Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/3138392e31342e3131342e302f32332d3233203d3e20323730383336.roa
File:                     3138392e31342e3131342e302f32332d3233203d3e20323730383336.roa (raw, json)
Hash identifier:          K6eI+SmFov5n/fKnw6qWhYcOG12LZPzkSDtmC45qMCw=
Subject key identifier:   0F:9F:72:B4:EF:82:1A:DD:FD:C2:6F:79:D8:F6:6A:7D:7D:2D:9D:62
Certificate issuer:       /CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
Certificate serial:       0C10A80FBC0F554DD9BEEA3856ABD82CE486246B
Authority key identifier: 6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/3138392e31342e3131342e302f32332d3233203d3e20323730383336.roa
Signing time:             Wed 19 Jul 2023 18:17:40 +0000
ROA not before:           Wed 19 Jul 2023 18:12:40 +0000
ROA not after:            Wed 17 Jul 2024 18:17:40 +0000
asID:                     270836
IP address blocks:        189.14.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:10:a8:0f:bc:0f:55:4d:d9:be:ea:38:56:ab:d8:2c:e4:86:24:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
        Validity
            Not Before: Jul 19 18:12:40 2023 GMT
            Not After : Jul 17 18:17:40 2024 GMT
        Subject: CN=0F9F72B4EF821ADDFDC26F79D8F66A7D7D2D9D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:23:5b:c0:71:15:d1:0f:05:d2:af:65:fe:
                    9f:20:65:4b:88:42:28:1c:17:d9:39:22:00:01:41:
                    6c:d9:d7:c1:37:b7:c5:7a:bf:d2:1a:d7:ce:32:75:
                    6e:76:46:38:27:a1:9a:17:dc:1a:f6:a8:96:d5:ce:
                    b4:b7:ae:93:d9:4a:3c:2d:12:02:f8:fc:9a:83:61:
                    b0:6c:eb:3e:ab:01:8a:c7:18:1b:12:79:02:47:66:
                    00:fa:7f:a9:2e:3e:f4:0f:54:31:91:13:93:11:7c:
                    cb:7b:92:7c:58:f1:3e:de:7d:aa:62:24:91:9a:73:
                    a2:9f:a9:92:73:f8:55:af:c0:69:15:54:8a:98:f7:
                    f4:c4:7a:a5:c4:17:d5:31:af:ad:b6:91:f7:69:fc:
                    59:20:92:97:ce:49:74:ef:72:a6:ae:d3:a9:72:83:
                    1e:24:14:65:7f:47:52:98:6a:a5:0f:ef:48:c0:a4:
                    f4:5d:c8:d2:76:17:00:f6:cc:72:8d:96:e1:e7:d5:
                    d1:20:a1:88:57:3f:97:29:9c:5a:b6:21:c5:d3:f8:
                    1a:c9:27:89:40:e5:3b:9c:4a:12:21:d0:c0:76:88:
                    5d:90:4a:3a:0f:7b:8d:a4:8c:17:d9:53:ff:b4:c4:
                    ee:80:f2:94:40:81:a2:31:d4:8b:19:e0:5e:40:31:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:72:B4:EF:82:1A:DD:FD:C2:6F:79:D8:F6:6A:7D:7D:2D:9D:62
            X509v3 Authority Key Identifier:
                keyid:6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/3138392e31342e3131342e302f32332d3233203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:b7:c2:18:80:ef:de:43:ef:2e:de:c3:d9:18:10:65:6b:06:
         eb:b4:fb:fb:60:b8:d9:87:fb:28:5e:62:d5:fd:85:fe:2b:d7:
         fa:36:ef:58:a8:ed:db:3f:ea:ff:17:75:e6:18:4d:9a:2b:eb:
         4e:7d:5b:9c:15:e0:68:a2:38:ce:5f:5d:d0:dd:e6:23:4b:40:
         f4:2e:d0:52:6f:64:f0:14:e3:23:f2:40:5c:f2:d0:d9:30:4d:
         72:0c:74:59:09:5b:6d:4e:13:83:8c:f8:5d:16:54:1d:72:6e:
         f4:f7:11:7f:6b:c2:e4:17:71:89:4f:09:5f:da:76:fe:da:a9:
         fb:b8:50:76:2b:32:c9:ab:ba:62:49:2f:34:85:fd:59:69:34:
         81:a8:68:27:6d:24:d8:19:b0:46:23:78:9f:c0:a6:98:25:48:
         a5:f6:8b:c3:79:e2:d2:af:b4:1b:4e:40:4a:73:f8:a5:d9:74:
         da:f7:02:c1:57:6d:ad:b9:07:d7:2a:4d:1f:76:cd:02:5e:13:
         64:f9:0d:9e:41:52:b7:20:56:f2:63:e4:0f:11:9a:d9:78:09:
         98:f7:ef:92:ef:08:25:32:0d:4c:2e:83:41:2b:17:9e:e6:e5:
         44:10:c2:36:75:e8:ad:19:95:6c:ee:d8:b8:1d:ac:87:1e:2b:
         5a:4d:91:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDBCoD7wPVU3Zvuo4VqvYLOSGJGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZENkQyMDkzOTI4NDkyOTVDOURGMzZFRkJEMDczQkY4
NUY4N0MzNTAeFw0yMzA3MTkxODEyNDBaFw0yNDA3MTcxODE3NDBaMDMxMTAvBgNV
BAMTKDBGOUY3MkI0RUY4MjFBRERGREMyNkY3OUQ4RjY2QTdEN0QyRDlENjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxSNbwHEV0Q8F0q9l/p8gZUuI
QigcF9k5IgABQWzZ18E3t8V6v9Ia184ydW52RjgnoZoX3Br2qJbVzrS3rpPZSjwt
EgL4/JqDYbBs6z6rAYrHGBsSeQJHZgD6f6kuPvQPVDGRE5MRfMt7knxY8T7efapi
JJGac6KfqZJz+FWvwGkVVIqY9/TEeqXEF9Uxr622kfdp/FkgkpfOSXTvcqau06ly
gx4kFGV/R1KYaqUP70jApPRdyNJ2FwD2zHKNluHn1dEgoYhXP5cpnFq2IcXT+BrJ
J4lA5TucShIh0MB2iF2QSjoPe42kjBfZU/+0xO6A8pRAgaIx1IsZ4F5AMfxJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUD59ytO+CGt39wm952PZqfX0tnWIwHwYDVR0j
BBgwFoAUb9bSCTkoSSlcnfNu+9Bzv4X4fDUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRhUm5VU2I2WXY2aXhxdW9mQ2lXNXp2RWZXVmo0OWJFVW5FbzhMS2V4
c0MvMC82RkQ2RDIwOTM5Mjg0OTI5NUM5REYzNkVGQkQwNzNCRjg1Rjg3QzM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGRDZEMjA5MzkyODQ5Mjk1
QzlERjM2RUZCRDA3M0JGODVGODdDMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0YVJuVVNiNll2Nml4cXVvZkNpVzV6dkVmV1ZqNDliRVVuRW84TEtleHNDLzAv
MzEzODM5MmUzMTM0MmUzMTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzODMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG9DnIwDQYJKoZIhvcNAQELBQADggEBACC3whiA
795D7y7ew9kYEGVrBuu0+/tguNmH+yheYtX9hf4r1/o271io7ds/6v8XdeYYTZor
6059W5wV4GiiOM5fXdDd5iNLQPQu0FJvZPAU4yPyQFzy0NkwTXIMdFkJW21OE4OM
+F0WVB1ybvT3EX9rwuQXcYlPCV/adv7aqfu4UHYrMsmrumJJLzSF/VlpNIGoaCdt
JNgZsEYjeJ/AppglSKX2i8N54tKvtBtOQEpz+KXZdNr3AsFXba25B9cqTR92zQJe
E2T5DZ5BUrcgVvJj5A8Rmtl4CZj375LvCCUyDUwug0ErF57m5UQQwjZ16K0ZlWzu
2LgdrIceK1pNkes=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org