Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e342e302f32332d3332203d3e20323730333434.roa
File:                     3138392e3132362e342e302f32332d3332203d3e20323730333434.roa (raw, json)
Hash identifier:          mJVDwFHhiAT8kx/PVLGTx5KPJN7/3X+9rfg/O+z8MIk=
Subject key identifier:   F4:0E:F4:A9:FD:3E:59:61:2E:1E:03:C1:95:91:9F:5C:70:CA:2D:CE
Certificate issuer:       /CN=C660D528560CE1F54EA728C78522025BBF2AFB6D
Certificate serial:       72A9BE6B49F3335301DDF3C0B72DD48FC85A0B05
Authority key identifier: C6:60:D5:28:56:0C:E1:F5:4E:A7:28:C7:85:22:02:5B:BF:2A:FB:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C660D528560CE1F54EA728C78522025BBF2AFB6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e342e302f32332d3332203d3e20323730333434.roa
Signing time:             Fri 11 Nov 2022 16:36:10 +0000
ROA not before:           Fri 11 Nov 2022 16:31:10 +0000
ROA not after:            Fri 10 Nov 2023 16:36:10 +0000
asID:                     270344
IP address blocks:        189.126.4.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a9:be:6b:49:f3:33:53:01:dd:f3:c0:b7:2d:d4:8f:c8:5a:0b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C660D528560CE1F54EA728C78522025BBF2AFB6D
        Validity
            Not Before: Nov 11 16:31:10 2022 GMT
            Not After : Nov 10 16:36:10 2023 GMT
        Subject: CN=F40EF4A9FD3E59612E1E03C195919F5C70CA2DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fe:06:4c:42:34:03:92:fe:aa:f7:78:e6:08:
                    86:df:30:6e:1d:41:84:58:66:82:ff:8f:f0:7e:53:
                    97:75:56:5b:63:01:3c:c4:17:9c:03:3a:56:0b:47:
                    05:80:ec:f6:9b:b1:55:4a:7d:8e:92:1f:f8:2e:3b:
                    8e:08:96:97:99:9e:60:8b:57:99:a2:0f:3a:4e:e1:
                    25:77:ce:6a:52:97:7f:e7:d7:0e:97:a3:7a:e1:81:
                    01:3a:4f:37:41:b0:a3:64:84:6a:cc:ec:89:4b:47:
                    06:19:e0:b4:c5:86:87:34:91:fa:b5:27:e7:73:2e:
                    0e:0f:63:35:b5:76:d1:a1:f1:70:6c:43:6c:0f:cc:
                    5f:13:21:c9:f6:53:38:02:6c:51:d0:9d:f0:78:62:
                    3f:96:a6:fb:82:b2:54:b2:1f:12:5d:9e:2d:0d:10:
                    6a:80:af:ea:41:55:38:f7:ea:73:a9:ca:59:48:2d:
                    7b:36:18:fa:c1:08:1b:f3:ed:42:5b:1a:4e:0d:60:
                    77:f9:aa:40:0b:5f:50:a8:5a:09:89:c3:c2:72:fa:
                    bf:bc:b6:82:f4:a6:93:a2:07:ef:15:dd:0d:ec:7b:
                    94:84:98:ae:71:22:ef:aa:29:4d:5e:71:84:4b:91:
                    7a:9c:6c:dd:e3:56:1b:2d:f9:b6:9e:33:fe:de:6a:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:F4:A9:FD:3E:59:61:2E:1E:03:C1:95:91:9F:5C:70:CA:2D:CE
            X509v3 Authority Key Identifier:
                keyid:C6:60:D5:28:56:0C:E1:F5:4E:A7:28:C7:85:22:02:5B:BF:2A:FB:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/C660D528560CE1F54EA728C78522025BBF2AFB6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C660D528560CE1F54EA728C78522025BBF2AFB6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e342e302f32332d3332203d3e20323730333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:b3:e1:d7:9b:bb:57:5b:6d:28:49:96:3f:25:19:80:24:05:
         eb:e6:95:1d:e3:cd:aa:cd:7e:8d:de:1f:c8:db:ac:20:72:a7:
         fa:d9:ed:7c:4b:ba:c9:52:7a:e5:bc:52:d8:3c:19:1f:ba:d5:
         08:27:69:48:8a:3e:f4:d3:fa:b3:9a:2f:3b:a4:bf:fd:72:23:
         bb:6e:6a:ce:9c:94:57:08:1d:d4:36:54:b9:a5:19:14:98:5c:
         38:f7:45:c0:9f:fb:47:ab:f2:29:a2:34:18:a9:0b:32:3d:1f:
         fb:ba:e9:16:53:b5:1b:15:4c:1c:20:31:03:df:0b:66:e5:c6:
         aa:1f:8d:14:19:2a:69:65:cf:2d:3a:fe:ee:b5:d0:53:13:3b:
         f1:aa:29:ed:78:32:15:a9:f2:89:ca:e3:7e:69:df:ff:58:cb:
         c4:b4:8b:b5:5c:2b:76:00:29:11:eb:88:d3:32:62:44:6f:86:
         23:bf:96:68:71:f8:73:10:b7:5b:f2:15:96:23:03:65:d5:48:
         b4:d5:f2:4e:0d:2f:b7:8d:0c:34:38:bd:4a:88:5f:8a:63:c5:
         64:cb:03:6b:15:df:2c:2a:cc:e9:4c:27:a5:e2:28:32:da:ca:
         a4:f1:4c:cb:2d:38:28:7e:cd:99:53:94:2b:4f:bb:8d:75:39:
         ef:fc:90:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcqm+a0nzM1MB3fPAty3Uj8haCwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY2MEQ1Mjg1NjBDRTFGNTRFQTcyOEM3ODUyMjAyNUJC
RjJBRkI2RDAeFw0yMjExMTExNjMxMTBaFw0yMzExMTAxNjM2MTBaMDMxMTAvBgNV
BAMTKEY0MEVGNEE5RkQzRTU5NjEyRTFFMDNDMTk1OTE5RjVDNzBDQTJEQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/gZMQjQDkv6q93jmCIbfMG4d
QYRYZoL/j/B+U5d1VltjATzEF5wDOlYLRwWA7PabsVVKfY6SH/guO44IlpeZnmCL
V5miDzpO4SV3zmpSl3/n1w6Xo3rhgQE6TzdBsKNkhGrM7IlLRwYZ4LTFhoc0kfq1
J+dzLg4PYzW1dtGh8XBsQ2wPzF8TIcn2UzgCbFHQnfB4Yj+WpvuCslSyHxJdni0N
EGqAr+pBVTj36nOpyllILXs2GPrBCBvz7UJbGk4NYHf5qkALX1CoWgmJw8Jy+r+8
toL0ppOiB+8V3Q3se5SEmK5xIu+qKU1ecYRLkXqcbN3jVhst+baeM/7eahtjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9A70qf0+WWEuHgPBlZGfXHDKLc4wHwYDVR0j
BBgwFoAUxmDVKFYM4fVOpyjHhSICW78q+20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXdLVXhhdE1RbVdZQmJOQzNlTXc0M2lZSzNqTXY3V3AzYmVNZXBGRlJa
UUovMC9DNjYwRDUyODU2MENFMUY1NEVBNzI4Qzc4NTIyMDI1QkJGMkFGQjZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2NjBENTI4NTYwQ0UxRjU0
RUE3MjhDNzg1MjIwMjVCQkYyQUZCNkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F3S1V4YXRNUW1XWUJiTkMzZU13NDNpWUszak12N1dwM2JlTWVwRkZSWlFKLzAv
MzEzODM5MmUzMTMyMzYyZTM0MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzIzNzMw
MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvX4EMA0GCSqGSIb3DQEBCwUAA4IBAQAWs+HXm7tX
W20oSZY/JRmAJAXr5pUd482qzX6N3h/I26wgcqf62e18S7rJUnrlvFLYPBkfutUI
J2lIij700/qzmi87pL/9ciO7bmrOnJRXCB3UNlS5pRkUmFw490XAn/tHq/IpojQY
qQsyPR/7uukWU7UbFUwcIDED3wtm5caqH40UGSppZc8tOv7utdBTEzvxqinteDIV
qfKJyuN+ad//WMvEtIu1XCt2ACkR64jTMmJEb4Yjv5ZocfhzELdb8hWWIwNl1Ui0
1fJODS+3jQw0OL1KiF+KY8VkywNrFd8sKszpTCel4igy2sqk8UzLLTgofs2ZU5Qr
T7uNdTnv/JDo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org