Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/3138392e31342e3234302e302f32302d3234203d3e203134323832.roa
File:                     3138392e31342e3234302e302f32302d3234203d3e203134323832.roa (raw, json)
Hash identifier:          EOb0ZEjGtC/bnptQbJ2YOvQkmyR5FszQs/zIzZUzC0s=
Subject key identifier:   CB:B7:4B:19:7A:9E:AB:0D:90:5A:96:AA:59:0B:40:C4:E0:26:46:B3
Certificate issuer:       /CN=53AA058FBD5C11D4F68414FB2B620B8175CC4399
Certificate serial:       09810F89B06D0D7E69C4E09EB62EE70EE9C54D84
Authority key identifier: 53:AA:05:8F:BD:5C:11:D4:F6:84:14:FB:2B:62:0B:81:75:CC:43:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53AA058FBD5C11D4F68414FB2B620B8175CC4399.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/3138392e31342e3234302e302f32302d3234203d3e203134323832.roa
Signing time:             Fri 05 Jan 2024 14:00:00 +0000
ROA not before:           Fri 05 Jan 2024 13:55:00 +0000
ROA not after:            Fri 03 Jan 2025 14:00:00 +0000
asID:                     14282
IP address blocks:        189.14.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:81:0f:89:b0:6d:0d:7e:69:c4:e0:9e:b6:2e:e7:0e:e9:c5:4d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53AA058FBD5C11D4F68414FB2B620B8175CC4399
        Validity
            Not Before: Jan  5 13:55:00 2024 GMT
            Not After : Jan  3 14:00:00 2025 GMT
        Subject: CN=CBB74B197A9EAB0D905A96AA590B40C4E02646B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:84:01:73:23:a5:61:6d:55:cc:fb:16:85:fa:
                    8c:35:e9:04:30:93:0c:23:f8:1a:b7:6e:47:59:9b:
                    a6:05:54:e5:e8:7b:90:cd:f3:54:2b:c9:a0:2e:d3:
                    27:73:54:21:d3:13:1d:8a:a1:30:aa:09:b2:43:58:
                    6e:4c:8a:c3:d6:e1:78:f8:b6:66:44:ab:29:c6:ec:
                    27:3e:08:9d:56:f6:3f:e6:5f:68:44:68:8b:90:7a:
                    e5:69:e5:aa:4b:9d:df:49:6d:6e:7a:cd:58:6b:1c:
                    92:ab:66:4b:93:30:20:df:95:e4:f5:c6:65:f9:54:
                    d4:87:59:95:00:17:43:a2:da:05:dd:58:5b:20:76:
                    d9:17:3b:4e:1a:68:49:6a:12:08:fb:bd:ef:39:73:
                    19:d7:43:f9:e5:fd:19:b4:42:73:c8:f0:d0:b8:73:
                    1f:0a:b6:aa:bf:c5:47:1c:88:95:47:2c:f2:56:12:
                    91:e7:e6:3f:64:25:b2:13:67:4c:67:61:55:42:4e:
                    26:d7:24:a9:5c:6a:87:1a:3a:bc:3a:58:e3:e1:b4:
                    62:cc:a0:bb:69:1c:32:88:20:29:b3:bc:cf:07:ad:
                    e4:eb:69:48:39:56:f4:b1:e0:6e:53:0a:7a:31:93:
                    13:25:d0:73:2e:87:eb:b8:60:b5:c7:8e:bb:6e:3b:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B7:4B:19:7A:9E:AB:0D:90:5A:96:AA:59:0B:40:C4:E0:26:46:B3
            X509v3 Authority Key Identifier:
                keyid:53:AA:05:8F:BD:5C:11:D4:F6:84:14:FB:2B:62:0B:81:75:CC:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/53AA058FBD5C11D4F68414FB2B620B8175CC4399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53AA058FBD5C11D4F68414FB2B620B8175CC4399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/3138392e31342e3234302e302f32302d3234203d3e203134323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:65:78:e6:51:dc:c8:e1:f2:8a:5c:4c:88:8e:f7:56:80:
         40:d4:58:a6:7f:b7:00:0d:b8:4f:c5:9d:e3:fc:7e:d4:d5:04:
         67:27:eb:99:12:4a:04:e8:3a:8a:66:4d:ad:fd:ab:c3:fd:af:
         c7:02:7c:58:75:02:26:52:03:d4:04:ff:c7:6d:23:ec:b3:f2:
         65:a7:12:76:91:74:72:50:9d:46:f9:74:ef:1c:83:c1:fc:bd:
         a7:c4:42:30:01:ac:5e:be:40:e9:93:17:93:c9:fc:ce:43:29:
         fa:53:8d:9c:df:f3:c3:b3:67:3a:94:75:25:f4:36:2c:24:94:
         b9:30:6a:98:cf:7b:cc:88:de:e7:b3:e9:19:fe:b8:70:83:5f:
         f6:b7:74:f5:17:f6:ca:bf:8c:f0:3b:cf:96:8c:ef:d2:bf:40:
         67:04:45:ef:ba:42:3c:64:c8:f3:6b:f4:b6:43:c6:8c:5c:88:
         6e:43:f9:6f:9c:42:a9:36:29:15:5a:d5:f6:51:4c:22:33:19:
         60:cc:61:05:5e:e3:4b:0d:e7:48:41:e1:71:9a:ab:66:c6:63:
         74:46:3d:0f:b9:56:5b:6d:50:45:ea:4f:74:7b:f4:89:74:60:
         f9:55:50:3a:1e:a2:ac:d3:60:c8:1b:a2:c2:21:3b:be:10:81:
         0b:38:71:a4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCYEPibBtDX5pxOCeti7nDunFTYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNBQTA1OEZCRDVDMTFENEY2ODQxNEZCMkI2MjBCODE3
NUNDNDM5OTAeFw0yNDAxMDUxMzU1MDBaFw0yNTAxMDMxNDAwMDBaMDMxMTAvBgNV
BAMTKENCQjc0QjE5N0E5RUFCMEQ5MDVBOTZBQTU5MEI0MEM0RTAyNjQ2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhAFzI6VhbVXM+xaF+ow16QQw
kwwj+Bq3bkdZm6YFVOXoe5DN81QryaAu0ydzVCHTEx2KoTCqCbJDWG5MisPW4Xj4
tmZEqynG7Cc+CJ1W9j/mX2hEaIuQeuVp5apLnd9JbW56zVhrHJKrZkuTMCDfleT1
xmX5VNSHWZUAF0Oi2gXdWFsgdtkXO04aaElqEgj7ve85cxnXQ/nl/Rm0QnPI8NC4
cx8Ktqq/xUcciJVHLPJWEpHn5j9kJbITZ0xnYVVCTibXJKlcaocaOrw6WOPhtGLM
oLtpHDKIICmzvM8HreTraUg5VvSx4G5TCnoxkxMl0HMuh+u4YLXHjrtuO/snAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy7dLGXqeqw2QWpaqWQtAxOAmRrMwHwYDVR0j
BBgwFoAUU6oFj71cEdT2hBT7K2ILgXXMQ5kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3c4VEVIRm94UHk5UnhpanlhUHhWU1ZSanRhS21WOUdXOWJvaTdnUTdy
YnIvMC81M0FBMDU4RkJENUMxMUQ0RjY4NDE0RkIyQjYyMEI4MTc1Q0M0Mzk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUzQUEwNThGQkQ1QzExRDRG
Njg0MTRGQjJCNjIwQjgxNzVDQzQzOTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N3OFRFSEZveFB5OVJ4aWp5YVB4VlNWUmp0YUttVjlHVzlib2k3Z1E3cmJyLzAv
MzEzODM5MmUzMTM0MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM0
MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvQ7wMA0GCSqGSIb3DQEBCwUAA4IBAQAYjmV45lHc
yOHyilxMiI73VoBA1Fimf7cADbhPxZ3j/H7U1QRnJ+uZEkoE6DqKZk2t/avD/a/H
AnxYdQImUgPUBP/HbSPss/JlpxJ2kXRyUJ1G+XTvHIPB/L2nxEIwAaxevkDpkxeT
yfzOQyn6U42c3/PDs2c6lHUl9DYsJJS5MGqYz3vMiN7ns+kZ/rhwg1/2t3T1F/bK
v4zwO8+WjO/Sv0BnBEXvukI8ZMjza/S2Q8aMXIhuQ/lvnEKpNikVWtX2UUwiMxlg
zGEFXuNLDedIQeFxmqtmxmN0Rj0PuVZbbVBF6k90e/SJdGD5VVA6HqKs02DIG6LC
ITu+EIELOHGk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org