Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
File:                     3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa (raw, json)
Hash identifier:          16dQUL+UhWuPDyeA/orLo589Af6XYkuB7LM9CO2NjJg=
Subject key identifier:   C4:92:77:AA:58:E4:E9:3B:BC:B7:BD:39:03:7A:8B:31:3B:59:15:7B
Certificate issuer:       /CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
Certificate serial:       25F1C5D52D1E6F10351CBB3B2449D44AC0950A0B
Authority key identifier: 8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
Signing time:             Thu 04 Apr 2024 11:16:19 +0000
ROA not before:           Thu 04 Apr 2024 11:11:19 +0000
ROA not after:            Thu 03 Apr 2025 11:16:19 +0000
asID:                     272228
IP address blocks:        189.126.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f1:c5:d5:2d:1e:6f:10:35:1c:bb:3b:24:49:d4:4a:c0:95:0a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
        Validity
            Not Before: Apr  4 11:11:19 2024 GMT
            Not After : Apr  3 11:16:19 2025 GMT
        Subject: CN=C49277AA58E4E93BBCB7BD39037A8B313B59157B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:ce:90:ce:40:66:6a:43:da:72:0c:66:fd:
                    5a:09:46:c5:2d:70:73:8c:1c:21:84:0f:eb:f8:89:
                    53:7b:02:9e:ba:2d:fb:1d:68:43:60:57:59:ef:76:
                    90:49:00:5b:3a:9f:83:1f:ce:02:b9:1b:3e:f5:e2:
                    42:be:c0:38:de:b4:19:57:fd:e9:5d:27:3d:80:b2:
                    79:e1:97:a6:fb:2c:94:ad:46:12:4c:16:14:54:08:
                    d8:5c:45:a7:64:34:c5:19:bd:22:f6:ce:12:86:cb:
                    90:ac:e7:37:14:98:79:73:ee:88:ba:2e:4e:c0:00:
                    60:f9:52:41:37:02:b6:fd:ee:32:50:fc:eb:92:10:
                    3d:95:f4:5e:66:28:6c:65:a7:55:24:c2:2c:c6:8c:
                    6d:25:4e:67:e5:d1:01:50:8b:7c:28:65:65:eb:c3:
                    c7:ff:f7:26:65:83:bd:e3:46:ce:80:9a:0b:e8:84:
                    ed:70:61:76:05:a7:73:c8:85:d7:82:08:27:74:36:
                    aa:5a:9d:d7:7b:4a:2c:e5:f1:3c:e4:b1:39:40:bd:
                    21:69:78:5f:e6:16:e0:15:2e:cb:30:c7:a6:f7:77:
                    c9:7d:60:c9:18:e9:6a:bf:4c:d6:f6:50:6f:62:96:
                    47:28:6f:86:63:ff:7b:e4:9d:d0:2b:74:43:a6:50:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:92:77:AA:58:E4:E9:3B:BC:B7:BD:39:03:7A:8B:31:3B:59:15:7B
            X509v3 Authority Key Identifier:
                keyid:8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:50:01:27:18:f1:13:57:a0:7d:46:31:5c:97:c9:ea:c0:
         e0:89:04:90:cf:0e:d3:b4:7b:a7:2f:ec:02:50:50:c1:cf:87:
