Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa
File:                     3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          cMAX61hR3pomYXiEgx7lDprsTiVvkhHOQk30KEfV3z8=
Subject key identifier:   0B:42:2A:65:38:7E:61:0D:78:36:66:CC:4E:0B:17:12:63:FB:DC:2E
Certificate issuer:       /CN=8893F0FF2FC76BC29138372DA9E7EBAB17DAF056
Certificate serial:       2FEBF62E0802FCF9F0D45FBA6844F64B8AC13AC9
Authority key identifier: 88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 17 Aug 2022 19:35:00 +0000
ROA not before:           Wed 17 Aug 2022 19:30:00 +0000
ROA not after:            Thu 17 Aug 2023 19:35:00 +0000
asID:                     28292
IP address blocks:        189.124.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:f6:2e:08:02:fc:f9:f0:d4:5f:ba:68:44:f6:4b:8a:c1:3a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8893F0FF2FC76BC29138372DA9E7EBAB17DAF056
        Validity
            Not Before: Aug 17 19:30:00 2022 GMT
            Not After : Aug 17 19:35:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bf:58:bd:16:7e:d0:72:1c:69:06:e1:8f:7f:
                    b7:71:ab:41:27:dc:dc:19:d0:3e:78:10:b8:b5:de:
                    5a:23:11:cf:75:ca:6c:1b:a4:e9:5e:ee:f0:85:61:
                    8c:3f:05:1b:bb:b9:7f:cb:04:58:c6:48:76:88:1a:
                    a2:00:e4:c2:70:9f:fd:4b:50:22:7e:49:b0:dc:da:
                    5b:59:03:43:3d:85:0b:05:82:9a:b7:d5:77:e1:c7:
                    c4:42:bb:85:68:71:8a:10:54:53:04:32:bc:5e:d0:
                    23:d4:0c:11:a7:35:84:e5:f8:61:e5:3e:5f:9a:54:
                    f9:17:d5:c3:36:ff:43:ee:45:3c:21:a7:b1:dd:af:
                    3b:67:7a:0f:b5:1d:92:dd:15:55:ac:20:d1:24:84:
                    1e:f4:2f:11:0b:dd:33:58:f1:d5:6b:b3:e0:34:c0:
                    c2:72:67:82:51:a6:0d:e9:9b:b2:cd:4d:ea:84:85:
                    fa:b1:4f:3d:32:de:e0:14:72:b4:27:c5:99:72:f9:
                    26:39:ee:1c:1b:2d:38:fc:79:eb:85:25:48:c5:09:
                    ce:f5:d6:52:af:e6:a3:11:c4:ed:54:22:a5:6b:d1:
                    d2:57:1c:ae:c2:aa:1e:90:67:b9:44:f5:c5:90:bb:
                    f2:c2:c3:5b:08:92:d5:78:d8:3a:29:89:c2:de:f5:
                    63:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:42:2A:65:38:7E:61:0D:78:36:66:CC:4E:0B:17:12:63:FB:DC:2E
            X509v3 Authority Key Identifier:
                keyid:88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:1b:47:3b:1e:ee:59:d4:6c:80:96:50:88:be:67:94:74:33:
         75:cd:56:67:79:9d:e0:55:c9:d8:e7:25:f3:9f:00:17:70:f8:
         c6:19:f0:58:03:5e:74:dc:0b:12:10:b3:f8:44:c8:72:b6:08:
         13:c5:e5:95:45:bf:bb:29:4e:37:a3:67:f0:df:a0:3a:27:56:
         e8:a7:36:45:0e:f2:6b:6e:02:1a:1d:41:09:ae:a7:e6:a8:ba:
         5f:42:bd:d8:7b:cf:75:74:6e:3b:44:0a:5a:34:06:8b:44:c9:
         5e:27:c6:ce:7c:e2:c1:26:07:cd:bf:6a:c9:e4:8d:68:d2:5a:
         b6:2d:7f:84:f7:02:2d:3a:34:3a:fd:ca:66:ec:cb:70:42:30:
