Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3131332e36342e302f32302d3230203d3e203238323130.roa
File:                     3138392e3131332e36342e302f32302d3230203d3e203238323130.roa (raw, json)
Hash identifier:          sdZme4eY2wP7NXHFr4HAzoMlvOOk6iY8ipEZEaqYO+s=
Subject key identifier:   00:7F:EC:37:1C:CB:13:5A:6F:B7:AA:6A:A9:F3:87:92:17:35:FF:90
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       5517EA186F45CD98C3A8C1E5D3E6DE03BBD9405D
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3131332e36342e302f32302d3230203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:20 +0000
ROA not before:           Wed 28 Feb 2024 13:58:20 +0000
ROA not after:            Wed 26 Feb 2025 14:03:20 +0000
asID:                     28210
IP address blocks:        189.113.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:17:ea:18:6f:45:cd:98:c3:a8:c1:e5:d3:e6:de:03:bb:d9:40:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:20 2024 GMT
            Not After : Feb 26 14:03:20 2025 GMT
        Subject: CN=007FEC371CCB135A6FB7AA6AA9F387921735FF90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:88:a0:4a:e6:f5:29:18:d3:41:37:70:60:cf:
                    2a:16:e5:fb:7d:5f:3b:64:ca:e6:36:de:ea:e1:7d:
                    20:4d:82:b3:a2:b3:09:ea:e8:3c:5b:cf:ba:2a:b3:
                    18:e4:82:12:5e:5d:78:02:e0:a2:38:c3:25:ce:cb:
                    d7:77:26:e5:5d:32:d2:4c:82:77:f0:e5:cc:e3:15:
                    7a:1d:88:32:7d:0c:19:35:5e:ce:6f:96:96:fe:81:
                    fc:f1:20:b8:2a:0f:80:ea:95:ee:de:22:36:68:12:
                    ed:d0:fb:94:39:98:de:ab:e3:3e:a7:2e:a1:40:fc:
                    ac:9a:08:84:74:d0:2e:87:7f:3f:0d:fb:fd:0a:09:
                    5b:ec:6a:9c:f5:8e:05:eb:5a:80:61:cd:7a:da:9d:
                    51:65:3d:f9:12:be:ee:7d:bc:ee:d0:3b:b8:63:5c:
                    e3:bd:54:eb:47:91:56:83:f0:8e:ec:f3:98:50:a1:
                    92:6b:74:22:8c:74:f4:df:75:50:91:3d:55:69:b1:
                    6f:01:17:48:26:ac:16:ff:64:db:af:e9:d6:28:d5:
                    75:5b:e6:a4:04:a3:ea:6b:c6:61:b5:d7:ca:c1:2f:
                    97:6c:52:93:47:34:24:fc:2b:0b:6f:32:f6:ad:fa:
                    56:1c:0d:d3:d7:66:10:d7:a1:eb:19:3d:35:2c:78:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7F:EC:37:1C:CB:13:5A:6F:B7:AA:6A:A9:F3:87:92:17:35:FF:90
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3131332e36342e302f32302d3230203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:2d:40:14:c0:28:3f:f9:4a:e3:19:2e:ee:58:37:33:2f:26:
         0f:c9:d4:84:7d:60:74:ef:a1:85:29:04:2d:34:62:a9:c2:09:
         fc:7b:3c:60:3f:78:0a:1f:cf:d6:20:6c:4c:bc:fd:36:cf:19:
         21:1a:dd:81:7c:82:ba:87:cb:e5:e0:ec:db:41:3e:7f:d7:16:
         02:3c:81:db:66:0b:b6:05:c4:a9:f5:5e:12:42:2f:0f:3a:db:
         cc:8b:fd:23:ad:27:ed:72:b8:0b:23:cd:83:c5:c6:68:a2:ee:
         55:3c:5c:da:99:a5:57:6c:6d:1a:10:c4:de:de:79:c9:43:c5:
         25:59:7a:df:b7:c1:33:c9:1b:c1:ec:f5:78:28:45:b0:c3:32:
         81:9e:d9:1b:4a:81:43:55:c2:f9:8a:73:01:64:73:e3:e1:50:
         e1:83:5e:2b:fa:05:24:28:4b:20:4d:e4:bd:c5:46:72:f5:75:
         d1:66:56:45:03:b2:d9:6d:b1:4c:52:77:96:a0:72:08:d7:72:
         69:4f:75:1f:c0:bb:b3:7b:31:d4:76:3f:e2:ab:80:a3:aa:2f:
         d7:9d:58:c6:0d:7b:e8:2f:56:e2:ec:7a:47:c8:ae:c0:62:69:
         d2:ef:11:22:7e:a7:d1:0f:b3:c5:59:12:d6:cc:47:65:92:e2:
         1b:d1:91:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVRfqGG9FzZjDqMHl0+beA7vZQF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDMzNDNjU5NjY3QUE5MkE2QTBGMjVBRUZCNjJBNjAz
MzhGNUE0QjAeFw0yNDAyMjgxMzU4MjBaFw0yNTAyMjYxNDAzMjBaMDMxMTAvBgNV
BAMTKDAwN0ZFQzM3MUNDQjEzNUE2RkI3QUE2QUE5RjM4NzkyMTczNUZGOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjiKBK5vUpGNNBN3BgzyoW5ft9
XztkyuY23urhfSBNgrOiswnq6Dxbz7oqsxjkghJeXXgC4KI4wyXOy9d3JuVdMtJM
gnfw5czjFXodiDJ9DBk1Xs5vlpb+gfzxILgqD4Dqle7eIjZoEu3Q+5Q5mN6r4z6n
LqFA/KyaCIR00C6Hfz8N+/0KCVvsapz1jgXrWoBhzXranVFlPfkSvu59vO7QO7hj
XOO9VOtHkVaD8I7s85hQoZJrdCKMdPTfdVCRPVVpsW8BF0gmrBb/ZNuv6dYo1XVb
5qQEo+prxmG118rBL5dsUpNHNCT8KwtvMvat+lYcDdPXZhDXoesZPTUseOh9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAH/sNxzLE1pvt6pqqfOHkhc1/5AwHwYDVR0j
BBgwFoAU28M8ZZZnqpKmoPJa77YqYDOPWkswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMC9EQkMzM0M2NTk2NjdBQTkyQTZBMEYyNUFFRkI2MkE2MDMzOEY1QTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCQzMzQzY1OTY2N0FBOTJB
NkEwRjI1QUVGQjYyQTYwMzM4RjVBNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzAv
MzEzODM5MmUzMTMxMzMyZTM2MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvXFAMA0GCSqGSIb3DQEBCwUAA4IBAQC8LUAUwCg/
+UrjGS7uWDczLyYPydSEfWB076GFKQQtNGKpwgn8ezxgP3gKH8/WIGxMvP02zxkh
Gt2BfIK6h8vl4OzbQT5/1xYCPIHbZgu2BcSp9V4SQi8POtvMi/0jrSftcrgLI82D
xcZoou5VPFzamaVXbG0aEMTe3nnJQ8UlWXrft8EzyRvB7PV4KEWwwzKBntkbSoFD
VcL5inMBZHPj4VDhg14r+gUkKEsgTeS9xUZy9XXRZlZFA7LZbbFMUneWoHII13Jp
T3UfwLuzezHUdj/iq4Cjqi/XnVjGDXvoL1bi7HpHyK7AYmnS7xEifqfRD7PFWRLW
zEdlkuIb0ZG2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org