04:4d:d6:60:a8:37:
                    d6:31:a9:8d:7a:a7:72:78:d4:5d:d5:56:3c:49:ab:
                    46:b2:3d:f7:90:bf:48:73:94:5c:e4:e1:63:5c:dc:
                    0c:88:a6:f9:fc:13:c0:84:06:b2:a1:bf:c8:e9:23:
                    fb:e9:2c:72:a9:3b:7a:7b:30:10:2c:27:98:6e:64:
                    14:f3:97:90:94:34:b4:a8:f7:64:0d:e4:3d:12:7f:
                    8f:01:af:3b:97:a7:3e:af:ba:5a:c4:a4:1f:31:72:
                    4c:e0:21:fd:19:33:85:bc:8e:86:c4:4d:81:9f:c0:
                    97:78:1c:e8:51:21:90:2b:47:9f:c2:24:1a:46:af:
                    99:16:45:09:e9:c7:7d:e5:68:97:ee:e1:fa:ab:13:
                    86:de:8c:f3:5c:d5:6a:9e:04:15:97:ca:67:00:bc:
                    6e:5f:0a:89:27:bd:d1:92:b8:3a:30:0d:47:b1:28:
                    cf:5a:e4:b2:97:48:b7:8e:8b:06:5b:66:83:a4:65:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:3F:5E:FE:27:0A:45:D9:EA:63:3D:44:B2:D6:3C:1D:47:FD:A3
            X509v3 Authority Key Identifier:
                keyid:EE:57:17:DA:EA:66:0C:FD:01:97:F9:6E:F6:55:B2:59:88:38:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/0/EE5717DAEA660CFD0197F96EF655B259883897BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE5717DAEA660CFD0197F96EF655B259883897BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/0/3138392e38342e302e302f32302d3234203d3e203238333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:9c:bf:d2:fe:e0:01:98:5b:01:27:40:c4:e0:40:d6:a9:53:
         f5:d0:91:62:f0:cb:72:d2:f5:57:b7:fd:a1:80:99:74:5e:47:
         55:63:e5:35:b5:de:e2:e8:cf:64:ed:73:7a:71:53:8d:44:10:
         66:e2:6c:f3:3e:d5:bf:0a:88:a7:3f:c2:c3:1d:4f:0b:16:96:
         25:6a:cb:e8:77:b6:db:47:f1:fd:66:93:22:6a:e6:5e:6f:7f:
         62:a5:d7:88:54:2f:12:27:a9:7e:e5:0a:75:ea:20:55:01:80:
         cd:00:b3:b9:77:ea:d3:33:e7:30:a7:71:06:4d:3e:55:3a:27:
         66:eb:1a:f0:0e:01:7c:99:7e:0b:99:aa:66:43:87:e4:d8:da:
         82:28:23:a3:f3:1b:8c:db:4e:25:82:23:78:b9:a9:1b:93:b6:
         b9:f3:a3:d8:85:3c:65:f4:41:78:ba:db:89:e1:f7:26:98:71:
         62:c1:e1:f5:27:4b:6d:4e:34:4f:ab:3c:b3:d3:41:48:6b:a0:
         1c:aa:33:a9:ad:6d:ee:1b:bc:04:be:bb:5e:76:71:e1:7d:21:
         bd:f0:fd:3a:a3:11:ee:50:7a:d5:67:e3:48:f2:16:00:40:7c:
         e2:ae:88:7c:1e:bf:02:6d:b4:af:c8:25:33:46:92:ff:c7:90:
         b8:d9:47:e9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUTiCiDFWWDAKeW6XeSo2j2zkiekYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU1NzE3REFFQTY2MENGRDAxOTdGOTZFRjY1NUIyNTk4
ODM4OTdCQjAeFw0yMzA5MDgxNDAzNDdaFw0yNDA5MDYxNDA4NDdaMDMxMTAvBgNV
BAMTKDdFOUMzRjVFRkUyNzBBNDVEOUVBNjMzRDQ0QjJENjNDMUQ0N0ZEQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY6PHB2sCVyohQl5Qu7YmR+UZ7
oY3NFbHmACDdRB8oJD9xMRgKkcg/NrQbMl6/cmR/9xflpv/71CK2IB6IHiqXWr7Q
SwRN1mCoN9YxqY16p3J41F3VVjxJq0ayPfeQv0hzlFzk4WNc3AyIpvn8E8CEBrKh
v8jpI/vpLHKpO3p7MBAsJ5huZBTzl5CUNLSo92QN5D0Sf48BrzuXpz6vulrEpB8x
ckzgIf0ZM4W8jobETYGfwJd4HOhRIZArR5/CJBpGr5kWRQnpx33laJfu4fqrE4be
jPNc1WqeBBWXymcAvG5fCoknvdGSuDowDUexKM9a5LKXSLeOiwZbZoOkZet3AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUfpw/Xv4nCkXZ6mM9RLLWPB1H/aMwHwYDVR0j
BBgwFoAU7lcX2upmDP0Bl/lu9lWyWYg4l7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2Rtc25xU3Jpbm9HZG9BemtDOFp0OXhzRDNXeTlLbmdCZEVheEpyYjhk
dlMvMC9FRTU3MTdEQUVBNjYwQ0ZEMDE5N0Y5NkVGNjU1QjI1OTg4Mzg5N0JCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFNTcxN0RBRUE2NjBDRkQw
MTk3Rjk2RUY2NTVCMjU5ODgzODk3QkIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdkbXNucVNyaW5vR2RvQXprQzhadDl4c0QzV3k5S25nQmRFYXhKcmI4ZHZTLzAv
MzEzODM5MmUzODM0MmUzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMzM2
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS9VAAwDQYJKoZIhvcNAQELBQADggEBAGWcv9L+4AGYWwEn
QMTgQNapU/XQkWLwy3LS9Ve3/aGAmXReR1Vj5TW13uLoz2Ttc3pxU41EEGbibPM+
1b8KiKc/wsMdTwsWliVqy+h3tttH8f1mkyJq5l5vf2Kl14hULxInqX7lCnXqIFUB
gM0As7l36tMz5zCncQZNPlU6J2brGvAOAXyZfguZqmZDh+TY2oIoI6PzG4zbTiWC
I3i5qRuTtrnzo9iFPGX0QXi624nh9yaYcWLB4fUnS21ONE+rPLPTQUhroByqM6mt
be4bvAS+u152ceF9Ib3w/TqjEe5QetVn40jyFgBAfOKuiHwevwJttK/IJTNGkv/H
kLjZR+k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org