Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa
File:                     3138392e33392e3234302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          A3FJAiyr6ZSRigG+xUcT4WpcDngh5NwC4yskytW1Wr0=
Subject key identifier:   A5:3B:D7:93:EA:C0:1E:CF:88:89:04:9A:12:9E:96:69:8D:73:9B:40
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       306F07A2136524D812DE6CA67FF5FF36F0199633
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa
Signing time:             Sat 18 Nov 2023 03:44:27 +0000
ROA not before:           Sat 18 Nov 2023 03:39:27 +0000
ROA not after:            Sat 16 Nov 2024 03:44:27 +0000
asID:                     28658
IP address blocks:        189.39.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6f:07:a2:13:65:24:d8:12:de:6c:a6:7f:f5:ff:36:f0:19:96:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 18 03:39:27 2023 GMT
            Not After : Nov 16 03:44:27 2024 GMT
        Subject: CN=A53BD793EAC01ECF8889049A129E96698D739B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:92:0a:cb:6b:4d:8c:c0:26:00:07:5e:6f:
                    c4:12:53:87:09:63:3e:5a:1e:9f:6a:c1:4e:11:93:
                    4d:30:eb:0a:2d:5c:60:77:6c:f0:5c:42:7c:75:7b:
                    33:20:53:87:41:11:1a:67:32:fd:90:61:5e:e1:7e:
                    ae:28:63:4b:52:87:f8:43:b1:7f:1a:ab:75:63:27:
                    4d:54:12:4b:23:3d:2b:44:96:4f:8a:1c:73:da:9a:
                    13:17:77:46:02:ed:2d:56:e0:56:25:1b:54:b0:f9:
                    50:f5:e6:16:0d:1e:07:53:5f:8a:10:09:b2:a7:14:
                    a9:35:8e:95:a0:05:71:1b:ba:92:92:9f:a0:10:e4:
                    3d:7f:a7:50:17:81:b9:45:d0:83:18:21:4c:56:59:
                    38:f9:33:03:14:82:37:d9:45:f2:78:3a:41:7b:35:
                    a9:30:33:39:8c:43:4e:63:75:54:c9:f5:97:b3:5f:
                    d7:7e:a3:92:9c:f7:d1:3b:d8:12:22:51:ba:19:5d:
                    de:0f:c4:3c:56:02:3e:fb:c5:bf:08:71:92:f7:87:
                    31:91:92:64:7f:9c:90:63:d1:da:3b:e2:e9:76:20:
                    98:07:b8:af:a2:d1:19:a2:d0:e1:28:f0:25:8e:68:
                    58:d6:c0:df:4a:9a:4d:63:29:1a:92:89:de:b7:5b:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:D7:93:EA:C0:1E:CF:88:89:04:9A:12:9E:96:69:8D:73:9B:40
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:93:b3:31:d9:bd:d7:ce:11:f2:9d:49:1d:5e:68:db:de:07:
         ba:44:70:65:11:e8:31:06:14:f3:b9:36:64:f5:b8:01:b7:06:
         10:3a:0c:de:2d:df:e7:7f:48:ce:a7:b9:f4:79:0d:38:0e:0a:
         70:fd:77:db:98:d7:2d:fe:6b:c2:61:94:3c:7e:62:84:e2:ad:
         19:e1:63:f6:4d:16:5a:5f:bf:0d:83:82:17:52:ce:ab:8d:fe:
         b9:1a:64:c7:e6:86:ca:dc:f6:e7:25:b2:8c:7d:aa:34:83:c3:
         56:d9:13:80:9d:50:37:5e:d7:26:c5:42:0d:8e:25:34:c1:3a:
         98:5b:14:70:47:f2:2c:0f:24:4c:88:25:bb:e4:72:ba:ca:68:
         85:66:7d:1c:1c:ae:58:37:75:b6:82:e6:20:f7:20:e8:4a:40:
         bd:ef:9c:f2:03:3d:ec:74:51:ed:f3:f5:4e:e4:17:c2:c0:d3:
         b4:22:ad:fb:83:c7:c7:79:3e:3f:e2:2f:4c:9d:7a:81:43:87:
         f1:8b:3a:ec:b4:ce:fd:a3:00:38:fc:b1:49:68:04:4a:ca:99:
         2e:92:c3:e8:37:17:c8:28:48:15:2b:27:84:4a:54:de:8c:b3:
         07:bf:40:0f:03:cf:85:ab:ea:ea:5f:37:aa:51:0e:af:a9:68:
         b2:1d:08:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMG8HohNlJNgS3mymf/X/NvAZljMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJDRTgyQjJCQTJDNTgyRjJEQ0U4OTgxNzQxQTc3MjAy
MjhFRUM2QjAeFw0yMzExMTgwMzM5MjdaFw0yNDExMTYwMzQ0MjdaMDMxMTAvBgNV
BAMTKEE1M0JENzkzRUFDMDFFQ0Y4ODg5MDQ5QTEyOUU5NjY5OEQ3MzlCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8pIKy2tNjMAmAAdeb8QSU4cJ
Yz5aHp9qwU4Rk00w6wotXGB3bPBcQnx1ezMgU4dBERpnMv2QYV7hfq4oY0tSh/hD
sX8aq3VjJ01UEksjPStElk+KHHPamhMXd0YC7S1W4FYlG1Sw+VD15hYNHgdTX4oQ
CbKnFKk1jpWgBXEbupKSn6AQ5D1/p1AXgblF0IMYIUxWWTj5MwMUgjfZRfJ4OkF7
NakwMzmMQ05jdVTJ9ZezX9d+o5Kc99E72BIiUboZXd4PxDxWAj77xb8IcZL3hzGR
kmR/nJBj0do74ul2IJgHuK+i0Rmi0OEo8CWOaFjWwN9Kmk1jKRqSid63WzmFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpTvXk+rAHs+IiQSaEp6WaY1zm0AwHwYDVR0j
BBgwFoAU4s6CsrosWC8tzomBdBp3ICKO7GswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hyeDk5bmFoZnA1aENvRms4OEM2cDR4Rk5admlycDdyYmpwM0tBUkdq
d1MvMC9FMkNFODJCMkJBMkM1ODJGMkRDRTg5ODE3NDFBNzcyMDIyOEVFQzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UyQ0U4MkIyQkEyQzU4MkYy
RENFODk4MTc0MUE3NzIwMjI4RUVDNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4cng5OW5haGZwNWhDb0ZrODhDNnA0eEZOWnZpcnA3cmJqcDNLQVJHandTLzAv
MzEzODM5MmUzMzM5MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvSfwMA0GCSqGSIb3DQEBCwUAA4IBAQBPk7Mx2b3X
zhHynUkdXmjb3ge6RHBlEegxBhTzuTZk9bgBtwYQOgzeLd/nf0jOp7n0eQ04Dgpw
/XfbmNct/mvCYZQ8fmKE4q0Z4WP2TRZaX78Ng4IXUs6rjf65GmTH5obK3PbnJbKM
fao0g8NW2ROAnVA3XtcmxUINjiU0wTqYWxRwR/IsDyRMiCW75HK6ymiFZn0cHK5Y
N3W2guYg9yDoSkC975zyAz3sdFHt8/VO5BfCwNO0Iq37g8fHeT4/4i9MnXqBQ4fx
izrstM79owA4/LFJaARKypkuksPoNxfIKEgVKyeESlTejLMHv0APA8+Fq+rqXzeq
UQ6vqWiyHQi4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org