Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37312e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e37312e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          KwLButc5Q9X9ouidKInrOpo+MFFvcEdKG7lUqtmdZok=
Subject key identifier:   08:44:F2:6F:7D:F2:F3:00:2F:42:09:98:D0:2C:3C:BB:BE:4B:29:67
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       17422003C35E212864C0A0DC541C97C858136388
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37312e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:20 +0000
ROA not before:           Tue 09 Jan 2024 12:51:20 +0000
ROA not after:            Tue 07 Jan 2025 12:56:20 +0000
asID:                     28225
IP address blocks:        189.126.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:42:20:03:c3:5e:21:28:64:c0:a0:dc:54:1c:97:c8:58:13:63:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:20 2024 GMT
            Not After : Jan  7 12:56:20 2025 GMT
        Subject: CN=0844F26F7DF2F3002F420998D02C3CBBBE4B2967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:93:ba:7b:7c:ba:81:11:9e:87:21:c8:ed:
                    4e:26:1f:36:68:96:e4:4a:b7:b5:d0:49:4e:4f:20:
                    c6:82:ff:76:97:be:fd:46:ec:b5:a9:97:d8:2f:05:
                    c7:00:5f:6a:59:47:61:55:67:63:11:dc:25:77:33:
                    6e:8c:10:d9:8d:41:45:1c:51:2e:32:47:2f:cd:f1:
                    66:b2:8c:1e:e1:f8:a7:cc:56:8f:eb:18:68:f0:bd:
                    54:a2:b2:a8:34:5f:df:77:62:8d:5c:85:b0:eb:42:
                    47:8e:05:33:1d:aa:f2:b8:73:a5:22:b1:8d:8c:aa:
                    8d:a6:80:79:19:a5:0e:75:a1:b9:5a:bf:87:96:b4:
                    83:bf:4b:b0:b7:9f:4c:bb:39:13:1a:ab:f6:c0:f3:
                    98:36:4b:92:83:b5:9b:77:3e:f4:df:93:e6:34:b5:
                    ec:e9:a2:ca:91:5c:02:56:5b:73:b0:29:f8:4d:85:
                    13:9a:c5:c5:3d:10:9f:42:42:4e:17:ff:7e:3a:b9:
                    50:f4:85:79:ac:4d:cd:cf:b7:4f:00:de:a9:06:9a:
                    f9:e4:34:ac:06:b6:c5:c8:1b:33:c8:e6:43:21:f8:
                    7f:64:9f:4d:07:b7:21:e6:a2:82:a4:d2:1a:54:d8:
                    b4:45:2c:e8:7c:8c:7a:26:e2:85:0e:3e:18:f4:f1:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:44:F2:6F:7D:F2:F3:00:2F:42:09:98:D0:2C:3C:BB:BE:4B:29:67
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37312e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:2f:11:bb:4e:23:15:ef:ab:8e:5c:6f:c8:ce:37:49:99:
         3d:cf:c0:3e:f5:90:c7:c8:08:9f:cd:67:86:db:f8:a9:19:04:
         d6:14:3e:fb:b7:a5:35:1e:31:fa:68:75:27:df:b2:a9:07:3b:
         c0:14:2b:a8:4e:df:d0:1e:42:fa:46:0d:dd:62:46:07:85:57:
         61:92:23:78:e6:4c:2a:9d:1d:5b:eb:b2:2f:4d:08:ae:c3:82:
         6e:a6:8f:0d:fa:22:67:d8:4f:3a:90:3a:12:63:12:ae:f2:a0:
         ae:50:ce:8b:61:c0:41:c7:ed:3c:05:db:fc:fb:ff:8a:cd:14:
         9b:7c:bd:f0:23:37:61:ee:b8:8e:e8:f9:41:52:62:23:94:e9:
         da:dd:1a:66:f7:77:5c:fb:8d:e5:6b:fa:8c:5c:e5:89:61:72:
         80:b3:0b:90:2a:1a:66:4d:64:28:b3:1f:d8:e5:69:6e:2c:c8:
         83:a0:60:21:8d:40:04:eb:ff:f1:72:ff:07:5e:5b:45:e2:b1:
         4b:6f:06:51:da:d9:2d:99:71:db:03:ad:42:3d:d3:a3:3d:6a:
         09:05:47:ba:4c:d3:cd:8a:4a:5a:ac:5e:a1:63:00:4e:21:56:
         5a:56:fa:ef:2b:65:e2:de:14:e2:74:81:b0:fa:38:3b:f4:f6:
         5e:4e:b9:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUF0IgA8NeIShkwKDcVByXyFgTY4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5REE3Mjk1MkY1MDdFODc4Njc2NTgzNThEODFDRUZC
REI2NzY4NjAeFw0yNDAxMDkxMjUxMjBaFw0yNTAxMDcxMjU2MjBaMDMxMTAvBgNV
BAMTKDA4NDRGMjZGN0RGMkYzMDAyRjQyMDk5OEQwMkMzQ0JCQkU0QjI5NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyf5O6e3y6gRGehyHI7U4mHzZo
luRKt7XQSU5PIMaC/3aXvv1G7LWpl9gvBccAX2pZR2FVZ2MR3CV3M26MENmNQUUc
US4yRy/N8WayjB7h+KfMVo/rGGjwvVSisqg0X993Yo1chbDrQkeOBTMdqvK4c6Ui
sY2Mqo2mgHkZpQ51oblav4eWtIO/S7C3n0y7ORMaq/bA85g2S5KDtZt3PvTfk+Y0
tezposqRXAJWW3OwKfhNhROaxcU9EJ9CQk4X/346uVD0hXmsTc3Pt08A3qkGmvnk
NKwGtsXIGzPI5kMh+H9kn00HtyHmooKk0hpU2LRFLOh8jHom4oUOPhj08Z+FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCETyb33y8wAvQgmY0Cw8u75LKWcwHwYDVR0j
BBgwFoAUoJ2nKVL1B+h4Z2WDWNgc7722doYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFY
akgvMS9BMDlEQTcyOTUyRjUwN0U4Nzg2NzY1ODM1OEQ4MUNFRkJEQjY3Njg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOURBNzI5NTJGNTA3RTg3
ODY3NjU4MzU4RDgxQ0VGQkRCNjc2ODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I4U1hXQXRLeUt2a3k2VHRwcXpxaFRHYWc3ZE0xa29ZM2h5Z3YyRGFBWGpILzEv
MzEzODM5MmUzMTMyMzYyZTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvX5HMA0GCSqGSIb3DQEBCwUAA4IBAQAfdS8Ru04j
Fe+rjlxvyM43SZk9z8A+9ZDHyAifzWeG2/ipGQTWFD77t6U1HjH6aHUn37KpBzvA
FCuoTt/QHkL6Rg3dYkYHhVdhkiN45kwqnR1b67IvTQiuw4Jupo8N+iJn2E86kDoS
YxKu8qCuUM6LYcBBx+08Bdv8+/+KzRSbfL3wIzdh7riO6PlBUmIjlOna3Rpm93dc
+43la/qMXOWJYXKAswuQKhpmTWQosx/Y5WluLMiDoGAhjUAE6//xcv8HXltF4rFL
bwZR2tktmXHbA61CPdOjPWoJBUe6TNPNikparF6hYwBOIVZaVvrvK2Xi3hTidIGw
+jg79PZeTrly
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org