Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
File:                     3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          8KVry8vcdPULypAMMCsQap8YrOcbY/yYIK7o/zAUjQA=
Subject key identifier:   46:72:68:16:07:5B:EE:DB:59:37:04:35:40:2D:63:8D:D4:4C:F0:B4
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       67599274760BB72EFD9CA1FC2CCFABC112226F0E
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
Signing time:             Sat 20 Jan 2024 22:15:14 +0000
ROA not before:           Sat 20 Jan 2024 22:10:14 +0000
ROA not after:            Sat 18 Jan 2025 22:15:14 +0000
asID:                     28349
IP address blocks:        189.126.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:59:92:74:76:0b:b7:2e:fd:9c:a1:fc:2c:cf:ab:c1:12:22:6f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:10:14 2024 GMT
            Not After : Jan 18 22:15:14 2025 GMT
        Subject: CN=46726816075BEEDB59370435402D638DD44CF0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:f1:b6:92:1b:21:69:0e:d8:dd:a0:6b:31:
                    38:63:88:e1:c9:76:9a:f7:cf:8d:82:0d:71:2b:26:
                    a0:d9:7c:58:4e:33:8d:dd:c4:f7:cc:47:f5:e2:6b:
                    11:a7:8b:61:2f:b7:d7:11:14:99:76:ae:95:2c:77:
                    64:6c:5e:b4:51:0e:87:82:c0:32:37:7c:28:22:d0:
                    dd:dc:ba:b4:fd:cf:0b:38:9f:8a:3f:53:17:e7:65:
                    09:aa:e4:b9:28:51:4e:02:22:69:00:36:a8:0d:2f:
                    88:85:a1:19:c9:a1:79:0f:27:4a:df:fd:06:2a:1f:
                    0a:18:4d:ac:b8:7d:45:f6:27:34:c7:61:ac:c9:51:
                    b2:ee:48:8d:8c:30:21:9c:b6:17:2f:90:2e:aa:0f:
                    a7:99:28:fb:4e:a3:10:63:f4:5d:91:85:25:9b:47:
                    f8:c5:31:02:09:f7:60:13:0e:bd:e1:a3:7b:e3:a6:
                    c4:5d:7b:78:7f:c0:74:4c:a4:d9:eb:77:11:a2:dc:
                    78:f3:20:81:1a:90:7f:dd:27:c5:72:03:1a:00:55:
                    28:e6:38:fb:c1:6b:6b:79:69:9d:17:30:f6:8d:6d:
                    ab:64:b0:cb:5a:d5:78:2b:4d:03:5f:4f:b6:a2:57:
                    dc:bb:9f:10:a5:e9:5b:1a:7d:11:f9:9b:b4:b4:a5:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:72:68:16:07:5B:EE:DB:59:37:04:35:40:2D:63:8D:D4:4C:F0:B4
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:43:6a:e1:5b:cd:c1:92:c5:93:12:7f:04:62:fa:e9:56:d1:
         c8:93:c8:3a:06:f3:72:2b:05:b5:04:c7:58:a9:cc:19:f7:cd:
         73:44:e0:03:fd:cc:12:5d:98:e2:11:b3:e4:94:54:90:ef:d7:
         41:e2:b7:93:19:9a:3c:ea:41:71:a2:5b:fd:02:5a:c9:55:d5:
         22:bc:f6:a1:1c:3c:f4:2a:f9:e7:1f:74:1f:13:4c:d1:b8:c7:
         7e:7c:9e:34:2c:aa:2a:68:f8:80:b9:a2:59:16:4b:ac:c0:c0:
         9d:00:7b:38:0a:34:9c:72:f0:32:e0:42:4e:20:6f:6a:46:50:
         0b:ca:23:f6:41:ce:40:71:85:61:53:f3:fc:c8:f0:76:a2:6a:
         96:c7:40:d9:54:bf:a5:2a:78:03:ba:4c:d4:71:5d:12:d9:bf:
         88:92:1f:d4:28:c2:8c:1a:69:cd:84:d8:3f:c4:56:9f:97:3a:
         f6:a3:e1:e9:8d:b2:bf:79:c5:19:74:73:f6:87:a5:1c:bb:e1:
         33:ae:00:2b:49:b2:2a:33:41:56:4d:57:c6:66:d7:ac:40:14:
         23:8f:ee:6f:2a:57:4c:8c:56:56:0f:51:96:da:ac:16:58:4c:
         fa:fc:60:6f:a2:5d:48:78:33:cf:e1:7c:fd:5a:8b:6c:25:21:
         85:d6:91:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ1mSdHYLty79nKH8LM+rwRIibw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2Qjc2NzdBQ0MzOUM3NkVGRDQ3QjYzNjE2QzVFQ0Y0
MDYwRTUyMTAeFw0yNDAxMjAyMjEwMTRaFw0yNTAxMTgyMjE1MTRaMDMxMTAvBgNV
BAMTKDQ2NzI2ODE2MDc1QkVFREI1OTM3MDQzNTQwMkQ2MzhERDQ0Q0YwQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVM/G2khshaQ7Y3aBrMThjiOHJ
dpr3z42CDXErJqDZfFhOM43dxPfMR/XiaxGni2Evt9cRFJl2rpUsd2RsXrRRDoeC
wDI3fCgi0N3curT9zws4n4o/UxfnZQmq5LkoUU4CImkANqgNL4iFoRnJoXkPJ0rf
/QYqHwoYTay4fUX2JzTHYazJUbLuSI2MMCGcthcvkC6qD6eZKPtOoxBj9F2RhSWb
R/jFMQIJ92ATDr3ho3vjpsRde3h/wHRMpNnrdxGi3HjzIIEakH/dJ8VyAxoAVSjm
OPvBa2t5aZ0XMPaNbatksMta1XgrTQNfT7aiV9y7nxCl6VsafRH5m7S0pQ4tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURnJoFgdb7ttZNwQ1QC1jjdRM8LQwHwYDVR0j
BBgwFoAUdWt2d6zDnHbv1HtjYWxez0Bg5SEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC83NTZCNzY3N0FDQzM5Qzc2RUZENDdCNjM2MTZDNUVDRjQwNjBFNTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1NkI3Njc3QUNDMzlDNzZF
RkQ0N0I2MzYxNkM1RUNGNDA2MEU1MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM5MmUzMTMyMzYyZTMxMzYzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzgzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO9fqgwDQYJKoZIhvcNAQELBQADggEBAKtDauFb
zcGSxZMSfwRi+ulW0ciTyDoG83IrBbUEx1ipzBn3zXNE4AP9zBJdmOIRs+SUVJDv
10Hit5MZmjzqQXGiW/0CWslV1SK89qEcPPQq+ecfdB8TTNG4x358njQsqipo+IC5
olkWS6zAwJ0AezgKNJxy8DLgQk4gb2pGUAvKI/ZBzkBxhWFT8/zI8HaiapbHQNlU
v6UqeAO6TNRxXRLZv4iSH9Qowowaac2E2D/EVp+XOvaj4emNsr95xRl0c/aHpRy7
4TOuACtJsiozQVZNV8Zm16xAFCOP7m8qV0yMVlYPUZbarBZYTPr8YG+iXUh4M8/h
fP1ai2wlIYXWkeg=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org