Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa
File:                     3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa (raw, json)
Hash identifier:          om5iLfuRuSvpSvX5YdCNiXSFUGig7kE7YLaraYVzb9s=
Subject key identifier:   32:86:76:FF:26:A2:CA:50:B5:72:0E:9F:32:00:34:8C:8C:52:DA:3D
Certificate issuer:       /CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
Certificate serial:       0837FFDC3E915699290411FF8EBB9DC5C8151353
Authority key identifier: 8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa
Signing time:             Thu 04 Apr 2024 11:16:19 +0000
ROA not before:           Thu 04 Apr 2024 11:11:19 +0000
ROA not after:            Thu 03 Apr 2025 11:16:19 +0000
asID:                     272228
IP address blocks:        189.126.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:37:ff:dc:3e:91:56:99:29:04:11:ff:8e:bb:9d:c5:c8:15:13:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
        Validity
            Not Before: Apr  4 11:11:19 2024 GMT
            Not After : Apr  3 11:16:19 2025 GMT
        Subject: CN=328676FF26A2CA50B5720E9F3200348C8C52DA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:60:92:dc:7f:1f:ea:de:b0:3e:29:2c:fe:
                    1d:9d:d4:56:a5:58:6a:10:90:57:61:e0:98:5f:e3:
                    a3:01:13:8f:08:5c:52:b9:54:5f:56:05:08:31:41:
                    79:2c:e0:a1:eb:69:18:fe:ad:ce:e2:75:1b:dd:eb:
                    45:4c:c6:7e:a5:82:fe:6a:c3:d0:0e:41:ed:45:ff:
                    0a:96:82:85:f7:11:19:2b:47:3c:36:2a:f3:e6:86:
                    aa:2d:85:eb:d2:1f:d1:44:02:2f:c8:5b:b9:74:0f:
                    24:b7:c8:9a:5a:2c:25:aa:0f:e0:9b:fe:7b:4f:5f:
                    cb:bb:4e:58:51:3c:a1:e9:03:eb:55:65:a6:3f:01:
                    45:17:36:38:68:07:d3:14:ca:8d:57:ec:2c:cd:55:
                    b7:df:65:3e:4d:66:03:af:62:4c:f1:c4:b2:6b:67:
                    9d:1c:70:f0:9f:0d:48:77:03:5e:f7:5a:68:63:c7:
                    9c:22:90:24:b9:b4:f0:da:27:f0:b1:87:06:ca:55:
                    36:06:b3:17:42:6e:bd:f7:be:d3:23:47:0c:d6:3f:
                    c0:8b:5a:e4:bc:da:45:1f:31:a6:5f:de:aa:85:b4:
                    1e:76:65:e1:40:4d:72:d4:55:e8:c5:45:7d:e6:33:
                    c9:c6:a5:e5:7e:15:fd:56:fc:93:ae:91:b0:26:bb:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:86:76:FF:26:A2:CA:50:B5:72:0E:9F:32:00:34:8C:8C:52:DA:3D
            X509v3 Authority Key Identifier:
                keyid:8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:27:bd:38:da:26:25:3c:62:70:dd:1c:8e:29:08:bb:a5:8a:
         02:99:96:1c:c5:0a:13:d9:0d:64:3b:49:d6:69:0e:01:0e:4c:
