Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139362e302f32322d3232203d3e203238333532.roa
File:                     3138392e35312e3139362e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          r4+/wBx0Hpj3ogjSL1oWhvGLpme08ZUvca+aSCTIp7o=
Subject key identifier:   AE:81:E2:18:2E:F3:F9:F4:F6:FC:20:50:EF:24:D2:54:E1:98:96:51
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       7701F2BD4B271723F91319D17590CCAF62A50965
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139362e302f32322d3232203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:53 +0000
ROA not before:           Fri 13 Oct 2023 14:31:53 +0000
ROA not after:            Fri 11 Oct 2024 14:36:53 +0000
asID:                     28352
IP address blocks:        189.51.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:01:f2:bd:4b:27:17:23:f9:13:19:d1:75:90:cc:af:62:a5:09:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:53 2023 GMT
            Not After : Oct 11 14:36:53 2024 GMT
        Subject: CN=AE81E2182EF3F9F4F6FC2050EF24D254E1989651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:55:74:e3:39:a1:e2:bf:1a:39:8a:15:4c:
                    46:a8:28:95:b8:87:97:b3:50:9b:d9:ac:8d:0b:d6:
                    41:05:dd:e8:05:23:07:0c:7c:66:8e:0a:92:59:17:
                    9a:06:b9:b5:ca:c9:3b:60:54:5f:34:27:50:51:02:
                    c1:11:cd:ff:ea:ea:55:e3:a3:79:3f:2e:f1:69:ef:
                    38:f9:97:26:be:27:97:46:cb:4c:3c:0e:91:db:a4:
                    b0:91:82:b4:aa:32:ea:73:07:5f:7a:96:07:ee:2e:
                    9c:c5:f2:90:2c:05:7f:d4:15:1e:fe:3c:46:48:93:
                    7f:10:79:8f:fb:05:f6:89:50:9a:2e:12:90:c0:59:
                    81:b2:99:6e:05:94:af:19:a7:30:14:2a:84:72:61:
                    55:bb:d8:c6:8c:92:3e:ce:00:e7:75:e7:d4:91:9e:
                    5a:ed:55:c0:db:89:4e:f4:6b:61:a4:01:f3:55:7e:
                    08:a6:45:4c:11:37:c4:98:15:8e:0c:2d:59:39:2d:
                    68:7a:b6:8a:aa:da:83:88:22:1e:e7:74:3b:b0:08:
                    a2:bc:cb:a0:f0:4b:27:14:88:26:07:9c:f7:9b:bd:
                    fa:ef:d3:ed:df:92:ca:33:94:30:3c:15:54:f4:04:
                    d5:b2:01:b4:94:78:f6:bb:87:eb:90:d5:cb:48:11:
                    30:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:81:E2:18:2E:F3:F9:F4:F6:FC:20:50:EF:24:D2:54:E1:98:96:51
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139362e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:7f:4d:8b:c2:44:08:27:71:ec:7f:9e:fb:7b:e0:9a:3f:0e:
         8b:5a:7c:c0:0a:f8:d7:cb:f1:c0:04:98:df:be:8b:0a:a2:32:
         ce:97:5c:00:7a:96:c5:8e:b4:45:1d:42:23:00:2c:19:6b:02:
         4c:1d:a9:bb:36:18:f8:1f:a4:59:d8:97:63:0d:12:2d:f8:da:
         28:de:b6:9b:fc:41:11:c5:b6:8b:f4:63:c5:9d:5a:4a:c1:5d:
         83:11:6a:10:a9:5a:90:95:bc:5a:ed:36:93:22:0b:b8:2b:f4:
         5b:fb:7a:5c:82:f3:6b:24:73:98:0a:05:2b:1f:06:36:80:93:
         b9:96:00:79:1a:9b:6f:08:bd:c6:5d:99:94:38:21:03:75:6f:
         63:34:2d:83:04:cb:9a:3b:bb:d2:a8:3f:68:20:4e:a9:9d:a4:
         91:68:f3:b0:b9:93:df:95:f4:c6:eb:66:85:11:0c:c0:ce:06:
         ce:eb:19:4f:2c:88:23:1c:78:00:72:dc:78:01:29:69:79:dc:
         9e:e7:ce:b0:ad:b1:03:7a:a3:9d:35:bf:10:37:2b:e2:d3:15:
         7a:6b:5a:8a:f2:50:86:67:a8:11:38:2b:e5:82:e7:f4:89:c0:
         98:de:7e:42:f1:44:92:7c:7d:e0:50:af:bf:11:60:13:b7:bb:
         11:fe:c8:c5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdwHyvUsnFyP5ExnRdZDMr2KlCWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTczRTVGMjkzRDdGQjUyQzM3QTAxNDJDMDQ0MTVEREZB
MDRDNDYwMjAeFw0yMzEwMTMxNDMxNTNaFw0yNDEwMTExNDM2NTNaMDMxMTAvBgNV
BAMTKEFFODFFMjE4MkVGM0Y5RjRGNkZDMjA1MEVGMjREMjU0RTE5ODk2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUVV04zmh4r8aOYoVTEaoKJW4
h5ezUJvZrI0L1kEF3egFIwcMfGaOCpJZF5oGubXKyTtgVF80J1BRAsERzf/q6lXj
o3k/LvFp7zj5lya+J5dGy0w8DpHbpLCRgrSqMupzB196lgfuLpzF8pAsBX/UFR7+
PEZIk38QeY/7BfaJUJouEpDAWYGymW4FlK8ZpzAUKoRyYVW72MaMkj7OAOd159SR
nlrtVcDbiU70a2GkAfNVfgimRUwRN8SYFY4MLVk5LWh6toqq2oOIIh7ndDuwCKK8
y6DwSycUiCYHnPebvfrv0+3fksozlDA8FVT0BNWyAbSUePa7h+uQ1ctIETCTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUroHiGC7z+fT2/CBQ7yTSVOGYllEwHwYDVR0j
BBgwFoAUpz5fKT1/tSw3oBQsBEFd36BMRgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9BNzNFNUYyOTNEN0ZCNTJDMzdBMDE0MkMwNDQxNURERkEwNEM0NjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E3M0U1RjI5M0Q3RkI1MkMz
N0EwMTQyQzA0NDE1RERGQTA0QzQ2MDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM5MmUzNTMxMmUzMTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvTPEMA0GCSqGSIb3DQEBCwUAA4IBAQBif02LwkQI
J3Hsf577e+CaPw6LWnzACvjXy/HABJjfvosKojLOl1wAepbFjrRFHUIjACwZawJM
Ham7Nhj4H6RZ2JdjDRIt+Noo3rab/EERxbaL9GPFnVpKwV2DEWoQqVqQlbxa7TaT
Igu4K/Rb+3pcgvNrJHOYCgUrHwY2gJO5lgB5GptvCL3GXZmUOCEDdW9jNC2DBMua
O7vSqD9oIE6pnaSRaPOwuZPflfTG62aFEQzAzgbO6xlPLIgjHHgActx4ASlpedye
586wrbEDeqOdNb8QNyvi0xV6a1qK8lCGZ6gROCvlguf0icCY3n5C8USSfH3gUK+/
EWATt7sR/sjF
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org