Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa
File:                     3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa (raw, json)
Hash identifier:          ig9l52yhJ3NqMD50RUplA4zjNLhbJRW86H4ooXiV204=
Subject key identifier:   A4:DF:36:9A:24:A6:E3:A6:6B:2E:A9:DD:70:57:1D:39:15:86:19:97
Certificate issuer:       /CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
Certificate serial:       0B2D232A3494C5C59F504FD6C968C4928F96211D
Authority key identifier: 5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa
Signing time:             Sun 05 Nov 2023 18:06:56 +0000
ROA not before:           Sun 05 Nov 2023 18:01:56 +0000
ROA not after:            Sun 03 Nov 2024 18:06:56 +0000
asID:                     272228
IP address blocks:        189.126.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2d:23:2a:34:94:c5:c5:9f:50:4f:d6:c9:68:c4:92:8f:96:21:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
        Validity
            Not Before: Nov  5 18:01:56 2023 GMT
            Not After : Nov  3 18:06:56 2024 GMT
        Subject: CN=A4DF369A24A6E3A66B2EA9DD70571D3915861997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:7c:a7:d5:41:3c:68:30:f3:0e:64:c0:e6:
                    5e:44:9d:e8:84:ee:2b:8d:df:7e:24:81:88:8f:13:
                    54:ea:74:af:c3:c1:b6:af:5f:8e:4c:9d:86:18:1b:
                    d4:1f:3f:c8:56:6d:08:8b:de:12:eb:88:7e:42:8c:
                    17:94:fe:6f:2d:39:78:ee:45:b0:53:4a:19:41:7f:
                    61:52:37:e0:a1:40:e6:77:30:bc:d7:cd:72:b9:0c:
                    eb:d6:1c:b3:b0:d3:05:a0:a2:97:64:18:2b:d8:d8:
                    df:c2:b7:54:04:f1:c2:dc:75:92:62:4b:44:6b:46:
                    86:34:68:b4:ab:db:49:62:fa:e5:1b:52:cf:0e:60:
                    a3:b6:69:d8:40:26:bd:84:ad:83:1f:0c:0c:de:34:
                    3d:76:4d:a2:4a:27:e5:83:f7:71:63:34:0a:f9:2e:
                    6a:d8:01:04:0f:22:ab:f2:00:72:e1:44:90:bf:5e:
                    00:64:2f:1d:18:e4:af:dd:ac:74:44:0c:3b:e6:4a:
                    85:cf:f2:79:2a:6d:7b:42:1a:11:75:64:fa:d7:74:
                    67:07:1c:b1:40:ca:5d:5e:7e:74:fa:78:12:cc:c4:
                    77:f9:09:0c:0f:33:23:e3:f7:30:07:58:19:10:cb:
                    c6:5e:08:f8:75:7a:67:09:c1:4c:39:1c:43:85:ae:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DF:36:9A:24:A6:E3:A6:6B:2E:A9:DD:70:57:1D:39:15:86:19:97
            X509v3 Authority Key Identifier:
                keyid:5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:0a:63:4b:63:80:c4:9f:d9:a9:80:72:ca:2e:96:27:6e:75:
         12:4e:30:b2:ba:33:b2:f1:b9:f8:1f:25:01:5e:70:88:01:0d:
