Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa
File:                     3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa (raw, json)
Hash identifier:          IWmQBeXNHNw5w44IlXYtzkhxV2Lpq2m5a7Ku3ujsqq4=
Subject key identifier:   E9:3C:10:E5:75:CC:82:79:82:A9:16:12:69:9F:6E:27:69:16:CA:45
Certificate issuer:       /CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
Certificate serial:       41ED13E91195F7CD86112E14CCA4B08F3FC56946
Authority key identifier: 6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa
Signing time:             Thu 15 Feb 2024 19:00:00 +0000
ROA not before:           Thu 15 Feb 2024 18:55:00 +0000
ROA not after:            Thu 13 Feb 2025 19:00:00 +0000
asID:                     270836
IP address blocks:        189.14.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ed:13:e9:11:95:f7:cd:86:11:2e:14:cc:a4:b0:8f:3f:c5:69:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
        Validity
            Not Before: Feb 15 18:55:00 2024 GMT
            Not After : Feb 13 19:00:00 2025 GMT
        Subject: CN=E93C10E575CC827982A91612699F6E276916CA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:71:89:dc:2a:09:f5:5b:1b:aa:18:ca:88:
                    63:fe:e0:ca:ed:d0:72:e7:5b:47:fd:7b:65:80:a6:
                    61:80:41:26:c8:8b:f7:d1:f2:7c:3e:55:97:38:3b:
                    e1:fe:9b:ca:a9:68:7b:f9:46:57:75:7a:e6:3a:03:
                    4c:e4:5e:21:52:6a:d1:bf:37:97:c7:14:6e:fb:18:
                    38:42:fe:82:80:19:60:44:3a:87:bb:a3:1b:85:4e:
                    e9:87:76:ed:5d:6b:0f:34:2f:4b:a5:73:f8:d4:1d:
                    3f:61:08:19:ea:ae:71:5a:82:0b:95:13:ac:68:a7:
                    a5:2f:46:3d:7c:9f:d6:10:fe:da:03:b2:05:7b:e3:
                    c2:f7:55:81:58:48:ab:c5:dc:ea:73:21:36:46:5b:
                    89:4d:a4:69:ec:ea:10:66:d7:f7:06:3d:54:60:6f:
                    ea:88:a5:e1:dc:b7:78:6f:03:c3:6b:d0:12:bd:a3:
                    e8:c8:89:02:69:6a:cc:43:0d:51:af:fc:57:04:b1:
                    27:90:c9:6a:2c:db:c5:c3:d5:ac:b8:bc:2f:62:23:
                    d7:2d:c8:55:ac:a2:79:13:a6:98:9e:44:e6:d0:9e:
                    d4:23:b1:7d:30:09:8d:07:99:e9:7d:81:6b:0c:f5:
                    39:3b:40:55:cb:b3:b4:df:49:45:30:27:30:ab:44:
                    a8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3C:10:E5:75:CC:82:79:82:A9:16:12:69:9F:6E:27:69:16:CA:45
            X509v3 Authority Key Identifier:
                keyid:6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:15:e8:0f:b8:8d:a4:cd:f7:63:c0:d0:05:75:df:1b:c6:fd:
         99:e4:a1:c6:4b:ff:74:60:81:9d:d4:01:6e:c4:2e:c2:98:fc:
         23:f3:e3:eb:02:9e:0e:c0:aa:5d:81:91:02:0b:fa:27:2c:fe:
         fd:3f:a8:21:5c:a1:14:c9:77:97:6e:db:c2:6a:d5:e4:87:45:
         60:21:5b:61:f0:d7:50:19:31:9e:5d:e8:c3:92:8e:26:9c:b4:
         a0:ba:fb:e4:48:5b:6a:ce:c3:1c:d1:61:aa:51:43:1f:3b:d0:
         bb:8e:53:51:cc:a3:76:2b:6d:16:de:3c:33:8a:25:8a:24:a4:
         2e:fb:5b:18:fd:dc:37:d9:4f:02:69:07:39:a4:ef:e8:85:4c:
         e2:4e:85:36:1f:9d:e3:6b:a0:9a:96:57:5c:4c:2f:4b:10:f3:
         be:13:6b:27:38:ff:ba:84:74:a6:47:83:79:e8:02:e1:f5:dd:
         b8:f5:02:13:0e:af:6f:92:73:18:33:bb:07:63:96:4d:97:48:
         66:1f:24:e4:99:eb:55:78:c2:19:40:6e:3d:c2:85:ea:b4:f1:
         48:20:d9:c4:e8:5f:81:f8:2e:30:ca:01:2f:46:d7:14:9a:b0:
         8e:c7:23:68:a6:e2:b7:9f:a8:4c:4e:6b:87:25:21:07:0b:1e:
         91:5c:cd:b6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQe0T6RGV982GES4UzKSwjz/FaUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZENkQyMDkzOTI4NDkyOTVDOURGMzZFRkJEMDczQkY4
NUY4N0MzNTAeFw0yNDAyMTUxODU1MDBaFw0yNTAyMTMxOTAwMDBaMDMxMTAvBgNV
BAMTKEU5M0MxMEU1NzVDQzgyNzk4MkE5MTYxMjY5OUY2RTI3NjkxNkNBNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA73GJ3CoJ9VsbqhjKiGP+4Mrt
0HLnW0f9e2WApmGAQSbIi/fR8nw+VZc4O+H+m8qpaHv5Rld1euY6A0zkXiFSatG/
N5fHFG77GDhC/oKAGWBEOoe7oxuFTumHdu1daw80L0ulc/jUHT9hCBnqrnFagguV
E6xop6UvRj18n9YQ/toDsgV748L3VYFYSKvF3OpzITZGW4lNpGns6hBm1/cGPVRg
b+qIpeHct3hvA8Nr0BK9o+jIiQJpasxDDVGv/FcEsSeQyWos28XD1ay4vC9iI9ct
yFWsonkTppieRObQntQjsX0wCY0Hmel9gWsM9Tk7QFXLs7TfSUUwJzCrRKhhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6TwQ5XXMgnmCqRYSaZ9uJ2kWykUwHwYDVR0j
BBgwFoAUb9bSCTkoSSlcnfNu+9Bzv4X4fDUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRhUm5VU2I2WXY2aXhxdW9mQ2lXNXp2RWZXVmo0OWJFVW5FbzhMS2V4
c0MvMC82RkQ2RDIwOTM5Mjg0OTI5NUM5REYzNkVGQkQwNzNCRjg1Rjg3QzM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGRDZEMjA5MzkyODQ5Mjk1
QzlERjM2RUZCRDA3M0JGODVGODdDMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0YVJuVVNiNll2Nml4cXVvZkNpVzV6dkVmV1ZqNDliRVVuRW84TEtleHNDLzAv
MzEzODM5MmUzMTM0MmUzMTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzODMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9DnEwDQYJKoZIhvcNAQELBQADggEBAIgV6A+4
jaTN92PA0AV13xvG/ZnkocZL/3RggZ3UAW7ELsKY/CPz4+sCng7Aql2BkQIL+ics
/v0/qCFcoRTJd5du28Jq1eSHRWAhW2Hw11AZMZ5d6MOSjiactKC6++RIW2rOwxzR
YapRQx870LuOU1HMo3YrbRbePDOKJYokpC77Wxj93DfZTwJpBzmk7+iFTOJOhTYf
neNroJqWV1xML0sQ874Tayc4/7qEdKZHg3noAuH13bj1AhMOr2+Scxgzuwdjlk2X
SGYfJOSZ61V4whlAbj3Cheq08Ugg2cToX4H4LjDKAS9G1xSasI7HI2im4refqExO
a4clIQcLHpFczbY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org