Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3138392e33392e3231362e302f32322d3234203d3e20323635333033.roa
File:                     3138392e33392e3231362e302f32322d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          KJF6sR55cZVv7SRF82K7wLIKNpdCuQlfFoLkJSnA+YY=
Subject key identifier:   2C:E9:14:2E:F7:51:2C:2F:7D:ED:34:45:32:1F:F5:2D:BA:56:F1:90
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       41603DAE5A6100C090AD5E24B4F0CA731107487F
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3138392e33392e3231362e302f32322d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:37:04 +0000
ROA not before:           Wed 10 Jan 2024 17:32:04 +0000
ROA not after:            Wed 08 Jan 2025 17:37:04 +0000
asID:                     265303
IP address blocks:        189.39.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:60:3d:ae:5a:61:00:c0:90:ad:5e:24:b4:f0:ca:73:11:07:48:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:32:04 2024 GMT
            Not After : Jan  8 17:37:04 2025 GMT
        Subject: CN=2CE9142EF7512C2F7DED3445321FF52DBA56F190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:83:48:ab:74:dc:ca:8b:57:32:fe:c0:4e:
                    56:c7:83:85:a9:13:c1:d0:19:36:1f:d9:b8:eb:46:
                    4b:47:f2:bb:c3:41:d3:c7:9c:fd:69:5a:40:95:a5:
                    db:23:b8:5d:87:f6:8e:c0:f4:33:2d:c9:f7:95:58:
                    ee:36:46:bc:59:e5:03:8d:17:b9:aa:7d:3f:19:13:
                    df:f7:a8:73:0a:30:c2:46:2d:11:3a:1e:25:5c:44:
                    57:f9:dd:8f:da:71:f0:6b:d3:2f:84:5e:f5:84:f9:
                    1e:b4:a0:2d:47:89:32:db:9f:86:24:4c:1b:37:c8:
                    99:37:aa:67:18:b4:a4:88:dc:f2:0d:42:da:b1:52:
                    ae:b3:84:20:0c:46:75:a7:0c:97:53:28:a7:b7:cd:
                    0c:d1:f4:82:a9:fa:50:6b:5b:51:f1:98:d8:68:14:
                    ea:68:53:61:8b:e1:47:88:8c:22:55:49:f1:74:8a:
                    50:a1:a8:c6:c2:7a:33:56:df:40:e6:5d:55:b6:66:
                    3b:ac:fb:98:a7:83:f5:36:a2:00:b1:0e:92:0d:28:
                    cd:27:d2:0d:b1:fc:5a:b4:1e:2d:b0:11:28:f0:49:
                    e2:4c:dc:f0:e8:b9:bd:5a:7e:48:15:85:80:19:7b:
                    46:fd:40:d4:e9:95:5f:a1:8d:66:3a:7f:98:b1:80:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:14:2E:F7:51:2C:2F:7D:ED:34:45:32:1F:F5:2D:BA:56:F1:90
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3138392e33392e3231362e302f32322d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:fa:cf:4a:9a:f8:d3:ed:4c:20:6d:5a:a4:03:21:d1:08:e7:
         67:4e:8c:13:5f:5b:72:1e:a0:7a:6f:9c:66:55:73:11:9e:78:
         04:f8:75:f7:2d:13:15:92:b5:65:97:79:e8:1e:01:e9:97:3e:
         47:7d:91:d3:a3:b1:b0:2f:9a:01:9d:36:97:46:ae:ed:7c:7f:
         c1:ea:d5:61:76:25:27:01:43:a6:45:fd:a4:dd:d9:e2:b6:b4:
         22:54:45:59:b0:84:52:9e:ab:32:79:05:b3:d5:45:45:25:90:
         20:49:94:7c:73:52:ca:13:a6:50:3f:05:e4:5d:93:09:f7:83:
         96:de:bd:db:be:72:8b:d2:78:11:dc:18:fe:cd:73:ce:4b:b6:
         0d:f2:41:30:a0:a4:f4:fc:86:03:91:45:33:79:ee:d7:97:0b:
         9d:7b:a9:f6:ce:ca:ab:cf:8a:5e:84:c5:2a:a3:7e:1f:60:ee:
         60:ae:c1:89:01:26:8b:b1:a4:45:0c:ba:78:48:21:fa:57:3f:
         90:30:85:0e:91:3f:bb:a8:66:64:16:20:7f:8e:e5:dd:65:75:
         fe:0c:79:ea:ef:9d:c9:27:e7:e9:d0:f7:f6:97:92:be:c7:b1:
         fb:56:b9:d3:47:00:f7:4f:0e:a1:9e:51:74:72:79:1e:0b:78:
         b5:7b:6c:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQWA9rlphAMCQrV4ktPDKcxEHSH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzNjQzNDE1RDREQ0Q0Q0QwREQ0RTQxMUQxQTI2MUZG
NDdBNUJERTAeFw0yNDAxMTAxNzMyMDRaFw0yNTAxMDgxNzM3MDRaMDMxMTAvBgNV
BAMTKDJDRTkxNDJFRjc1MTJDMkY3REVEMzQ0NTMyMUZGNTJEQkE1NkYxOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59INIq3TcyotXMv7ATlbHg4Wp
E8HQGTYf2bjrRktH8rvDQdPHnP1pWkCVpdsjuF2H9o7A9DMtyfeVWO42RrxZ5QON
F7mqfT8ZE9/3qHMKMMJGLRE6HiVcRFf53Y/acfBr0y+EXvWE+R60oC1HiTLbn4Yk
TBs3yJk3qmcYtKSI3PINQtqxUq6zhCAMRnWnDJdTKKe3zQzR9IKp+lBrW1HxmNho
FOpoU2GL4UeIjCJVSfF0ilChqMbCejNW30DmXVW2Zjus+5ing/U2ogCxDpINKM0n
0g2x/Fq0Hi2wESjwSeJM3PDoub1afkgVhYAZe0b9QNTplV+hjWY6f5ixgIl9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULOkULvdRLC997TRFMh/1LbpW8ZAwHwYDVR0j
BBgwFoAURDZDQV1NzUzQ3U5BHRomH/R6W94wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW43RnZEM1F4UExFWHM4SHBnV1V1cEhxQmhQVnNKR0tIOEdFa1JwVnB0
N1gvMC80NDM2NDM0MTVENERDRDRDRDBERDRFNDExRDFBMjYxRkY0N0E1QkRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0MzY0MzQxNUQ0RENENENE
MERENEU0MTFEMUEyNjFGRjQ3QTVCREUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzluN0Z2RDNReFBMRVhzOEhwZ1dVdXBIcUJoUFZzSkdLSDhHRWtScFZwdDdYLzAv
MzEzODM5MmUzMzM5MmUzMjMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9J9gwDQYJKoZIhvcNAQELBQADggEBAIT6z0qa
+NPtTCBtWqQDIdEI52dOjBNfW3IeoHpvnGZVcxGeeAT4dfctExWStWWXeegeAemX
Pkd9kdOjsbAvmgGdNpdGru18f8Hq1WF2JScBQ6ZF/aTd2eK2tCJURVmwhFKeqzJ5
BbPVRUUlkCBJlHxzUsoTplA/BeRdkwn3g5bevdu+covSeBHcGP7Nc85Ltg3yQTCg
pPT8hgORRTN57teXC517qfbOyqvPil6ExSqjfh9g7mCuwYkBJouxpEUMunhIIfpX
P5AwhQ6RP7uoZmQWIH+O5d1ldf4Meervnckn5+nQ9/aXkr7HsftWudNHAPdPDqGe
UXRyeR4LeLV7bOg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org