         ba:db:40:9f:ba:18:1f:89:0d:7f:f1:85:32:50:e3:5c:b0:a8:
         ff:e0:38:10:6b:ac:b2:93:89:7a:69:7f:8a:47:c6:1a:a6:9b:
         41:a2:a2:47:c5:b5:fb:96:47:b7:f2:c9:11:1b:bf:4e:55:c2:
         a5:85:30:1b:12:dc:49:12:d3:db:eb:b3:56:82:15:01:fb:34:
         9a:1d:61:3c:88:fc:09:5d:17:ca:88:b6:dc:80:b4:92:c2:ea:
         d2:6c:62:33:de:ff:ae:a5:1b:25:06:f0:11:45:56:54:e1:cf:
         89:ec:80:8a:de:11:b8:27:be:c7:f5:ae:77:33:5b:44:b9:89:
         6f:3f:79:77:13:6c:ed:4b:dc:6b:1f:53:8a:69:6c:f8:b4:7d:
         29:b9:77:c8:9a:7a:b8:d5:d8:b8:94:db:d7:95:85:b9:32:c1:
         a5:64:2f:f6:64:15:e9:c5:d5:4f:f8:f2:d1:23:14:bb:50:01:
         1b:9f:b4:60:90:10:4b:7f:7c:5e:b6:67:44:c8:c0:6a:1b:5c:
         35:63:a5:47:39:c0:ea:cf:69:16:04:af:8d:28:9f:3b:ce:dc:
         1c:85:22:f2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCy0jKjSUxcWfUE/WyWjEko+WIR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURFRTNCN0FFMUYxODY3MkI2RjUwQzhBQjU5MUFBNzVE
QkI0RjA2MDAeFw0yMzExMDUxODAxNTZaFw0yNDExMDMxODA2NTZaMDMxMTAvBgNV
BAMTKEE0REYzNjlBMjRBNkUzQTY2QjJFQTlERDcwNTcxRDM5MTU4NjE5OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Snyn1UE8aDDzDmTA5l5EneiE
7iuN334kgYiPE1TqdK/DwbavX45MnYYYG9QfP8hWbQiL3hLriH5CjBeU/m8tOXju
RbBTShlBf2FSN+ChQOZ3MLzXzXK5DOvWHLOw0wWgopdkGCvY2N/Ct1QE8cLcdZJi
S0RrRoY0aLSr20li+uUbUs8OYKO2adhAJr2ErYMfDAzeND12TaJKJ+WD93FjNAr5
LmrYAQQPIqvyAHLhRJC/XgBkLx0Y5K/drHREDDvmSoXP8nkqbXtCGhF1ZPrXdGcH
HLFAyl1efnT6eBLMxHf5CQwPMyPj9zAHWBkQy8ZeCPh1emcJwUw5HEOFrowxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpN82miSm46ZrLqndcFcdORWGGZcwHwYDVR0j
BBgwFoAUXe47euHxhnK29QyKtZGqddu08GAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGhEMmpodnNnM211aVA4OGNMem1Xa3ZLMnBUY2h6U2VUaWNVR1pOYk5Z
QUgvMC81REVFM0I3QUUxRjE4NjcyQjZGNTBDOEFCNTkxQUE3NURCQjRGMDYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVERUUzQjdBRTFGMTg2NzJC
NkY1MEM4QUI1OTFBQTc1REJCNEYwNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhoRDJqaHZzZzNtdWlQODhjTHptV2t2SzJwVGNoelNlVGljVUdaTmJOWUFILzAv
MzEzODM5MmUzMTMyMzYyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMjMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb1+gjANBgkqhkiG9w0BAQsFAAOCAQEAOApj
S2OAxJ/ZqYByyi6WJ251Ek4wsrozsvG5+B8lAV5wiAENuttAn7oYH4kNf/GFMlDj
XLCo/+A4EGusspOJeml/ikfGGqabQaKiR8W1+5ZHt/LJERu/TlXCpYUwGxLcSRLT
2+uzVoIVAfs0mh1hPIj8CV0Xyoi23IC0ksLq0mxiM97/rqUbJQbwEUVWVOHPieyA
it4RuCe+x/WudzNbRLmJbz95dxNs7Uvcax9Timls+LR9Kbl3yJp6uNXYuJTb15WF
uTLBpWQv9mQV6cXVT/jy0SMUu1ABG5+0YJAQS398XrZnRMjAahtcNWOlRznA6s9p
FgSvjSifO87cHIUi8g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org