Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34302e302f32312d3234203d3e203238333236.roa
File:                     3138392e35302e34302e302f32312d3234203d3e203238333236.roa (raw, json)
Hash identifier:          KaFZIQmrWIWfuXT3PntVVy6DJWRZhWiAJSlTmDo2Qso=
Subject key identifier:   DE:62:BD:E4:E5:DB:FD:92:CC:0C:6D:A3:13:44:CA:39:8B:44:C2:F9
Certificate issuer:       /CN=D8DC918B29E361938B8B9F2093F104E2C3CBADB9
Certificate serial:       5AD51D287943B2B70E3D370EDD12DFE0A694D723
Authority key identifier: D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34302e302f32312d3234203d3e203238333236.roa
Signing time:             Fri 17 Nov 2023 19:15:04 +0000
ROA not before:           Fri 17 Nov 2023 19:10:04 +0000
ROA not after:            Fri 15 Nov 2024 19:15:04 +0000
asID:                     28326
IP address blocks:        189.50.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d5:1d:28:79:43:b2:b7:0e:3d:37:0e:dd:12:df:e0:a6:94:d7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8DC918B29E361938B8B9F2093F104E2C3CBADB9
        Validity
            Not Before: Nov 17 19:10:04 2023 GMT
            Not After : Nov 15 19:15:04 2024 GMT
        Subject: CN=DE62BDE4E5DBFD92CC0C6DA31344CA398B44C2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:f3:5f:f5:cd:47:0b:ba:5d:91:fd:3d:9e:
                    81:94:e9:b1:44:13:ce:3e:d5:52:4a:4d:ed:fb:58:
                    ce:95:dd:fd:28:86:f1:f3:b6:61:30:92:89:15:b4:
                    08:d6:df:3a:a6:72:9b:b7:56:ae:31:69:b4:11:c4:
                    36:94:d1:e9:14:ad:43:9f:ad:12:0b:7c:a8:d7:6c:
                    7a:9f:6b:86:02:ae:d2:a3:e7:fd:cd:62:71:9c:ec:
                    6b:3a:24:71:19:72:fc:cd:34:ad:70:d5:9d:99:81:
                    7e:50:3b:f4:d1:f6:c4:c0:29:60:51:89:f5:93:de:
                    fa:45:7f:2e:da:f5:9f:83:7a:90:ce:2d:bc:ed:c5:
                    fb:52:f3:fc:e7:4a:fb:15:19:5f:3f:29:73:e4:0a:
                    75:f1:f1:4a:50:b4:6b:ae:b5:6d:e2:e8:09:bc:cb:
                    e2:96:1f:07:3c:ac:de:4a:d2:97:df:ea:95:1b:d2:
                    93:b6:d3:43:7c:32:97:62:92:fb:e9:65:cc:69:8b:
                    21:23:4d:c3:76:31:71:9e:29:2a:a2:f5:87:5b:1f:
                    03:af:e9:dd:44:be:1c:e6:17:62:06:85:5c:4b:af:
                    15:4e:22:a2:a5:de:1c:ce:86:da:3d:33:ff:4f:9d:
                    38:38:f3:e6:5a:d0:22:99:76:39:0c:89:9a:ef:76:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:62:BD:E4:E5:DB:FD:92:CC:0C:6D:A3:13:44:CA:39:8B:44:C2:F9
            X509v3 Authority Key Identifier:
                keyid:D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34302e302f32312d3234203d3e203238333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:d7:c2:b8:63:2d:00:13:70:40:9a:18:40:a7:74:6b:03:8b:
         f0:48:83:a4:17:2c:23:91:b9:9d:52:7e:8d:3f:15:08:04:e5:
         82:2e:82:4b:1e:3e:45:e8:96:56:a0:63:a4:36:5d:b7:2c:0d:
         e5:22:43:c9:d3:a4:d5:70:a8:87:4b:b0:d7:24:d5:b5:f4:62:
         39:2b:a0:e1:db:79:0f:1d:83:df:92:db:f2:93:93:64:27:c3:
         9c:f4:83:c2:91:fc:77:97:8c:f7:b4:73:1c:21:5e:e2:1d:d6:
         41:22:39:2e:4f:1c:68:59:ec:ac:91:09:55:73:54:b2:c0:a4:
         84:39:06:72:01:e6:e5:b1:f2:79:a6:11:de:b6:e4:20:d1:83:
         da:6f:40:55:62:c3:40:e8:b3:26:ca:3e:95:a5:11:6f:f8:03:
         39:8d:89:69:36:9b:77:0f:70:6d:c8:69:f4:e6:f0:ed:be:d4:
         74:dc:cd:68:c6:e8:2f:a7:6d:01:e3:59:ba:c1:fd:54:88:ba:
         84:5f:c6:42:8e:ac:2e:c0:ee:14:9e:79:b2:9e:bb:0b:4f:2a:
         a1:32:ef:48:4f:f3:89:84:b8:60:0e:6a:23:ea:ac:9c:33:9e:
         17:f5:6a:e6:a2:11:a6:e8:05:84:78:cd:02:2e:29:aa:f0:59:
         dd:da:47:8e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWtUdKHlDsrcOPTcO3RLf4KaU1yMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhEQzkxOEIyOUUzNjE5MzhCOEI5RjIwOTNGMTA0RTJD
M0NCQURCOTAeFw0yMzExMTcxOTEwMDRaFw0yNDExMTUxOTE1MDRaMDMxMTAvBgNV
BAMTKERFNjJCREU0RTVEQkZEOTJDQzBDNkRBMzEzNDRDQTM5OEI0NEMyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQPNf9c1HC7pdkf09noGU6bFE
E84+1VJKTe37WM6V3f0ohvHztmEwkokVtAjW3zqmcpu3Vq4xabQRxDaU0ekUrUOf
rRILfKjXbHqfa4YCrtKj5/3NYnGc7Gs6JHEZcvzNNK1w1Z2ZgX5QO/TR9sTAKWBR
ifWT3vpFfy7a9Z+DepDOLbztxftS8/znSvsVGV8/KXPkCnXx8UpQtGuutW3i6Am8
y+KWHwc8rN5K0pff6pUb0pO200N8MpdikvvpZcxpiyEjTcN2MXGeKSqi9YdbHwOv
6d1EvhzmF2IGhVxLrxVOIqKl3hzOhto9M/9PnTg48+Za0CKZdjkMiZrvdrKnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU3mK95OXb/ZLMDG2jE0TKOYtEwvkwHwYDVR0j
BBgwFoAU2NyRiynjYZOLi58gk/EE4sPLrbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanli
bWEvMC9EOERDOTE4QjI5RTM2MTkzOEI4QjlGMjA5M0YxMDRFMkMzQ0JBREI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4REM5MThCMjlFMzYxOTM4
QjhCOUYyMDkzRjEwNEUyQzNDQkFEQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FjUnlZa0FlN0I4MUhtaDhScERRUHJtQ242R3pNTVRkSkJ5VHFQTWp5Ym1hLzAv
MzEzODM5MmUzNTMwMmUzNDMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMz
MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA70yKDANBgkqhkiG9w0BAQsFAAOCAQEAOdfCuGMtABNw
QJoYQKd0awOL8EiDpBcsI5G5nVJ+jT8VCATlgi6CSx4+ReiWVqBjpDZdtywN5SJD
ydOk1XCoh0uw1yTVtfRiOSug4dt5Dx2D35Lb8pOTZCfDnPSDwpH8d5eM97RzHCFe
4h3WQSI5Lk8caFnsrJEJVXNUssCkhDkGcgHm5bHyeaYR3rbkINGD2m9AVWLDQOiz
Jso+laURb/gDOY2JaTabdw9wbchp9Obw7b7UdNzNaMboL6dtAeNZusH9VIi6hF/G
Qo6sLsDuFJ55sp67C08qoTLvSE/ziYS4YA5qI+qsnDOeF/Vq5qIRpugFhHjNAi4p
qvBZ3dpHjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org