Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8o1pbDuy8tVsxMCzmxoXFDJm8oVbAAKH6GSMWgmrot21/0/3138392e39312e3139322e302f32302d3234203d3e203238323038.roa
File:                     3138392e39312e3139322e302f32302d3234203d3e203238323038.roa (raw, json)
Hash identifier:          Zvb/1xoxwDQDfRwK1zhnqlkG15foTmiWyUqzOmgKkU4=
Subject key identifier:   CF:17:A5:BE:3A:0B:86:CA:BE:5E:F0:0B:A6:65:EB:03:46:30:53:1B
Certificate issuer:       /CN=EDAD00A81AFED482BFBE83C931F2B976835973C1
Certificate serial:       14941DCF8BC99135BDE629DC00A2592D743EF5A3
Authority key identifier: ED:AD:00:A8:1A:FE:D4:82:BF:BE:83:C9:31:F2:B9:76:83:59:73:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD00A81AFED482BFBE83C931F2B976835973C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8o1pbDuy8tVsxMCzmxoXFDJm8oVbAAKH6GSMWgmrot21/0/3138392e39312e3139322e302f32302d3234203d3e203238323038.roa
Signing time:             Wed 08 Mar 2023 14:03:54 +0000
ROA not before:           Wed 08 Mar 2023 13:58:54 +0000
ROA not after:            Wed 06 Mar 2024 14:03:54 +0000
asID:                     28208
IP address blocks:        189.91.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:94:1d:cf:8b:c9:91:35:bd:e6:29:dc:00:a2:59:2d:74:3e:f5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAD00A81AFED482BFBE83C931F2B976835973C1
        Validity
            Not Before: Mar  8 13:58:54 2023 GMT
            Not After : Mar  6 14:03:54 2024 GMT
        Subject: CN=CF17A5BE3A0B86CABE5EF00BA665EB034630531B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:8b:08:5b:6c:28:38:08:d4:6d:62:6e:9e:
                    c2:11:02:ee:47:b1:11:7d:d4:b3:2d:4a:13:e6:19:
                    0a:0e:b9:a4:23:62:3b:f7:f3:86:d2:f5:ba:4b:b1:
                    85:0d:98:15:d5:f6:23:92:7b:03:31:da:f1:38:b9:
                    44:f3:d7:16:2e:1d:00:cd:06:37:80:f4:14:26:11:
                    c9:ef:01:77:9e:38:c9:27:69:2d:71:4b:b9:5d:36:
                    58:87:84:c7:e2:91:b6:13:8c:f7:33:b4:e3:34:9d:
                    43:86:f4:82:06:41:b4:db:ca:bd:48:0e:4e:54:4f:
                    3a:7a:ae:9d:45:eb:b1:78:f2:12:27:5d:43:e3:45:
                    fc:de:92:31:0f:9e:f1:34:6d:c3:ee:12:2d:1f:68:
                    72:c7:72:88:1f:bf:26:e7:b8:08:d1:99:c8:71:f3:
                    1b:24:db:44:9c:b6:71:af:34:58:c1:eb:1a:d9:bb:
                    ae:ad:c3:de:70:65:93:c6:9d:71:3e:5f:7b:b1:14:
                    05:c2:a5:e0:8a:58:15:e8:9f:54:ff:fb:07:52:8e:
                    08:8b:a6:80:b3:b2:ce:9c:2d:fd:73:07:60:72:76:
                    b2:ca:92:19:48:4b:87:e9:a7:40:3c:a2:0d:a1:ce:
                    d2:b3:09:05:c2:14:72:1f:1e:4b:ae:83:b7:7f:e5:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:17:A5:BE:3A:0B:86:CA:BE:5E:F0:0B:A6:65:EB:03:46:30:53:1B
            X509v3 Authority Key Identifier:
                keyid:ED:AD:00:A8:1A:FE:D4:82:BF:BE:83:C9:31:F2:B9:76:83:59:73:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8o1pbDuy8tVsxMCzmxoXFDJm8oVbAAKH6GSMWgmrot21/0/EDAD00A81AFED482BFBE83C931F2B976835973C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD00A81AFED482BFBE83C931F2B976835973C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8o1pbDuy8tVsxMCzmxoXFDJm8oVbAAKH6GSMWgmrot21/0/3138392e39312e3139322e302f32302d3234203d3e203238323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:bb:f2:aa:78:03:cb:01:a4:33:7d:ed:b9:fa:46:ad:0b:d5:
         15:61:a4:dd:c2:c4:0c:cb:da:ba:71:33:58:99:9a:aa:bf:1c:
         32:eb:88:73:b9:8e:c5:0e:b2:78:ba:28:29:2e:87:9d:31:2c:
         5c:d0:10:84:ca:4c:d6:b8:cb:1d:06:c0:43:97:4f:9d:fb:35:
         8a:0a:d7:0c:8d:2f:c8:37:21:66:ca:ba:d2:0c:c0:3d:b7:23:
         86:9d:34:44:89:51:73:b2:4d:b7:96:27:6a:ca:1d:6b:97:cc:
         23:90:d5:85:22:9a:c2:7c:ea:5a:c6:ff:2b:e9:ea:7c:b9:e3:
         57:95:b3:4e:43:61:6a:55:5d:68:da:9a:8d:60:ef:4f:a3:04:
         d6:53:d6:f0:e8:4d:e2:dd:15:ab:59:0a:c8:9e:c4:41:ed:36:
         fe:87:16:fe:7a:bd:9c:19:67:b7:b2:d5:a1:92:4c:62:0a:7c:
         0a:05:0c:27:fd:55:31:50:3e:60:54:07:63:04:5d:0a:f7:7e:
         8f:39:fe:56:4e:43:3b:6e:ab:80:28:3d:90:f6:eb:34:30:de:
         a6:36:87:79:36:75:d1:1d:e0:d6:16:b3:8b:ae:08:3e:33:5f:
         07:f1:43:5f:33:34:89:54:9a:3f:f6:f9:88:20:c5:3e:74:30:
         18:98:9f:f6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFJQdz4vJkTW95incAKJZLXQ+9aMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBRDAwQTgxQUZFRDQ4MkJGQkU4M0M5MzFGMkI5NzY4
MzU5NzNDMTAeFw0yMzAzMDgxMzU4NTRaFw0yNDAzMDYxNDAzNTRaMDMxMTAvBgNV
BAMTKENGMTdBNUJFM0EwQjg2Q0FCRTVFRjAwQkE2NjVFQjAzNDYzMDUzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxU4sIW2woOAjUbWJunsIRAu5H
sRF91LMtShPmGQoOuaQjYjv384bS9bpLsYUNmBXV9iOSewMx2vE4uUTz1xYuHQDN
BjeA9BQmEcnvAXeeOMknaS1xS7ldNliHhMfikbYTjPcztOM0nUOG9IIGQbTbyr1I
Dk5UTzp6rp1F67F48hInXUPjRfzekjEPnvE0bcPuEi0faHLHcogfvybnuAjRmchx
8xsk20SctnGvNFjB6xrZu66tw95wZZPGnXE+X3uxFAXCpeCKWBXon1T/+wdSjgiL
poCzss6cLf1zB2BydrLKkhlIS4fpp0A8og2hztKzCQXCFHIfHkuug7d/5XexAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzxelvjoLhsq+XvALpmXrA0YwUxswHwYDVR0j
BBgwFoAU7a0AqBr+1IK/voPJMfK5doNZc8EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG8xcGJEdXk4dFZzeE1Dem14b1hGREptOG9WYkFBS0g2R1NNV2dtcm90
MjEvMC9FREFEMDBBODFBRkVENDgyQkZCRTgzQzkzMUYyQjk3NjgzNTk3M0MxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VEQUQwMEE4MUFGRUQ0ODJC
RkJFODNDOTMxRjJCOTc2ODM1OTczQzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhvMXBiRHV5OHRWc3hNQ3pteG9YRkRKbThvVmJBQUtINkdTTVdnbXJvdDIxLzAv
MzEzODM5MmUzOTMxMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvVvAMA0GCSqGSIb3DQEBCwUAA4IBAQADu/KqeAPL
AaQzfe25+katC9UVYaTdwsQMy9q6cTNYmZqqvxwy64hzuY7FDrJ4uigpLoedMSxc
0BCEykzWuMsdBsBDl0+d+zWKCtcMjS/INyFmyrrSDMA9tyOGnTREiVFzsk23lidq
yh1rl8wjkNWFIprCfOpaxv8r6ep8ueNXlbNOQ2FqVV1o2pqNYO9PowTWU9bw6E3i
3RWrWQrInsRB7Tb+hxb+er2cGWe3stWhkkxiCnwKBQwn/VUxUD5gVAdjBF0K936P
Of5WTkM7bquAKD2Q9us0MN6mNod5NnXRHeDWFrOLrgg+M18H8UNfMzSJVJo/9vmI
IMU+dDAYmJ/2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org