         cf:c3:e4:45:6c:6b:46:38:c3:4d:a9:1a:1c:37:61:a5:41:20:
         57:ac:5e:ef:48:05:91:6d:da:c1:e3:cd:d7:f4:27:6e:ce:74:
         90:56:48:72:9c:00:2b:da:2a:1b:5e:40:99:4b:14:38:17:ef:
         9a:fb:e1:64:8f:f3:7f:78:a8:69:9f:53:02:18:be:ed:6f:ac:
         a4:e7:1e:9a:f3:2e:c9:96:66:36:07:ab:6b:c8:d8:50:3a:95:
         86:75:c6:67:0c:95:00:69:3c:75:70:3a:f5:36:c2:f0:d0:d4:
         c2:5f:2e:04
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUL+v2LggC/Pnw1F+6aET2S4rBOskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5M0YwRkYyRkM3NkJDMjkxMzgzNzJEQTlFN0VCQUIx
N0RBRjA1NjAeFw0yMjA4MTcxOTMwMDBaFw0yMzA4MTcxOTM1MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREZCRjU4QkQxNjdFRDA3MjFD
NjkwNkUxOEY3RkI3NzFBQjQxMjdEQ0RDMTlEMDNFNzgxMEI4QjVERTVBMjMxMUNG
NzVDQTZDMUJBNEU5NUVFRUYwODU2MThDM0YwNTFCQkJCOTdGQ0IwNDU4QzY0ODc2
ODgxQUEyMDBFNEMyNzA5RkZENEI1MDIyN0U0OUIwRENEQTVCNTkwMzQzM0Q4NTBC
MDU4MjlBQjdENTc3RTFDN0M0NDJCQjg1Njg3MThBMTA1NDUzMDQzMkJDNUVEMDIz
RDQwQzExQTczNTg0RTVGODYxRTUzRTVGOUE1NEY5MTdENUMzMzZGRjQzRUU0NTND
MjFBN0IxRERBRjNCNjc3QTBGQjUxRDkyREQxNTU1QUMyMEQxMjQ4NDFFRjQyRjEx
MEJERDMzNThGMUQ1NkJCM0UwMzRDMEMyNzI2NzgyNTFBNjBERTk5QkIyQ0Q0REVB
ODQ4NUZBQjE0RjNEMzJERUUwMTQ3MkI0MjdDNTk5NzJGOTI2MzlFRTFDMUIyRDM4
RkM3OUVCODUyNTQ4QzUwOUNFRjVENjUyQUZFNkEzMTFDNEVENTQyMkE1NkJEMUQy
NTcxQ0FFQzJBQTFFOTA2N0I5NDRGNUM1OTBCQkYyQzJDMzVCMDg5MkQ1NzhEODNB
Mjk4OUMyREVGNTYzOUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA379YvRZ+0HIcaQbhj3+3catBJ9zcGdA+eBC4td5aIxHPdcpsG6Tp
Xu7whWGMPwUbu7l/ywRYxkh2iBqiAOTCcJ/9S1Aifkmw3NpbWQNDPYULBYKat9V3
4cfEQruFaHGKEFRTBDK8XtAj1AwRpzWE5fhh5T5fmlT5F9XDNv9D7kU8Iaex3a87
Z3oPtR2S3RVVrCDRJIQe9C8RC90zWPHVa7PgNMDCcmeCUaYN6ZuyzU3qhIX6sU89
Mt7gFHK0J8WZcvkmOe4cGy04/HnrhSVIxQnO9dZSr+ajEcTtVCKla9HSVxyuwqoe
kGe5RPXFkLvywsNbCJLVeNg6KYnC3vVjmwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAtCKmU4fmENeDZmzE4LFxJj+9wuMB8GA1UdIwQYMBaAFIiT8P8vx2vCkTg3Lann
66sX2vBWMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzd2RHhQUGhwa3hwM05L
aVVYZVRtUWViQkxONUtVYVB4czcyWlFQcmlIRU5XLzIvODg5M0YwRkYyRkM3NkJD
MjkxMzgzNzJEQTlFN0VCQUIxN0RBRjA1Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84ODkzRjBGRjJGQzc2QkMyOTEzODM3MkRBOUU3RUJBQjE3REFG
MDU2LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83dkR4UFBocGt4cDNOS2lVWGVU
bVFlYkJMTjVLVWFQeHM3MlpRUHJpSEVOVy8yLzMxMzgzOTJlMzEzMjM0MmUzMTMx
MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzIzOTMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
vXxwMA0GCSqGSIb3DQEBCwUAA4IBAQAcG0c7Hu5Z1GyAllCIvmeUdDN1zVZneZ3g
VcnY5yXznwAXcPjGGfBYA1503AsSELP4RMhytggTxeWVRb+7KU43o2fw36A6J1bo
pzZFDvJrbgIaHUEJrqfmqLpfQr3Ye891dG47RApaNAaLRMleJ8bOfOLBJgfNv2rJ
5I1o0lq2LX+E9wItOjQ6/cpm7MtwQjDPw+RFbGtGOMNNqRocN2GlQSBXrF7vSAWR
bdrB483X9CduznSQVkhynAAr2iobXkCZSxQ4F++a++Fkj/N/eKhpn1MCGL7tb6yk
5x6a8y7JlmY2B6tryNhQOpWGdcZnDJUAaTx1cDr1NsLw0NTCXy4E
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org