Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37332e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e37332e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          /0mdpdNIA+Lwbv852XBMG9USD89zwNVqsODrAdDQVBY=
Subject key identifier:   D3:6D:74:05:1E:18:4C:B9:37:88:39:4C:C3:67:41:6C:C6:8F:F5:DE
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       3C60736CC3A521FBEA648D51F5272248E8720DC9
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37332e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:16 +0000
ROA not before:           Tue 09 Jan 2024 12:51:16 +0000
ROA not after:            Tue 07 Jan 2025 12:56:16 +0000
asID:                     28225
IP address blocks:        189.126.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:60:73:6c:c3:a5:21:fb:ea:64:8d:51:f5:27:22:48:e8:72:0d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:16 2024 GMT
            Not After : Jan  7 12:56:16 2025 GMT
        Subject: CN=D36D74051E184CB93788394CC367416CC68FF5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:67:f1:1e:82:d3:7c:76:2f:05:7b:3d:a4:
                    84:ce:56:40:c6:ef:ec:52:30:62:e7:e0:37:c6:19:
                    00:dd:fd:7a:2a:4d:18:dc:e9:c6:d4:68:20:bb:5d:
                    a3:31:b5:76:2b:d8:5e:b6:e8:d3:2a:63:f4:a9:a5:
                    e9:0e:82:09:08:f8:61:95:68:88:d0:74:8a:c9:b9:
                    1d:4d:6e:d5:7e:bb:05:64:89:7f:29:57:72:53:96:
                    38:07:c8:62:4c:f0:dd:ac:72:56:30:cf:40:15:29:
                    05:82:cf:90:22:af:50:ee:7c:a5:e5:70:5d:17:9b:
                    10:4c:6c:c0:87:42:78:c6:e4:26:3e:9f:71:a8:4c:
                    29:8b:8d:a4:a7:b5:df:d9:6e:02:9f:1a:86:d0:a8:
                    7a:f8:83:29:2a:2f:47:b9:29:1a:d8:08:5a:9b:fc:
                    81:ec:fd:68:2c:fe:bc:cb:17:7c:6c:de:d2:1f:82:
                    ce:be:0f:43:1e:78:da:40:51:a0:82:aa:6e:b1:7d:
                    a1:76:66:a4:6e:ce:55:c3:1c:3d:d1:23:8d:2d:96:
                    e4:b9:6c:a9:2e:ed:b9:a4:74:ab:bd:ff:30:3a:b9:
                    3c:88:0c:54:6a:a2:e1:1a:6c:8d:65:c9:f5:55:1e:
                    1f:d4:97:b3:3d:5d:9d:c1:8c:f6:a0:97:b8:59:cb:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6D:74:05:1E:18:4C:B9:37:88:39:4C:C3:67:41:6C:C6:8F:F5:DE
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37332e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:94:bc:54:73:3a:c9:b2:27:e1:02:fa:40:66:43:32:60:a2:
         32:ca:9d:34:8e:43:8e:29:00:7f:db:8f:e4:18:72:f9:43:3c:
         75:31:71:07:54:3e:90:40:34:a4:8b:76:86:0f:f5:e5:c3:b8:
         fc:48:2c:34:f7:d8:f5:4e:cb:f9:0a:65:5a:bb:59:10:b3:86:
         e2:c5:a0:ec:ce:ed:ba:1a:16:0f:12:cc:c6:31:7d:a7:3b:53:
         0c:ea:c9:5e:eb:51:11:cb:7f:0f:16:58:a6:91:be:e1:96:f1:
         25:d8:76:cb:62:44:88:56:54:3b:89:a7:26:b2:a6:70:e5:23:
         0e:1f:43:9b:3c:09:cd:48:f9:b5:6f:4f:41:fe:dc:2f:b7:a6:
         e4:63:5d:1c:fe:8a:15:fc:38:fa:21:71:8c:12:01:4b:03:00:
         12:39:5f:46:dd:a5:b3:79:2a:04:aa:e5:cf:91:bc:f4:14:12:
         36:44:a7:e7:e3:30:6a:4d:0c:5f:7b:b4:d1:8d:8b:f5:14:54:
         39:47:c5:cc:d4:65:34:ff:c1:bf:70:37:be:33:e4:c7:1f:c7:
         39:c2:01:89:2a:6c:02:4e:29:9d:13:1c:57:0b:c1:b8:bc:cf:
         cb:51:2a:66:d1:18:7a:be:21:54:a8:1d:86:ad:77:26:03:30:
         ef:46:81:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPGBzbMOlIfvqZI1R9SciSOhyDckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5REE3Mjk1MkY1MDdFODc4Njc2NTgzNThEODFDRUZC
REI2NzY4NjAeFw0yNDAxMDkxMjUxMTZaFw0yNTAxMDcxMjU2MTZaMDMxMTAvBgNV
BAMTKEQzNkQ3NDA1MUUxODRDQjkzNzg4Mzk0Q0MzNjc0MTZDQzY4RkY1REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRz2fxHoLTfHYvBXs9pITOVkDG
7+xSMGLn4DfGGQDd/XoqTRjc6cbUaCC7XaMxtXYr2F626NMqY/SppekOggkI+GGV
aIjQdIrJuR1NbtV+uwVkiX8pV3JTljgHyGJM8N2sclYwz0AVKQWCz5Air1DufKXl
cF0XmxBMbMCHQnjG5CY+n3GoTCmLjaSntd/ZbgKfGobQqHr4gykqL0e5KRrYCFqb
/IHs/Wgs/rzLF3xs3tIfgs6+D0MeeNpAUaCCqm6xfaF2ZqRuzlXDHD3RI40tluS5
bKku7bmkdKu9/zA6uTyIDFRqouEabI1lyfVVHh/Ul7M9XZ3BjPagl7hZy259AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0210BR4YTLk3iDlMw2dBbMaP9d4wHwYDVR0j
BBgwFoAUoJ2nKVL1B+h4Z2WDWNgc7722doYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFY
akgvMS9BMDlEQTcyOTUyRjUwN0U4Nzg2NzY1ODM1OEQ4MUNFRkJEQjY3Njg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOURBNzI5NTJGNTA3RTg3
ODY3NjU4MzU4RDgxQ0VGQkRCNjc2ODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I4U1hXQXRLeUt2a3k2VHRwcXpxaFRHYWc3ZE0xa29ZM2h5Z3YyRGFBWGpILzEv
MzEzODM5MmUzMTMyMzYyZTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvX5JMA0GCSqGSIb3DQEBCwUAA4IBAQBQlLxUczrJ
sifhAvpAZkMyYKIyyp00jkOOKQB/24/kGHL5Qzx1MXEHVD6QQDSki3aGD/Xlw7j8
SCw099j1Tsv5CmVau1kQs4bixaDszu26GhYPEszGMX2nO1MM6sle61ERy38PFlim
kb7hlvEl2HbLYkSIVlQ7iacmsqZw5SMOH0ObPAnNSPm1b09B/twvt6bkY10c/ooV
/Dj6IXGMEgFLAwASOV9G3aWzeSoEquXPkbz0FBI2RKfn4zBqTQxfe7TRjYv1FFQ5
R8XM1GU0/8G/cDe+M+THH8c5wgGJKmwCTimdExxXC8G4vM/LUSpm0Rh6viFUqB2G
rXcmAzDvRoHo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org