Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36382e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e36382e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          BIFcaxKYisXBkdfOCcIiHBGtKUwYYSzA8/SGOvQVfUo=
Subject key identifier:   AF:BE:22:FE:D4:78:98:29:9B:83:E0:AF:13:93:B3:B1:35:2E:2C:D5
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       362D43829EB745A0E48F69E082D06BBF5385754E
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36382e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:18 +0000
ROA not before:           Tue 09 Jan 2024 12:51:18 +0000
ROA not after:            Tue 07 Jan 2025 12:56:18 +0000
asID:                     28225
IP address blocks:        189.126.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2d:43:82:9e:b7:45:a0:e4:8f:69:e0:82:d0:6b:bf:53:85:75:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:18 2024 GMT
            Not After : Jan  7 12:56:18 2025 GMT
        Subject: CN=AFBE22FED47898299B83E0AF1393B3B1352E2CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:6c:86:f2:e1:b2:ec:19:4c:d1:4a:28:4b:
                    84:55:69:9f:c7:d7:c1:75:f6:ff:fb:98:e5:b0:fd:
                    00:54:6d:7d:bc:81:d8:8e:f7:0b:07:09:00:b4:ec:
                    0e:23:63:b6:d2:24:3b:3b:be:e1:3a:7f:eb:b0:da:
                    09:7c:32:1d:1f:31:b7:7a:f0:9f:70:30:0c:d1:36:
                    6e:cd:ae:f3:e4:44:1b:61:fa:f1:9a:6a:90:f9:d4:
                    b1:25:50:5e:1f:8b:6f:60:5c:7f:af:11:0e:b8:9c:
                    df:20:5f:8c:e7:ca:3c:88:65:a5:32:5a:3f:1d:64:
                    ce:18:dc:2c:3e:98:2f:d0:cf:65:a0:3e:28:88:2b:
                    52:67:89:9d:58:b1:0a:45:02:f8:7e:00:ae:24:a3:
                    04:58:d6:55:d5:12:b2:13:4a:4a:26:7c:d9:5e:4f:
                    ea:d9:e8:92:02:d0:ec:bc:06:02:62:13:f1:49:17:
                    4b:c2:18:c9:16:0b:07:bb:bd:d1:a4:17:cc:a2:09:
                    a6:78:0b:a0:cd:62:f3:06:3b:b6:4e:45:78:93:d1:
                    0a:2c:92:79:61:f7:1e:03:44:7d:60:b0:e3:b6:46:
                    22:96:31:a1:8f:6e:5d:d3:93:af:f5:45:4f:a4:99:
                    b3:51:70:da:a8:35:dc:d8:91:3a:60:46:f8:5b:fd:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BE:22:FE:D4:78:98:29:9B:83:E0:AF:13:93:B3:B1:35:2E:2C:D5
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36382e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:17:74:e3:f0:07:fb:ac:df:11:15:ee:12:c8:5a:48:26:f9:
         36:ad:80:49:30:21:85:05:57:7c:b7:8d:b5:e4:7d:e1:ef:27:
         46:70:97:b6:0f:a4:ea:8c:a3:13:ea:db:59:2f:a5:49:b0:73:
         d1:90:92:92:94:3b:92:a7:1c:7b:0d:9c:00:9c:84:04:d8:f0:
         f4:0b:4e:f9:9e:1f:f4:66:49:ea:15:25:e1:14:07:23:7f:85:
         04:12:f0:8f:33:a2:21:6a:6b:f6:0a:f8:78:7e:66:13:6d:ca:
         37:1c:39:34:5f:99:e9:6f:8b:6a:70:ed:cf:ca:83:69:6d:ab:
         f3:d3:15:27:72:b1:a6:d9:2c:cc:f5:43:b0:3c:5c:f8:ed:71:
         fc:f9:9d:b6:01:03:e5:29:8e:8d:b4:9b:7d:30:7b:85:6a:45:
         c3:c0:d2:27:d5:cc:3a:a2:21:6c:c0:6c:5f:08:3d:79:03:d4:
         56:fb:dd:46:42:88:54:84:8f:4f:e7:1b:27:f9:84:59:fa:d9:
         5b:a6:e3:88:db:c2:07:95:b8:da:68:43:6d:a5:49:5c:cb:d4:
         c0:a4:8c:8a:d3:b8:40:89:60:9f:76:7c:5a:f5:73:36:37:e3:
         9a:75:e0:8c:96:73:39:dc:0a:48:4a:15:28:fb:df:9d:e5:01:
         fa:5f:c3:2b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNi1Dgp63RaDkj2nggtBrv1OFdU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5REE3Mjk1MkY1MDdFODc4Njc2NTgzNThEODFDRUZC
REI2NzY4NjAeFw0yNDAxMDkxMjUxMThaFw0yNTAxMDcxMjU2MThaMDMxMTAvBgNV
BAMTKEFGQkUyMkZFRDQ3ODk4Mjk5QjgzRTBBRjEzOTNCM0IxMzUyRTJDRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwmyG8uGy7BlM0UooS4RVaZ/H
18F19v/7mOWw/QBUbX28gdiO9wsHCQC07A4jY7bSJDs7vuE6f+uw2gl8Mh0fMbd6
8J9wMAzRNm7NrvPkRBth+vGaapD51LElUF4fi29gXH+vEQ64nN8gX4znyjyIZaUy
Wj8dZM4Y3Cw+mC/Qz2WgPiiIK1JniZ1YsQpFAvh+AK4kowRY1lXVErITSkomfNle
T+rZ6JIC0Oy8BgJiE/FJF0vCGMkWCwe7vdGkF8yiCaZ4C6DNYvMGO7ZORXiT0Qos
knlh9x4DRH1gsOO2RiKWMaGPbl3Tk6/1RU+kmbNRcNqoNdzYkTpgRvhb/R+xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUr74i/tR4mCmbg+CvE5OzsTUuLNUwHwYDVR0j
BBgwFoAUoJ2nKVL1B+h4Z2WDWNgc7722doYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFY
akgvMS9BMDlEQTcyOTUyRjUwN0U4Nzg2NzY1ODM1OEQ4MUNFRkJEQjY3Njg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOURBNzI5NTJGNTA3RTg3
ODY3NjU4MzU4RDgxQ0VGQkRCNjc2ODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I4U1hXQXRLeUt2a3k2VHRwcXpxaFRHYWc3ZE0xa29ZM2h5Z3YyRGFBWGpILzEv
MzEzODM5MmUzMTMyMzYyZTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvX5EMA0GCSqGSIb3DQEBCwUAA4IBAQAbF3Tj8Af7
rN8RFe4SyFpIJvk2rYBJMCGFBVd8t4215H3h7ydGcJe2D6TqjKMT6ttZL6VJsHPR
kJKSlDuSpxx7DZwAnIQE2PD0C075nh/0ZknqFSXhFAcjf4UEEvCPM6Ihamv2Cvh4
fmYTbco3HDk0X5npb4tqcO3PyoNpbavz0xUncrGm2SzM9UOwPFz47XH8+Z22AQPl
KY6NtJt9MHuFakXDwNIn1cw6oiFswGxfCD15A9RW+91GQohUhI9P5xsn+YRZ+tlb
puOI28IHlbjaaENtpUlcy9TApIyK07hAiWCfdnxa9XM2N+OadeCMlnM53ApIShUo
+9+d5QH6X8Mr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org