Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138392e382e38302e302f32302d3234203d3e203238363639.roa
File:                     3138392e382e38302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          V6nyYfccVLpmXizlqMqpVsBOfDifN6W5krB8RIRH20w=
Subject key identifier:   1E:73:D4:BB:F2:6D:46:A0:82:C0:B0:EC:C4:3E:AF:71:7A:87:A5:6F
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       606DD1074B522EE370FDB29CCC9EB83BAE72341F
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138392e382e38302e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:00:49 +0000
ROA not before:           Fri 03 Nov 2023 12:55:49 +0000
ROA not after:            Fri 01 Nov 2024 13:00:49 +0000
asID:                     28669
IP address blocks:        189.8.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6d:d1:07:4b:52:2e:e3:70:fd:b2:9c:cc:9e:b8:3b:ae:72:34:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:55:49 2023 GMT
            Not After : Nov  1 13:00:49 2024 GMT
        Subject: CN=1E73D4BBF26D46A082C0B0ECC43EAF717A87A56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:80:1f:ca:d5:92:3b:e8:47:42:af:b1:de:
                    01:23:c7:5d:ef:35:92:76:9f:e5:a5:6d:c4:0b:4a:
                    cb:e1:c7:49:a6:a6:c3:2d:7c:43:f3:82:25:b9:f8:
                    6c:e5:84:ad:aa:07:ca:53:08:e4:3e:ba:a1:80:aa:
                    5a:e5:f6:c9:50:85:38:e9:67:0b:34:04:a2:d5:07:
                    a9:1e:53:5f:5a:0b:1a:8f:25:23:ea:9a:77:02:a0:
                    be:93:d5:11:85:ac:3c:b2:d4:e7:8d:bd:50:f2:67:
                    ab:91:ae:32:d5:d1:95:29:7c:d1:bb:89:0b:86:b4:
                    c8:21:66:0d:f5:f2:b6:7b:02:70:ae:93:6b:57:2e:
                    5f:0c:bf:eb:11:d6:21:4d:9c:ac:8a:29:f5:15:bc:
                    36:9c:8d:a4:49:2a:84:b2:bb:06:af:b3:50:c0:02:
                    22:54:ec:3b:19:9d:bf:4f:f5:24:a3:9c:ee:ab:ad:
                    44:da:67:3b:4c:18:16:4a:0a:68:5d:f2:0c:8b:b7:
                    a6:a7:3a:4b:d8:1a:07:08:42:0e:4c:87:05:b8:54:
                    7a:ca:94:4c:44:4b:82:5a:64:c2:f6:b8:77:04:a5:
                    9f:1a:e5:8d:e6:db:00:83:e7:31:40:cc:9e:30:a5:
                    94:08:2d:e6:f6:84:25:a7:bb:e9:8f:45:d1:84:7b:
                    63:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:D4:BB:F2:6D:46:A0:82:C0:B0:EC:C4:3E:AF:71:7A:87:A5:6F
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138392e382e38302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:e3:10:a7:00:92:8b:d5:e2:53:00:e7:b4:09:96:74:8d:ee:
         2d:fa:58:2e:2e:fc:27:7f:2b:78:36:bd:bd:63:7f:b5:29:1a:
         67:89:b7:5e:63:7e:1f:23:8f:d7:39:a6:86:81:c5:67:1f:7d:
         23:9a:5b:e5:ee:bc:f9:e8:aa:1f:60:00:f9:3c:f1:5c:74:dc:
         a2:af:f9:10:69:ae:a4:ee:ef:e6:70:71:d1:b4:50:75:f7:fc:
         75:b5:0c:c9:bf:82:34:dd:91:89:4e:05:f3:75:17:d3:16:1c:
         7c:65:97:b3:3a:0d:70:4d:74:ea:18:eb:44:02:85:17:87:c8:
         55:c7:b8:3b:61:3a:05:36:ce:37:be:12:55:be:61:7a:1c:24:
         76:8d:84:4e:44:e7:7c:3c:6d:d8:0d:5a:97:1f:c1:1b:76:29:
         43:b5:65:6c:ba:2d:f6:ce:89:17:8a:5e:a1:de:0c:36:51:94:
         2b:97:10:bc:d6:08:06:84:15:df:1d:7e:bb:86:15:0c:b7:be:
         88:ba:36:c8:d9:c2:d1:71:7a:dc:ee:98:e2:80:53:42:65:41:
         b0:f2:74:f4:9b:02:c4:3f:2d:36:33:45:83:9a:27:09:c5:6c:
         c7:44:9f:45:ff:64:93:31:cd:1b:cd:04:c0:dd:5e:7f:11:80:
         5b:da:0d:ea
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUYG3RB0tSLuNw/bKczJ64O65yNB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZERjNDNTRDMzRCQzAwNDBBQkJCRTQxMkVDNjk0OEM4
N0QxNjIyQTAeFw0yMzExMDMxMjU1NDlaFw0yNDExMDExMzAwNDlaMDMxMTAvBgNV
BAMTKDFFNzNENEJCRjI2RDQ2QTA4MkMwQjBFQ0M0M0VBRjcxN0E4N0E1NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQe4AfytWSO+hHQq+x3gEjx13v
NZJ2n+WlbcQLSsvhx0mmpsMtfEPzgiW5+GzlhK2qB8pTCOQ+uqGAqlrl9slQhTjp
Zws0BKLVB6keU19aCxqPJSPqmncCoL6T1RGFrDyy1OeNvVDyZ6uRrjLV0ZUpfNG7
iQuGtMghZg318rZ7AnCuk2tXLl8Mv+sR1iFNnKyKKfUVvDacjaRJKoSyuwavs1DA
AiJU7DsZnb9P9SSjnO6rrUTaZztMGBZKCmhd8gyLt6anOkvYGgcIQg5MhwW4VHrK
lExES4JaZML2uHcEpZ8a5Y3m2wCD5zFAzJ4wpZQILeb2hCWnu+mPRdGEe2MXAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUHnPUu/JtRqCCwLDsxD6vcXqHpW8wHwYDVR0j
BBgwFoAUNt88VMNLwAQKu75BLsaUjIfRYiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMC8zNkRGM0M1NEMzNEJDMDA0MEFCQkJFNDEyRUM2OTQ4Qzg3RDE2MjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2REYzQzU0QzM0QkMwMDQw
QUJCQkU0MTJFQzY5NDhDODdEMTYyMkEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzAv
MzEzODM5MmUzODJlMzgzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzNjM2
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS9CFAwDQYJKoZIhvcNAQELBQADggEBABnjEKcAkovV4lMA
57QJlnSN7i36WC4u/Cd/K3g2vb1jf7UpGmeJt15jfh8jj9c5poaBxWcffSOaW+Xu
vPnoqh9gAPk88Vx03KKv+RBprqTu7+ZwcdG0UHX3/HW1DMm/gjTdkYlOBfN1F9MW
HHxll7M6DXBNdOoY60QChReHyFXHuDthOgU2zje+ElW+YXocJHaNhE5E53w8bdgN
WpcfwRt2KUO1ZWy6LfbOiReKXqHeDDZRlCuXELzWCAaEFd8dfruGFQy3voi6NsjZ
wtFxetzumOKAU0JlQbDydPSbAsQ/LTYzRYOaJwnFbMdEn0X/ZJMxzRvNBMDdXn8R
gFvaDeo=
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:50:42 2025 by rpki-client