Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3231302e302f32342d3234203d3e203238323130.roa
File:                     3138392e3132372e3231302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          5YWf+et95/buew4Yyenrapot9+iMEudV4oBawJ+zlgI=
Subject key identifier:   D2:AA:04:8B:C7:10:2E:68:BC:24:87:17:B9:F8:24:07:54:B7:5C:08
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       7631D2AD47C9E1D93E986DEC7D048C447653B151
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3231302e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:23 +0000
ROA not before:           Wed 28 Feb 2024 13:58:23 +0000
ROA not after:            Wed 26 Feb 2025 14:03:23 +0000
asID:                     28210
IP address blocks:        189.127.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:31:d2:ad:47:c9:e1:d9:3e:98:6d:ec:7d:04:8c:44:76:53:b1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:23 2024 GMT
            Not After : Feb 26 14:03:23 2025 GMT
        Subject: CN=D2AA048BC7102E68BC248717B9F8240754B75C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:75:d4:a0:6d:95:ac:cd:fd:83:1e:39:39:
                    8e:6a:50:ff:e7:f6:97:f1:4f:c1:21:87:26:c4:c6:
                    e6:5b:b2:e5:f5:e5:e2:52:e6:e6:ba:53:1a:4c:54:
                    0c:9f:bb:8f:0e:37:de:33:84:28:32:f7:04:8a:72:
                    b4:e7:a7:c9:9e:81:87:7e:11:47:cf:e2:be:d1:61:
                    b6:76:f7:2f:a5:df:db:59:52:7f:c0:10:64:e2:91:
                    38:b8:e9:5c:d6:3f:94:7f:21:5d:69:97:87:be:ec:
                    8f:9b:db:17:76:0e:62:c6:c7:9a:3e:63:1c:66:f7:
                    aa:3f:47:14:65:aa:11:6f:84:ed:99:a2:62:ec:48:
                    fe:12:13:d6:e1:23:52:0a:1a:41:c6:be:17:13:d7:
                    9a:4d:ae:34:7a:b9:a9:e5:64:64:41:32:8e:50:13:
                    f5:26:c0:42:1d:0e:f4:33:e1:7d:e5:0b:93:9a:4f:
                    6d:77:7a:2e:6b:2f:ba:27:a5:ec:83:c8:0e:bf:ab:
                    e6:6e:a1:d1:8c:2e:e5:42:37:f9:99:bb:1f:d1:fd:
                    ee:78:bc:f9:a9:13:d7:3e:de:78:55:3b:56:ce:20:
                    3f:ba:a0:08:c1:26:f1:9d:b4:2a:b8:8d:e8:be:fd:
                    18:21:a4:3c:40:c5:bd:4e:00:d8:d8:9c:b3:a1:b5:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AA:04:8B:C7:10:2E:68:BC:24:87:17:B9:F8:24:07:54:B7:5C:08
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3231302e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:c1:15:61:37:a1:45:87:38:39:f8:5c:b5:5c:7c:a5:46:f5:
         3e:27:d9:b4:d6:4b:8b:7c:8a:4d:33:4f:2f:df:e4:f8:68:17:
         d3:97:b9:32:6e:41:ce:4f:d2:b0:9e:74:f6:21:c9:ff:d0:1b:
         d4:25:d7:15:ed:f4:dd:24:54:d5:29:e6:c2:b1:83:0e:6b:d7:
         36:bd:75:6c:f5:fc:31:2c:53:44:e0:7c:ea:a8:b1:52:76:09:
         33:35:e0:7c:0b:ca:62:2d:ca:43:90:b6:65:e4:36:85:b4:5f:
         f8:17:6e:cd:ca:f8:61:0a:68:12:43:7d:5e:0a:04:4c:0d:76:
         40:44:98:16:9e:ba:f9:3b:2b:c3:73:75:36:fa:a0:f2:88:ff:
         75:64:b5:ce:07:41:4c:d1:c8:64:21:ad:68:5d:30:c0:ef:67:
         6a:bf:8d:3c:49:5b:a8:e1:57:b0:06:af:7b:44:49:88:74:1b:
         5b:1c:7f:2c:d0:e4:ea:d5:ae:88:75:cc:90:80:5b:44:b0:6b:
         08:fd:88:77:e5:18:2b:c9:fd:54:06:3e:ee:d1:41:79:63:c0:
         3f:03:03:dd:50:46:5c:77:a0:ac:d5:b9:bc:0d:fb:6c:30:d2:
         24:9f:da:65:09:90:1d:bd:1f:45:87:b4:09:bf:d8:35:65:9a:
         e0:1b:90:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdjHSrUfJ4dk+mG3sfQSMRHZTsVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDMzNDNjU5NjY3QUE5MkE2QTBGMjVBRUZCNjJBNjAz
MzhGNUE0QjAeFw0yNDAyMjgxMzU4MjNaFw0yNTAyMjYxNDAzMjNaMDMxMTAvBgNV
BAMTKEQyQUEwNDhCQzcxMDJFNjhCQzI0ODcxN0I5RjgyNDA3NTRCNzVDMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKA3XUoG2VrM39gx45OY5qUP/n
9pfxT8EhhybExuZbsuX15eJS5ua6UxpMVAyfu48ON94zhCgy9wSKcrTnp8megYd+
EUfP4r7RYbZ29y+l39tZUn/AEGTikTi46VzWP5R/IV1pl4e+7I+b2xd2DmLGx5o+
Yxxm96o/RxRlqhFvhO2ZomLsSP4SE9bhI1IKGkHGvhcT15pNrjR6uanlZGRBMo5Q
E/UmwEIdDvQz4X3lC5OaT213ei5rL7onpeyDyA6/q+ZuodGMLuVCN/mZux/R/e54
vPmpE9c+3nhVO1bOID+6oAjBJvGdtCq4jei+/RghpDxAxb1OANjYnLOhtZv9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0qoEi8cQLmi8JIcXufgkB1S3XAgwHwYDVR0j
BBgwFoAU28M8ZZZnqpKmoPJa77YqYDOPWkswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMC9EQkMzM0M2NTk2NjdBQTkyQTZBMEYyNUFFRkI2MkE2MDMzOEY1QTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCQzMzQzY1OTY2N0FBOTJB
NkEwRjI1QUVGQjYyQTYwMzM4RjVBNEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzAv
MzEzODM5MmUzMTMyMzcyZTMyMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9f9IwDQYJKoZIhvcNAQELBQADggEBAMnBFWE3
oUWHODn4XLVcfKVG9T4n2bTWS4t8ik0zTy/f5PhoF9OXuTJuQc5P0rCedPYhyf/Q
G9Ql1xXt9N0kVNUp5sKxgw5r1za9dWz1/DEsU0TgfOqosVJ2CTM14HwLymItykOQ
tmXkNoW0X/gXbs3K+GEKaBJDfV4KBEwNdkBEmBaeuvk7K8NzdTb6oPKI/3Vktc4H
QUzRyGQhrWhdMMDvZ2q/jTxJW6jhV7AGr3tESYh0G1scfyzQ5OrVroh1zJCAW0Sw
awj9iHflGCvJ/VQGPu7RQXljwD8DA91QRlx3oKzVubwN+2ww0iSf2mUJkB29H0WH
tAm/2DVlmuAbkIA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org