         f6:95:76:cc:93:6d:78:84:d6:16:f7:a6:54:4e:81:99:1f:45:
         af:33:22:95:94:1d:7f:e5:a0:5d:3c:fc:a7:a6:2a:84:37:b8:
         3d:f1:60:9b:f2:ac:56:17:b9:f1:4c:46:f4:30:11:a2:c0:f5:
         3b:9a:b6:ab:91:76:b8:f0:a4:a1:fe:a0:06:53:43:8e:0e:e3:
         fb:42:e5:d7:2c:77:c2:87:ce:a8:47:6c:21:50:57:27:ae:10:
         25:69:62:bf:ac:d4:1b:5a:2c:88:71:eb:7e:e5:7b:7f:ef:fe:
         8b:e6:c2:5b:69:36:a4:5a:c2:92:74:e7:70:d5:43:7e:46:b4:
         39:88:80:5b:45:7b:39:c1:a1:15:65:c9:0c:52:8b:a4:19:57:
         a1:43:31:30:79:e2:9a:c1:d0:a4:96:3d:f5:71:29:99:28:8c:
         57:54:bc:37:c6:57:b0:93:90:88:3c:3c:7a:09:1e:a7:28:9e:
         3c:f0:05:71:24:0f:cc:f3:a5:9a:05:bc:91:f1:45:d5:03:32:
         88:2c:a7:5c:34:d6:d6:f9:08:8c:e0:df:94:5a:2a:4e:09:61:
         4c:84:25:c1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCDf/3D6RVpkpBBH/jrudxcgVE1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2RTYwNUVEMkJERDY2MDQ0M0M2QzE2OTA1RkI3MjhD
MDE3MEU0OTAeFw0yNDA0MDQxMTExMTlaFw0yNTA0MDMxMTE2MTlaMDMxMTAvBgNV
BAMTKDMyODY3NkZGMjZBMkNBNTBCNTcyMEU5RjMyMDAzNDhDOEM1MkRBM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSGCS3H8f6t6wPiks/h2d1Fal
WGoQkFdh4Jhf46MBE48IXFK5VF9WBQgxQXks4KHraRj+rc7idRvd60VMxn6lgv5q
w9AOQe1F/wqWgoX3ERkrRzw2KvPmhqothevSH9FEAi/IW7l0DyS3yJpaLCWqD+Cb
/ntPX8u7TlhRPKHpA+tVZaY/AUUXNjhoB9MUyo1X7CzNVbffZT5NZgOvYkzxxLJr
Z50ccPCfDUh3A173Wmhjx5wikCS5tPDaJ/CxhwbKVTYGsxdCbr33vtMjRwzWP8CL
WuS82kUfMaZf3qqFtB52ZeFATXLUVejFRX3mM8nGpeV+Ff1W/JOukbAmu3sZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMoZ2/yaiylC1cg6fMgA0jIxS2j0wHwYDVR0j
BBgwFoAUim5gXtK91mBEPGwWkF+3KMAXDkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGhEMmpodnNnM211aVA4OGNMem1Xa3ZLMnBUY2h6U2VUaWNVR1pOYk5Z
QUgvMS84QTZFNjA1RUQyQkRENjYwNDQzQzZDMTY5MDVGQjcyOEMwMTcwRTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBNkU2MDVFRDJCREQ2NjA0
NDNDNkMxNjkwNUZCNzI4QzAxNzBFNDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhoRDJqaHZzZzNtdWlQODhjTHptV2t2SzJwVGNoelNlVGljVUdaTmJOWUFILzEv
MzEzODM5MmUzMTMyMzYyZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMjMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb1+gDANBgkqhkiG9w0BAQsFAAOCAQEAgye9
ONomJTxicN0cjikIu6WKApmWHMUKE9kNZDtJ1mkOAQ5M9pV2zJNteITWFvemVE6B
mR9FrzMilZQdf+WgXTz8p6YqhDe4PfFgm/KsVhe58UxG9DARosD1O5q2q5F2uPCk
of6gBlNDjg7j+0Ll1yx3wofOqEdsIVBXJ64QJWliv6zUG1osiHHrfuV7f+/+i+bC
W2k2pFrCknTncNVDfka0OYiAW0V7OcGhFWXJDFKLpBlXoUMxMHnimsHQpJY99XEp
mSiMV1S8N8ZXsJOQiDw8egkepyiePPAFcSQPzPOlmgW8kfFF1QMyiCynXDTW1vkI
jODflFoqTglhTIQlwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org