Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3135362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          jPjyJaCA1N/aacnbTIFg2ho1hHDNZ9jEDkd6SrvzS5Y=
Subject key identifier:   09:DB:3A:37:FF:AA:DD:EA:C9:5A:9F:5B:A9:D6:16:9D:40:9A:48:B8
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       586779CC3A5FD0F1897AC87DF53DA6F4C817DD4C
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
Signing time:             Sat 20 Jan 2024 22:16:58 +0000
ROA not before:           Sat 20 Jan 2024 22:11:58 +0000
ROA not after:            Sat 18 Jan 2025 22:16:58 +0000
asID:                     28349
IP address blocks:        189.51.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:67:79:cc:3a:5f:d0:f1:89:7a:c8:7d:f5:3d:a6:f4:c8:17:dd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:11:58 2024 GMT
            Not After : Jan 18 22:16:58 2025 GMT
        Subject: CN=09DB3A37FFAADDEAC95A9F5BA9D6169D409A48B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:24:05:6b:ab:47:70:cb:05:f8:29:d4:70:
                    a7:ef:36:50:74:63:43:c6:bf:cb:2d:7f:a3:6f:ca:
                    3c:00:79:09:e9:91:88:b5:ff:d2:9f:d5:99:4f:93:
                    06:da:c7:3a:19:75:c2:3c:66:fd:bb:92:d2:97:09:
                    2f:37:51:66:1e:a6:65:48:4f:11:0f:7d:5b:26:57:
                    4a:17:06:cc:7a:a6:c2:8d:72:15:a9:04:bc:fe:72:
                    03:35:19:f5:e6:55:5d:d0:77:2f:db:b2:d1:dd:8b:
                    e0:b6:c6:99:37:2e:59:35:11:06:e9:8c:66:bf:02:
                    b8:89:1a:d4:1b:a8:3d:c6:53:90:c1:b1:51:49:25:
                    75:f4:a4:36:e6:24:b9:6a:18:c6:5f:3c:2e:62:8f:
                    82:51:d8:bb:fa:d4:68:1f:ea:7d:fa:8b:16:c7:bb:
                    cf:47:59:52:ab:a6:28:77:cf:56:ba:6d:d0:42:3e:
                    30:6e:07:d0:03:62:a9:f4:b3:4d:db:fe:af:31:8a:
                    0b:76:f7:9d:a2:d4:fc:c2:6e:de:c3:5c:82:b5:70:
                    ad:23:33:c6:0e:b3:f3:a6:60:39:d1:7c:af:27:8b:
                    7e:38:1e:4e:16:a8:07:f0:ff:33:5a:e7:c7:f3:99:
                    fc:2c:72:d6:19:87:b3:d0:48:2a:08:31:a6:cf:0d:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DB:3A:37:FF:AA:DD:EA:C9:5A:9F:5B:A9:D6:16:9D:40:9A:48:B8
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:5f:ab:e4:dd:4c:b4:53:07:24:be:c8:25:e0:2d:aa:ec:c7:
         1d:8e:b1:3d:f3:98:a8:6f:3f:1d:ab:bf:1a:a1:0a:cc:54:5a:
         3f:85:e6:51:40:c9:15:37:df:32:8d:2c:48:5a:2f:52:5c:8b:
         ed:cd:d5:93:21:f0:91:1c:33:85:b5:6c:f1:9b:a7:52:fa:94:
         6b:03:08:a7:43:d9:b5:48:52:28:1f:9e:81:ac:91:e9:61:2e:
         3e:b9:45:dd:3f:bf:84:5e:0d:b5:e1:f8:fa:2e:4b:5b:00:b6:
         78:1a:38:a7:4f:b0:5b:61:ac:67:78:8e:18:20:1e:3d:d2:ef:
         60:62:e2:7c:53:17:8e:da:3e:45:6b:97:3d:42:d1:17:21:79:
         d6:58:29:e3:71:eb:d5:da:81:e7:3d:96:b5:65:18:29:fb:a2:
         b8:1b:ca:d6:25:47:e5:07:92:a3:51:c0:27:08:08:92:62:07:
         79:9c:02:50:da:06:2d:b8:bd:5a:0f:ea:c5:70:66:1b:6b:b5:
         d8:7d:1c:17:07:bd:40:cb:9c:ab:87:f0:9f:93:17:71:a2:4b:
         de:bf:5a:3a:9e:47:98:98:1f:06:1d:77:9d:b7:1f:f4:59:c0:
         96:66:ae:7c:5f:dd:d3:4e:80:a3:c5:38:d3:56:ee:ca:75:7f:
         4e:f1:d7:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWGd5zDpf0PGJesh99T2m9MgX3UwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2Qjc2NzdBQ0MzOUM3NkVGRDQ3QjYzNjE2QzVFQ0Y0
MDYwRTUyMTAeFw0yNDAxMjAyMjExNThaFw0yNTAxMTgyMjE2NThaMDMxMTAvBgNV
BAMTKDA5REIzQTM3RkZBQURERUFDOTVBOUY1QkE5RDYxNjlENDA5QTQ4QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/SQFa6tHcMsF+CnUcKfvNlB0
Y0PGv8stf6NvyjwAeQnpkYi1/9Kf1ZlPkwbaxzoZdcI8Zv27ktKXCS83UWYepmVI
TxEPfVsmV0oXBsx6psKNchWpBLz+cgM1GfXmVV3Qdy/bstHdi+C2xpk3Llk1EQbp
jGa/AriJGtQbqD3GU5DBsVFJJXX0pDbmJLlqGMZfPC5ij4JR2Lv61Ggf6n36ixbH
u89HWVKrpih3z1a6bdBCPjBuB9ADYqn0s03b/q8xigt2952i1PzCbt7DXIK1cK0j
M8YOs/OmYDnRfK8ni344Hk4WqAfw/zNa58fzmfwsctYZh7PQSCoIMabPDSkTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCds6N/+q3erJWp9bqdYWnUCaSLgwHwYDVR0j
BBgwFoAUdWt2d6zDnHbv1HtjYWxez0Bg5SEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC83NTZCNzY3N0FDQzM5Qzc2RUZENDdCNjM2MTZDNUVDRjQwNjBFNTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1NkI3Njc3QUNDMzlDNzZF
RkQ0N0I2MzYxNkM1RUNGNDA2MEU1MjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM5MmUzNTMxMmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvTOcMA0GCSqGSIb3DQEBCwUAA4IBAQBEX6vk3Uy0
Uwckvsgl4C2q7McdjrE985iobz8dq78aoQrMVFo/heZRQMkVN98yjSxIWi9SXIvt
zdWTIfCRHDOFtWzxm6dS+pRrAwinQ9m1SFIoH56BrJHpYS4+uUXdP7+EXg214fj6
LktbALZ4GjinT7BbYaxneI4YIB490u9gYuJ8UxeO2j5Fa5c9QtEXIXnWWCnjcevV
2oHnPZa1ZRgp+6K4G8rWJUflB5KjUcAnCAiSYgd5nAJQ2gYtuL1aD+rFcGYba7XY
fRwXB71Ay5yrh/Cfkxdxokvev1o6nkeYmB8GHXedtx/0WcCWZq58X93TToCjxTjT
Vu7KdX9O8dfu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org