Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier:          G79tBq2fm4mElMn+RCXwQchlYX6Y1LkPdASlnXGNBOE=
Subject key identifier:   25:AE:6F:E8:33:E0:29:B0:62:B4:4F:A9:0D:40:A5:F5:AE:F4:6D:DD
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       1D404D0F0F4DE2F8A050B355B12CD3AD2E07818A
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:53 +0000
ROA not before:           Fri 13 Oct 2023 14:31:53 +0000
ROA not after:            Fri 11 Oct 2024 14:36:53 +0000
asID:                     28352
IP address blocks:        189.51.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:40:4d:0f:0f:4d:e2:f8:a0:50:b3:55:b1:2c:d3:ad:2e:07:81:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:53 2023 GMT
            Not After : Oct 11 14:36:53 2024 GMT
        Subject: CN=25AE6FE833E029B062B44FA90D40A5F5AEF46DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:46:4c:a2:f6:65:2e:16:c0:bd:8e:d9:47:75:
                    48:51:a1:7e:6b:ff:74:33:7c:93:e0:c0:0b:7c:9c:
                    af:7e:43:2b:fd:bd:eb:92:5a:71:60:f2:6f:c6:40:
                    00:3f:c3:b7:ff:df:1d:9b:09:e1:41:4c:31:26:31:
                    67:2f:cf:a3:52:b2:7c:0e:8d:a1:5a:f5:f4:4c:94:
                    22:b9:e0:8d:d0:5e:0c:ed:88:8d:8f:e2:97:0b:f5:
                    bf:82:80:18:e1:99:9e:2c:f2:44:6e:80:98:98:c8:
                    52:8d:7f:42:74:dc:17:2f:32:6b:c8:a0:52:20:53:
                    9d:0a:f7:35:84:52:b6:70:f4:28:6d:70:88:43:f1:
                    43:45:46:53:95:d9:61:40:34:cd:f9:84:8a:87:83:
                    77:7d:10:0a:ce:df:43:8a:3d:39:db:7e:7e:34:67:
                    c0:e5:25:e3:75:af:ef:ca:33:02:76:c3:c5:a3:3d:
                    45:d3:9b:2b:e9:fc:57:d4:e6:b7:34:a2:8a:d1:77:
                    4d:61:b5:f9:ca:c1:c8:23:ae:52:f8:79:d2:99:2b:
                    0b:bb:b3:33:b5:8f:04:9d:ca:95:a1:28:90:61:4c:
                    66:9a:99:d1:82:f1:6e:a1:73:52:8b:40:1c:5f:3e:
                    03:d1:1f:8a:78:ae:4a:30:ac:36:98:09:81:25:cf:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AE:6F:E8:33:E0:29:B0:62:B4:4F:A9:0D:40:A5:F5:AE:F4:6D:DD
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:5d:8f:9e:c9:3c:a2:c1:37:b0:b8:e9:00:3b:6d:9f:04:46:
         d6:2c:f6:e9:af:4b:7f:a2:fe:41:29:45:48:84:3e:1e:c1:35:
         2a:19:b5:75:96:9b:7c:2f:54:00:61:f9:dd:ba:11:d9:c0:fc:
         5e:c3:9f:2b:f0:b9:1e:3b:53:a5:3e:56:b1:9f:27:75:89:cf:
         60:e3:7f:fb:df:83:e9:e0:f9:7c:06:23:d8:6f:85:e7:86:fc:
         f1:02:b6:29:c0:8d:9a:20:13:8f:5a:0b:70:2c:1e:83:16:82:
         86:36:d6:d3:20:da:aa:d3:ba:c3:95:91:c3:4c:81:7d:9a:70:
         07:71:f5:16:8f:5b:ba:42:36:d0:48:09:53:0d:df:b2:3a:fc:
         5b:a6:b4:c4:94:20:0d:d1:58:40:a7:b8:dc:7f:90:93:b4:76:
         0d:40:47:02:3a:03:e2:76:00:1e:e7:61:9d:50:e9:8d:20:17:
         ed:e7:01:c9:b2:a3:96:41:c7:13:8f:76:45:2c:48:e3:24:95:
         1e:e3:79:57:13:42:ae:53:a8:12:10:20:0b:b4:16:d3:f7:32:
         ae:07:a4:40:f4:42:e1:e3:3d:0b:60:42:e0:b4:80:c4:bb:da:
         29:05:ac:a7:ed:68:f9:67:53:94:04:a1:01:08:1d:37:b5:41:
         61:f8:10:ed
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHUBNDw9N4vigULNVsSzTrS4HgYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTczRTVGMjkzRDdGQjUyQzM3QTAxNDJDMDQ0MTVEREZB
MDRDNDYwMjAeFw0yMzEwMTMxNDMxNTNaFw0yNDEwMTExNDM2NTNaMDMxMTAvBgNV
BAMTKDI1QUU2RkU4MzNFMDI5QjA2MkI0NEZBOTBENDBBNUY1QUVGNDZEREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoRkyi9mUuFsC9jtlHdUhRoX5r
/3QzfJPgwAt8nK9+Qyv9veuSWnFg8m/GQAA/w7f/3x2bCeFBTDEmMWcvz6NSsnwO
jaFa9fRMlCK54I3QXgztiI2P4pcL9b+CgBjhmZ4s8kRugJiYyFKNf0J03BcvMmvI
oFIgU50K9zWEUrZw9ChtcIhD8UNFRlOV2WFANM35hIqHg3d9EArO30OKPTnbfn40
Z8DlJeN1r+/KMwJ2w8WjPUXTmyvp/FfU5rc0oorRd01htfnKwcgjrlL4edKZKwu7
szO1jwSdypWhKJBhTGaamdGC8W6hc1KLQBxfPgPRH4p4rkowrDaYCYElzzCjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJa5v6DPgKbBitE+pDUCl9a70bd0wHwYDVR0j
BBgwFoAUpz5fKT1/tSw3oBQsBEFd36BMRgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9BNzNFNUYyOTNEN0ZCNTJDMzdBMDE0MkMwNDQxNURERkEwNEM0NjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E3M0U1RjI5M0Q3RkI1MkMz
N0EwMTQyQzA0NDE1RERGQTA0QzQ2MDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM5MmUzNTMxMmUzMTM5MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDvTPAMA0GCSqGSIb3DQEBCwUAA4IBAQCiXY+eyTyi
wTewuOkAO22fBEbWLPbpr0t/ov5BKUVIhD4ewTUqGbV1lpt8L1QAYfnduhHZwPxe
w58r8LkeO1OlPlaxnyd1ic9g43/734Pp4Pl8BiPYb4XnhvzxArYpwI2aIBOPWgtw
LB6DFoKGNtbTINqq07rDlZHDTIF9mnAHcfUWj1u6QjbQSAlTDd+yOvxbprTElCAN
0VhAp7jcf5CTtHYNQEcCOgPidgAe52GdUOmNIBft5wHJsqOWQccTj3ZFLEjjJJUe
43lXE0KuU6gSECALtBbT9zKuB6RA9ELh4z0LYELgtIDEu9opBayn7Wj5Z1OUBKEB
CB03tUFh+BDt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org