Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3132382e302f32322d3232203d3e20323730363030.roa
File:                     3138392e33362e3132382e302f32322d3232203d3e20323730363030.roa (raw, json)
Hash identifier:          FalmDMdHFc/q8YvcWLLQlJCSNNpRtXfZSY9b327RuCg=
Subject key identifier:   4F:FD:D1:16:37:BB:01:8D:83:D8:D2:AE:2E:34:15:E3:14:59:ED:02
Certificate issuer:       /CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
Certificate serial:       7464F039B8B75AB821DEB037A1C5432601F6642C
Authority key identifier: 91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3132382e302f32322d3232203d3e20323730363030.roa
Signing time:             Sat 11 Mar 2023 16:46:59 +0000
ROA not before:           Sat 11 Mar 2023 16:41:59 +0000
ROA not after:            Sat 09 Mar 2024 16:46:59 +0000
asID:                     270600
IP address blocks:        189.36.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:64:f0:39:b8:b7:5a:b8:21:de:b0:37:a1:c5:43:26:01:f6:64:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
        Validity
            Not Before: Mar 11 16:41:59 2023 GMT
            Not After : Mar  9 16:46:59 2024 GMT
        Subject: CN=4FFDD11637BB018D83D8D2AE2E3415E31459ED02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:c5:f5:be:ab:5a:17:02:f0:b0:11:72:52:
                    f2:74:bd:56:78:e8:dc:c8:05:45:cf:29:b7:0f:a7:
                    f8:c2:62:4d:b1:53:92:c3:20:62:12:94:69:e9:ef:
                    c1:50:69:27:e8:d5:c9:47:6f:ef:e7:72:95:57:61:
                    35:65:a4:a4:3b:fc:0d:4d:94:04:b4:d7:04:6c:74:
                    a9:36:9b:31:fa:9e:17:72:6e:59:2d:08:e8:b1:73:
                    ab:00:2c:ea:68:b2:c2:df:ff:b5:62:08:b2:d8:f7:
                    ab:fb:bd:63:e5:30:22:7a:c1:79:f4:ec:e1:84:7a:
                    88:70:c3:2a:e4:c5:aa:67:a7:f5:36:c8:37:21:bb:
                    25:93:53:87:60:4a:96:85:72:3f:ab:a3:cc:3b:0c:
                    12:f0:ee:cb:fe:bb:07:54:13:fa:b4:33:aa:3a:cd:
                    52:7d:2f:06:22:b6:91:2f:b0:ca:82:b9:5a:f9:84:
                    83:3c:5f:2f:7b:f3:68:96:d2:d8:ac:c1:2c:17:fd:
                    99:23:ab:fb:08:63:e9:73:72:23:c6:06:00:9f:a8:
                    66:7b:80:b4:30:20:a6:b5:59:10:b0:a4:92:87:e5:
                    5d:09:66:1c:e7:ef:22:0f:ed:23:78:e1:18:34:e8:
                    bf:8d:67:57:0c:ce:d0:d7:f1:8f:8f:09:dc:a4:fa:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FD:D1:16:37:BB:01:8D:83:D8:D2:AE:2E:34:15:E3:14:59:ED:02
            X509v3 Authority Key Identifier:
                keyid:91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3132382e302f32322d3232203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:41:65:f5:fb:be:4e:11:09:92:fb:3a:05:8d:77:27:03:d0:
         d6:dd:ad:28:a0:b0:55:39:54:b2:94:a5:be:2c:c4:5b:08:e7:
         71:a3:9f:13:ef:af:24:60:aa:4f:69:53:07:79:c5:a0:9c:bb:
         91:33:e8:e4:41:e1:0c:7d:1a:37:39:a1:53:3f:8a:03:28:3b:
         d1:51:26:b8:80:ed:91:24:f0:de:89:e7:b7:7b:3a:94:22:cc:
         07:e8:ad:e9:dc:fe:8d:32:bc:c3:cf:09:e2:72:d1:a3:73:04:
         91:d9:c5:c0:2d:c1:01:fc:93:c1:d6:f6:48:c6:06:f9:41:96:
         62:c5:ae:76:9e:53:48:a4:45:ca:fe:1c:6c:61:c3:ee:de:3d:
         fe:33:46:8e:b2:15:be:de:10:9d:94:1a:9b:c8:0b:b8:48:9a:
         2c:08:1f:a6:8e:98:18:9c:25:93:c3:be:de:db:82:63:18:f8:
         50:e3:cf:83:89:88:04:12:7f:0e:ae:e7:85:3c:a5:60:54:a7:
         d6:62:3d:6f:59:71:be:99:0a:23:14:a2:83:41:d2:64:52:41:
         ce:e8:00:f4:ab:46:6b:6a:5d:b3:70:af:58:16:21:f5:9c:bd:
         e5:18:fb:9c:3b:0c:9f:d1:4e:4f:2a:47:af:fc:6c:5b:fe:f4:
         f2:00:9d:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdGTwObi3Wrgh3rA3ocVDJgH2ZCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFCQTg5NEJDNEM5RkQ2NTU5OTc4NUNGM0VFNERFQ0Ix
RkY4MjIzODAeFw0yMzAzMTExNjQxNTlaFw0yNDAzMDkxNjQ2NTlaMDMxMTAvBgNV
BAMTKDRGRkREMTE2MzdCQjAxOEQ4M0Q4RDJBRTJFMzQxNUUzMTQ1OUVEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Y8X1vqtaFwLwsBFyUvJ0vVZ4
6NzIBUXPKbcPp/jCYk2xU5LDIGISlGnp78FQaSfo1clHb+/ncpVXYTVlpKQ7/A1N
lAS01wRsdKk2mzH6nhdyblktCOixc6sALOpossLf/7ViCLLY96v7vWPlMCJ6wXn0
7OGEeohwwyrkxapnp/U2yDchuyWTU4dgSpaFcj+ro8w7DBLw7sv+uwdUE/q0M6o6
zVJ9LwYitpEvsMqCuVr5hIM8Xy9782iW0tiswSwX/Zkjq/sIY+lzciPGBgCfqGZ7
gLQwIKa1WRCwpJKH5V0JZhzn7yIP7SN44Rg06L+NZ1cMztDX8Y+PCdyk+n5TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUT/3RFje7AY2D2NKuLjQV4xRZ7QIwHwYDVR0j
BBgwFoAUkbqJS8TJ/WVZl4XPPuTeyx/4IjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1Y0cEVvdUQ4cVRIREZwQW9kSE04QVZFbjU0UTFuWUFCWGZyazNzVUdF
czgvMC85MUJBODk0QkM0QzlGRDY1NTk5Nzg1Q0YzRUU0REVDQjFGRjgyMjM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkxQkE4OTRCQzRDOUZENjU1
OTk3ODVDRjNFRTRERUNCMUZGODIyMzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NWNHBFb3VEOHFUSERGcEFvZEhNOEFWRW41NFExbllBQlhmcmszc1VHRXM4LzAv
MzEzODM5MmUzMzM2MmUzMTMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzNjMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9JIAwDQYJKoZIhvcNAQELBQADggEBAJ9BZfX7
vk4RCZL7OgWNdycD0NbdrSigsFU5VLKUpb4sxFsI53GjnxPvryRgqk9pUwd5xaCc
u5Ez6ORB4Qx9Gjc5oVM/igMoO9FRJriA7ZEk8N6J57d7OpQizAforenc/o0yvMPP
CeJy0aNzBJHZxcAtwQH8k8HW9kjGBvlBlmLFrnaeU0ikRcr+HGxhw+7ePf4zRo6y
Fb7eEJ2UGpvIC7hImiwIH6aOmBicJZPDvt7bgmMY+FDjz4OJiAQSfw6u54U8pWBU
p9ZiPW9Zcb6ZCiMUooNB0mRSQc7oAPSrRmtqXbNwr1gWIfWcveUY+5w7DJ/RTk8q
R6/8bFv+9PIAnY0=
-----END CERTIFICATE-----
Generated at Fri Nov 24 19:04:30 2023 by rpki-client on console-fra.rpki-client.org