         15:26:b3:09:e6:c3:00:39:53:e0:34:31:78:46:3e:b2:d1:44:
         94:1b:b6:ec:e6:fc:54:ef:03:e0:9a:c4:22:7b:92:30:61:ae:
         79:a2:f4:c1:9e:54:ea:a1:9a:dc:f7:70:54:e8:f2:07:9c:56:
         a0:27:81:ec:1e:bc:93:fd:24:8f:5b:83:4e:4a:5e:55:77:52:
         22:a4:55:e9:ab:bd:90:1e:e3:5c:99:65:31:55:fd:2f:38:b8:
         93:34:ec:7f:2c:cf:15:1d:ab:28:19:af:7e:a9:6f:a4:7a:54:
         ca:aa:a8:70:be:f4:2b:af:a9:59:ea:15:d7:d4:6a:38:d0:02:
         40:65:7b:41:3f:31:c3:0c:c6:4c:41:1b:f9:ad:7e:8f:3e:76:
         67:f2:f3:a5:d0:11:f1:5a:4f:b7:1d:e0:5f:cb:a9:0f:33:a9:
         1a:a5:27:8c:04:10:36:5e:03:86:6e:56:f6:c6:88:3c:c2:9e:
         03:8f:23:32:4e:82:ae:ab:22:8d:90:d0:98:20:a5:06:0b:c6:
         60:27:86:00:4c:3a:89:3e:9d:be:b2:c9:13:4c:44:02:0b:68:
         ba:a7:09:17
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJfHF1S0ebxA1HLs7JEnUSsCVCgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2RTYwNUVEMkJERDY2MDQ0M0M2QzE2OTA1RkI3MjhD
MDE3MEU0OTAeFw0yNDA0MDQxMTExMTlaFw0yNTA0MDMxMTE2MTlaMDMxMTAvBgNV
BAMTKEM0OTI3N0FBNThFNEU5M0JCQ0I3QkQzOTAzN0E4QjMxM0I1OTE1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxM6QzkBmakPacgxm/VoJRsUt
cHOMHCGED+v4iVN7Ap66LfsdaENgV1nvdpBJAFs6n4MfzgK5Gz714kK+wDjetBlX
/eldJz2Asnnhl6b7LJStRhJMFhRUCNhcRadkNMUZvSL2zhKGy5Cs5zcUmHlz7oi6
Lk7AAGD5UkE3Arb97jJQ/OuSED2V9F5mKGxlp1UkwizGjG0lTmfl0QFQi3woZWXr
w8f/9yZlg73jRs6AmgvohO1wYXYFp3PIhdeCCCd0Nqpandd7Sizl8TzksTlAvSFp
eF/mFuAVLsswx6b3d8l9YMkY6Wq/TNb2UG9ilkcob4Zj/3vkndArdEOmUNP1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxJJ3qljk6Tu8t705A3qLMTtZFXswHwYDVR0j
BBgwFoAUim5gXtK91mBEPGwWkF+3KMAXDkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGhEMmpodnNnM211aVA4OGNMem1Xa3ZLMnBUY2h6U2VUaWNVR1pOYk5Z
QUgvMS84QTZFNjA1RUQyQkRENjYwNDQzQzZDMTY5MDVGQjcyOEMwMTcwRTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBNkU2MDVFRDJCREQ2NjA0
NDNDNkMxNjkwNUZCNzI4QzAxNzBFNDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhoRDJqaHZzZzNtdWlQODhjTHptV2t2SzJwVGNoelNlVGljVUdaTmJOWUFILzEv
MzEzODM5MmUzMTMyMzYyZTMxMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMjMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1+gjANBgkqhkiG9w0BAQsFAAOCAQEAey5Q
AScY8RNXoH1GMVyXyerA4IkEkM8O07R7py/sAlBQwc+HFSazCebDADlT4DQxeEY+
stFElBu27Ob8VO8D4JrEInuSMGGueaL0wZ5U6qGa3PdwVOjyB5xWoCeB7B68k/0k
j1uDTkpeVXdSIqRV6au9kB7jXJllMVX9Lzi4kzTsfyzPFR2rKBmvfqlvpHpUyqqo
cL70K6+pWeoV19RqONACQGV7QT8xwwzGTEEb+a1+jz52Z/LzpdAR8VpPtx3gX8up
DzOpGqUnjAQQNl4Dhm5W9saIPMKeA48jMk6CrqsijZDQmCClBgvGYCeGAEw6iT6d
vrLJE0xEAgtouqcJFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org