Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3230302e302f32312d3234203d3e203238363437.roa
File:                     3138392e3131332e3230302e302f32312d3234203d3e203238363437.roa (raw, json)
Hash identifier:          T+HEVybZvJyK7ofxXQiKbzl4ucQ8AbORb2rd6aUss6Y=
Subject key identifier:   B8:40:DB:27:BE:F6:E0:76:65:C1:58:0E:21:FC:DB:95:12:7A:B2:35
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       46B80F1AAFAC48AB1C226C41976B455265B6746F
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3230302e302f32312d3234203d3e203238363437.roa
Signing time:             Sat 20 Jan 2024 18:27:07 +0000
ROA not before:           Sat 20 Jan 2024 18:22:07 +0000
ROA not after:            Sat 18 Jan 2025 18:27:07 +0000
asID:                     28647
IP address blocks:        189.113.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:0f:1a:af:ac:48:ab:1c:22:6c:41:97:6b:45:52:65:b6:74:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:22:07 2024 GMT
            Not After : Jan 18 18:27:07 2025 GMT
        Subject: CN=B840DB27BEF6E07665C1580E21FCDB95127AB235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:10:94:0f:30:ef:93:a6:eb:97:06:8d:92:
                    0b:e9:74:57:2c:77:a7:63:5c:97:3f:8d:3c:fa:eb:
                    08:9f:a2:79:57:62:7e:7d:98:d2:61:d6:4f:23:84:
                    77:7e:27:77:19:50:5e:af:f8:8d:db:e4:76:bc:57:
                    cb:e8:db:30:6d:f5:1b:bc:ff:c8:66:3f:16:80:a6:
                    55:14:2d:09:af:6e:0f:06:41:ab:ba:9d:0c:a4:ba:
                    82:cf:d3:ed:0c:2d:2f:3a:d4:38:c5:88:72:b7:4f:
                    bc:e3:c6:6d:9f:f0:d1:a9:ca:ec:5a:5a:47:29:2b:
                    b2:7b:fd:17:8b:4f:de:3a:1b:d1:61:6b:30:a3:10:
                    ce:ba:5d:a3:eb:87:fe:39:3e:37:9a:e0:b1:7d:58:
                    93:72:82:e5:36:be:26:b0:5c:db:65:ba:df:36:8e:
                    bf:41:c4:bf:ce:c4:ae:5d:c2:35:f2:38:2d:6f:bb:
                    e5:f0:79:f1:1a:01:27:23:47:97:f4:3d:5c:58:45:
                    06:17:63:d0:36:66:20:65:6d:93:cc:dc:9c:4d:bf:
                    3d:2e:80:9a:39:f0:c9:d7:12:7c:5d:a0:7a:a4:9c:
                    51:cc:d6:c3:90:3c:a5:95:3f:26:fa:d7:d7:35:14:
                    8d:e5:e0:bf:87:34:cf:fc:f6:6b:36:7f:92:30:bf:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:40:DB:27:BE:F6:E0:76:65:C1:58:0E:21:FC:DB:95:12:7A:B2:35
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3230302e302f32312d3234203d3e203238363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:ee:32:88:f4:d2:14:87:1f:01:0d:85:f0:9a:af:7b:3d:60:
         97:c1:bb:55:1f:bc:a0:28:a7:95:b8:ca:4f:4e:4a:3d:89:54:
         8e:6c:ad:ad:f7:77:ba:86:52:1f:b0:e5:45:51:9e:e1:c0:29:
         07:f5:fc:9f:69:1f:a3:35:fb:86:bc:41:f4:d5:85:81:3e:eb:
         3d:dc:0d:f3:be:f1:cc:7a:85:8d:cf:04:03:a8:39:97:07:3a:
         bd:ed:c2:5d:06:1b:2d:0d:fa:a3:77:59:49:9c:43:68:3b:e7:
         fb:fb:05:78:88:0d:80:b6:99:16:28:6c:c9:ad:7e:19:55:03:
         cb:06:b4:ca:90:70:66:ea:ff:94:e0:2d:29:1f:ed:46:17:75:
         c8:20:35:ad:61:9a:a2:95:7f:cf:83:d0:25:ba:c1:aa:3b:2b:
         0f:e5:88:20:42:67:52:52:8a:4d:b2:b5:ef:08:ae:55:4e:6b:
         81:bc:38:43:95:e0:94:c8:9a:43:92:97:55:85:4e:e4:3f:ca:
         c6:d0:67:5a:b2:f5:45:33:d6:cb:ea:88:95:e9:ed:96:a1:b6:
         0c:b7:ef:44:8f:29:43:8e:57:b0:29:35:07:5f:fb:a2:1d:49:
         3d:ec:c0:c1:76:cc:91:d3:0d:3a:e2:65:ce:e6:71:27:82:d5:
         f9:b6:f2:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURrgPGq+sSKscImxBl2tFUmW2dG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2Qjc2NzdBQ0MzOUM3NkVGRDQ3QjYzNjE2QzVFQ0Y0
MDYwRTUyMTAeFw0yNDAxMjAxODIyMDdaFw0yNTAxMTgxODI3MDdaMDMxMTAvBgNV
BAMTKEI4NDBEQjI3QkVGNkUwNzY2NUMxNTgwRTIxRkNEQjk1MTI3QUIyMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfBCUDzDvk6brlwaNkgvpdFcs
d6djXJc/jTz66wifonlXYn59mNJh1k8jhHd+J3cZUF6v+I3b5Ha8V8vo2zBt9Ru8
/8hmPxaAplUULQmvbg8GQau6nQykuoLP0+0MLS861DjFiHK3T7zjxm2f8NGpyuxa
WkcpK7J7/ReLT946G9FhazCjEM66XaPrh/45Pjea4LF9WJNyguU2viawXNtlut82
jr9BxL/OxK5dwjXyOC1vu+XwefEaAScjR5f0PVxYRQYXY9A2ZiBlbZPM3JxNvz0u
gJo58MnXEnxdoHqknFHM1sOQPKWVPyb619c1FI3l4L+HNM/89ms2f5Iwv4CxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuEDbJ7724HZlwVgOIfzblRJ6sjUwHwYDVR0j
BBgwFoAUdWt2d6zDnHbv1HtjYWxez0Bg5SEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC83NTZCNzY3N0FDQzM5Qzc2RUZENDdCNjM2MTZDNUVDRjQwNjBFNTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1NkI3Njc3QUNDMzlDNzZF
RkQ0N0I2MzYxNkM1RUNGNDA2MEU1MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM5MmUzMTMxMzMyZTMyMzAzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzgzNjM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO9ccgwDQYJKoZIhvcNAQELBQADggEBAE/uMoj0
0hSHHwENhfCar3s9YJfBu1UfvKAop5W4yk9OSj2JVI5sra33d7qGUh+w5UVRnuHA
KQf1/J9pH6M1+4a8QfTVhYE+6z3cDfO+8cx6hY3PBAOoOZcHOr3twl0GGy0N+qN3
WUmcQ2g75/v7BXiIDYC2mRYobMmtfhlVA8sGtMqQcGbq/5TgLSkf7UYXdcggNa1h
mqKVf8+D0CW6wao7Kw/liCBCZ1JSik2yte8IrlVOa4G8OEOV4JTImkOSl1WFTuQ/
ysbQZ1qy9UUz1svqiJXp7Zahtgy370SPKUOOV7ApNQdf+6IdST3swMF2zJHTDTri
Zc7mcSeC1fm28kg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org