Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3133312e302f32342d3234203d3e20323732323238.roa
File:                     3138392e3132362e3133312e302f32342d3234203d3e20323732323238.roa (raw, json)
Hash identifier:          oyPMUsm44Pkv24E0E2WRhXthFrq6qO6w2Ez/iEmze3k=
Subject key identifier:   8F:6E:5C:6F:1F:C5:7D:9B:1A:DA:8D:05:8B:20:27:1D:BE:1D:89:98
Certificate issuer:       /CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
Certificate serial:       0DB8005F0558FDFFEB50282C87740D3400579D2C
Authority key identifier: 8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3133312e302f32342d3234203d3e20323732323238.roa
Signing time:             Thu 04 Apr 2024 11:16:19 +0000
ROA not before:           Thu 04 Apr 2024 11:11:19 +0000
ROA not after:            Thu 03 Apr 2025 11:16:19 +0000
asID:                     272228
IP address blocks:        189.126.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b8:00:5f:05:58:fd:ff:eb:50:28:2c:87:74:0d:34:00:57:9d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
        Validity
            Not Before: Apr  4 11:11:19 2024 GMT
            Not After : Apr  3 11:16:19 2025 GMT
        Subject: CN=8F6E5C6F1FC57D9B1ADA8D058B20271DBE1D8998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:ec:8a:e6:6d:fe:3d:01:f5:c7:45:02:9e:
                    31:ec:27:78:f9:e4:1c:db:48:ae:69:72:26:cf:db:
                    ae:22:15:13:23:ad:95:d8:80:d8:75:00:15:1c:ea:
                    f1:e2:b6:07:8c:9d:ea:ef:bb:a7:76:ad:0d:89:2f:
                    d6:45:56:3a:26:84:20:48:b5:61:20:64:0b:6f:3c:
                    ca:21:c9:e8:24:4d:c3:80:92:58:f5:ad:e9:4d:d7:
                    85:ec:99:db:88:65:46:70:96:9d:a8:cf:75:64:15:
                    80:71:aa:ce:80:db:c2:7e:49:5f:45:a6:13:fa:92:
                    41:40:b3:92:51:e8:d5:0c:34:f1:64:e9:3a:e4:22:
                    62:f3:a8:d8:90:61:dc:02:44:04:b3:12:04:d6:01:
                    82:3e:1a:44:e0:7c:8c:d9:d3:f0:3d:11:89:ee:b9:
                    25:9e:b7:81:f8:ff:b9:83:65:7a:52:36:2a:0b:0e:
                    9f:43:14:96:3a:e2:b8:ee:0c:25:d8:be:0a:e1:86:
                    cf:1f:c5:1e:53:1d:20:03:02:bc:fd:11:3a:42:d0:
                    45:1b:e4:1e:01:80:7f:b4:7a:5a:25:10:21:45:39:
                    d9:ee:84:f7:72:ed:f2:d8:77:0b:a5:19:a1:1b:58:
                    b8:d4:92:d1:06:ab:db:2f:97:7d:8e:4d:c2:62:e1:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6E:5C:6F:1F:C5:7D:9B:1A:DA:8D:05:8B:20:27:1D:BE:1D:89:98
            X509v3 Authority Key Identifier:
                keyid:8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3133312e302f32342d3234203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:43:74:84:95:ef:78:a5:34:9d:fa:a7:4c:0a:62:a0:7f:5d:
         1b:8e:f4:93:df:0c:82:35:fd:ca:e2:34:54:7e:7d:ab:34:0a:
         e3:35:d1:38:e9:6f:29:af:73:3b:b5:3e:a5:a3:ff:73:74:bc:
         6e:b2:ba:8e:a8:af:e8:93:3f:8f:29:d6:d8:b0:8b:33:91:b6:
         0a:ea:11:9f:ab:b9:fe:38:54:df:57:c5:b3:2c:09:a4:6a:6b:
         20:65:16:4e:2f:d7:dd:fb:1d:4c:7c:07:15:2c:9e:12:76:70:
         39:e6:0b:6b:8e:8d:33:73:6b:dd:08:ac:d8:3b:0c:69:c6:08:
         a9:e5:a2:eb:7c:a3:ce:48:7a:62:15:47:66:d4:7b:0b:16:73:
         8e:d3:d6:63:2b:e3:06:81:b5:cb:44:6d:89:c2:05:d7:58:b7:
         36:8d:2f:26:99:f2:dc:6b:45:b7:92:1f:b5:02:51:17:38:8a:
         af:4e:af:e1:16:f9:40:da:19:a6:91:d4:7b:16:a5:24:c4:9d:
         c2:f4:2c:37:27:40:b7:26:6b:4f:d9:a4:88:bb:e7:8d:82:60:
         37:b8:88:cd:19:6b:65:3a:6b:0c:ff:97:18:da:53:e5:d5:38:
         47:4c:f5:eb:ff:7d:de:7e:45:7b:b0:86:5e:df:92:3c:34:ce:
         8f:27:f9:30
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDbgAXwVY/f/rUCgsh3QNNABXnSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2RTYwNUVEMkJERDY2MDQ0M0M2QzE2OTA1RkI3MjhD
MDE3MEU0OTAeFw0yNDA0MDQxMTExMTlaFw0yNTA0MDMxMTE2MTlaMDMxMTAvBgNV
BAMTKDhGNkU1QzZGMUZDNTdEOUIxQURBOEQwNThCMjAyNzFEQkUxRDg5OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPOyK5m3+PQH1x0UCnjHsJ3j5
5BzbSK5pcibP264iFRMjrZXYgNh1ABUc6vHitgeMnervu6d2rQ2JL9ZFVjomhCBI
tWEgZAtvPMohyegkTcOAklj1relN14XsmduIZUZwlp2oz3VkFYBxqs6A28J+SV9F
phP6kkFAs5JR6NUMNPFk6TrkImLzqNiQYdwCRASzEgTWAYI+GkTgfIzZ0/A9EYnu
uSWet4H4/7mDZXpSNioLDp9DFJY64rjuDCXYvgrhhs8fxR5THSADArz9ETpC0EUb
5B4BgH+0elolECFFOdnuhPdy7fLYdwulGaEbWLjUktEGq9svl32OTcJi4c0dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUj25cbx/FfZsa2o0FiyAnHb4diZgwHwYDVR0j
BBgwFoAUim5gXtK91mBEPGwWkF+3KMAXDkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGhEMmpodnNnM211aVA4OGNMem1Xa3ZLMnBUY2h6U2VUaWNVR1pOYk5Z
QUgvMS84QTZFNjA1RUQyQkRENjYwNDQzQzZDMTY5MDVGQjcyOEMwMTcwRTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBNkU2MDVFRDJCREQ2NjA0
NDNDNkMxNjkwNUZCNzI4QzAxNzBFNDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhoRDJqaHZzZzNtdWlQODhjTHptV2t2SzJwVGNoelNlVGljVUdaTmJOWUFILzEv
MzEzODM5MmUzMTMyMzYyZTMxMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMjMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1+gzANBgkqhkiG9w0BAQsFAAOCAQEAHUN0
hJXveKU0nfqnTApioH9dG470k98MgjX9yuI0VH59qzQK4zXROOlvKa9zO7U+paP/
c3S8brK6jqiv6JM/jynW2LCLM5G2CuoRn6u5/jhU31fFsywJpGprIGUWTi/X3fsd
THwHFSyeEnZwOeYLa46NM3Nr3Qis2DsMacYIqeWi63yjzkh6YhVHZtR7CxZzjtPW
YyvjBoG1y0RticIF11i3No0vJpny3GtFt5IftQJRFziKr06v4Rb5QNoZppHUexal
JMSdwvQsNydAtyZrT9mkiLvnjYJgN7iIzRlrZTprDP+XGNpT5dU4R0z16/993n5F
e7CGXt+SPDTOjyf5MA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org