Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3138392e35302e3232342e302f31392d3234203d3e203238333334.roa
File:                     3138392e35302e3232342e302f31392d3234203d3e203238333334.roa (raw, json)
Hash identifier:          Oe8IxIhkU9ILn6M/uneGjMmOwT43yBAkUDJ7H7A8u1c=
Subject key identifier:   AC:4D:F5:FB:33:66:8F:4C:B0:9F:28:0C:96:B1:E9:23:04:EE:6C:A2
Certificate issuer:       /CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
Certificate serial:       7C29644B5F805B424F5DD234D98C59705CFC512D
Authority key identifier: C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3138392e35302e3232342e302f31392d3234203d3e203238333334.roa
Signing time:             Tue 16 May 2023 13:58:42 +0000
ROA not before:           Tue 16 May 2023 13:53:42 +0000
ROA not after:            Tue 14 May 2024 13:58:42 +0000
asID:                     28334
IP address blocks:        189.50.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:29:64:4b:5f:80:5b:42:4f:5d:d2:34:d9:8c:59:70:5c:fc:51:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
        Validity
            Not Before: May 16 13:53:42 2023 GMT
            Not After : May 14 13:58:42 2024 GMT
        Subject: CN=AC4DF5FB33668F4CB09F280C96B1E92304EE6CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:2b:58:49:83:ce:51:51:40:ae:c6:cf:9f:
                    16:d9:6e:bc:7c:1e:b8:f1:2d:b9:d2:e2:db:24:9c:
                    cf:11:23:5c:1b:44:69:5a:9c:68:54:5e:12:52:49:
                    d5:a2:8f:77:cc:33:bb:21:51:9e:5f:2c:e0:bd:6e:
                    b5:1b:17:9f:4a:49:c1:e7:90:1a:81:2a:42:bb:b6:
                    42:9e:6a:6e:8e:dd:fe:1a:72:5c:5b:ef:1d:4b:69:
                    63:d4:91:6f:68:26:62:67:28:87:82:14:ee:29:e1:
                    99:70:b1:60:08:e6:2a:fd:de:35:34:4e:a4:55:57:
                    dc:46:61:c1:21:e6:b5:00:44:4e:2a:e4:42:05:17:
                    6d:f5:95:e4:d1:4f:22:84:26:dc:a7:07:bf:85:6d:
                    a1:3d:e9:d3:5b:6e:97:ea:2e:c1:f4:e2:c2:15:6d:
                    9d:2e:6e:42:6d:02:2b:0e:a5:8c:35:88:ba:29:cd:
                    ec:ec:d0:b3:0e:ea:8c:98:f4:81:40:71:61:10:64:
                    39:6c:34:66:c9:32:d9:ad:0d:61:45:46:81:b9:71:
                    04:1b:b7:b4:56:6c:1b:60:69:66:06:54:bb:43:51:
                    94:cb:4c:10:66:ae:c7:b5:49:27:0a:dd:5c:fb:cf:
                    45:2b:ac:a5:0d:27:f8:11:88:28:65:28:3f:7c:a3:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4D:F5:FB:33:66:8F:4C:B0:9F:28:0C:96:B1:E9:23:04:EE:6C:A2
            X509v3 Authority Key Identifier:
                keyid:C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3138392e35302e3232342e302f31392d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:91:76:97:31:3b:83:d4:9e:0c:ba:fc:35:9d:ce:eb:ce:79:
         2c:03:4c:44:5a:47:7c:dc:9f:26:68:c4:6b:70:bb:21:10:86:
         8f:3b:81:06:6d:d9:84:5b:f5:76:85:66:ee:2f:5f:44:32:22:
         bd:d4:b0:a6:25:1f:a2:b1:0d:75:87:ac:4a:a8:21:91:61:d6:
         4c:a4:88:0b:d7:66:f8:b0:de:c5:0a:30:0c:c2:12:ef:41:84:
         39:65:11:9f:4a:40:c8:9f:f9:bf:31:cf:77:fa:df:29:17:d7:
         7d:64:60:fd:ce:44:07:64:a5:dd:31:db:94:02:d2:6f:be:9e:
         48:1f:97:79:b9:77:24:6c:dd:5b:6d:40:80:ba:33:54:b8:49:
         fe:77:8d:71:f5:f3:47:50:29:ed:cb:08:2e:ee:52:71:cd:0f:
         5b:ec:c0:b9:e8:6c:00:67:d7:77:02:41:ee:7f:4b:3a:b5:03:
         9b:79:aa:ed:4f:3c:f6:84:33:26:01:b7:5d:56:1d:46:84:30:
         b5:cc:81:4c:c4:a9:10:ac:32:a7:cf:83:d3:92:e4:1d:1e:0a:
         38:f8:d3:a8:d7:f2:42:17:9b:71:3a:ba:94:5a:91:b7:59:c1:
         48:7d:f0:16:e4:87:19:30:61:6f:ee:51:0a:e0:49:e9:f5:07:
         e1:c2:89:e7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfClkS1+AW0JPXdI02YxZcFz8US0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGRDg5NTQ5RDVCRUYwQzJDMDVCQjRGNUUyNTNEMUMw
MkVFRkRGOTAeFw0yMzA1MTYxMzUzNDJaFw0yNDA1MTQxMzU4NDJaMDMxMTAvBgNV
BAMTKEFDNERGNUZCMzM2NjhGNENCMDlGMjgwQzk2QjFFOTIzMDRFRTZDQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmytYSYPOUVFArsbPnxbZbrx8
HrjxLbnS4tsknM8RI1wbRGlanGhUXhJSSdWij3fMM7shUZ5fLOC9brUbF59KScHn
kBqBKkK7tkKeam6O3f4aclxb7x1LaWPUkW9oJmJnKIeCFO4p4ZlwsWAI5ir93jU0
TqRVV9xGYcEh5rUARE4q5EIFF231leTRTyKEJtynB7+FbaE96dNbbpfqLsH04sIV
bZ0ubkJtAisOpYw1iLopzezs0LMO6oyY9IFAcWEQZDlsNGbJMtmtDWFFRoG5cQQb
t7RWbBtgaWYGVLtDUZTLTBBmrse1SScK3Vz7z0UrrKUNJ/gRiChlKD98o5kXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrE31+zNmj0ywnygMlrHpIwTubKIwHwYDVR0j
BBgwFoAUxv2JVJ1b7wwsBbtPXiU9HALu/fkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVo
UjUvMC9DNkZEODk1NDlENUJFRjBDMkMwNUJCNEY1RTI1M0QxQzAyRUVGREY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2RkQ4OTU0OUQ1QkVGMEMy
QzA1QkI0RjVFMjUzRDFDMDJFRUZERjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLb2IzWlhvbTJVVjJRQ1RKRkNVYXZMUE5HSnFIbmhCZW9Fb0E5NWo1aFI1LzAv
MzEzODM5MmUzNTMwMmUzMjMyMzQyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM4
MzMzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFvTLgMA0GCSqGSIb3DQEBCwUAA4IBAQAUkXaXMTuD
1J4Muvw1nc7rznksA0xEWkd83J8maMRrcLshEIaPO4EGbdmEW/V2hWbuL19EMiK9
1LCmJR+isQ11h6xKqCGRYdZMpIgL12b4sN7FCjAMwhLvQYQ5ZRGfSkDIn/m/Mc93
+t8pF9d9ZGD9zkQHZKXdMduUAtJvvp5IH5d5uXckbN1bbUCAujNUuEn+d41x9fNH
UCntywgu7lJxzQ9b7MC56GwAZ9d3AkHuf0s6tQObeartTzz2hDMmAbddVh1GhDC1
zIFMxKkQrDKnz4PTkuQdHgo4+NOo1/JCF5txOrqUWpG3WcFIffAW5IcZMGFv7lEK
4Enp9Qfhwonn
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org