Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138392e37362e3132382e302f32302d3234203d3e203238363637.roa
File:                     3138392e37362e3132382e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          FY9EHhvV1rrdXMZ+bxEmSvVe5pmkZeiOySXVRd1yIZc=
Subject key identifier:   F4:59:D8:48:9D:C7:4A:54:8E:A1:26:9D:3C:0E:4E:F1:83:4D:A3:FF
Certificate issuer:       /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial:       18AAC9C6B31F549A69770B032EBCFE8BB9090E4C
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138392e37362e3132382e302f32302d3234203d3e203238363637.roa
Signing time:             Tue 23 Jul 2024 11:51:12 +0000
ROA not before:           Tue 23 Jul 2024 11:46:12 +0000
ROA not after:            Tue 22 Jul 2025 11:51:12 +0000
asID:                     28667
IP address blocks:        189.76.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:aa:c9:c6:b3:1f:54:9a:69:77:0b:03:2e:bc:fe:8b:b9:09:0e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
        Validity
            Not Before: Jul 23 11:46:12 2024 GMT
            Not After : Jul 22 11:51:12 2025 GMT
        Subject: CN=F459D8489DC74A548EA1269D3C0E4EF1834DA3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:09:a1:c5:d5:76:4f:25:70:ac:a8:1c:6e:
                    05:01:79:c5:f2:c5:28:6d:19:8f:14:17:80:79:8b:
                    57:f6:0d:8d:ce:21:12:0c:7d:9e:e6:7a:b2:02:55:
                    da:56:1b:c4:44:fd:57:8c:d4:a2:23:b4:72:f0:7b:
                    a5:29:4c:c8:12:cf:4f:88:54:1d:71:6b:44:d3:36:
                    a5:44:f1:58:06:12:f8:09:f5:61:ad:29:52:85:ad:
                    4f:02:cb:ce:6b:6a:61:bb:00:9b:3c:50:cb:f4:b4:
                    10:a6:49:20:5d:e5:ac:85:1b:4b:1a:1a:66:9c:18:
                    10:e6:db:48:bb:c4:47:1d:c0:6b:9b:80:26:25:cc:
                    18:4d:36:84:77:a4:c8:cb:64:15:e9:75:5e:b9:a4:
                    cf:2b:32:13:f3:51:24:5b:c0:ac:87:7e:0d:51:7d:
                    22:bd:39:fd:ce:7c:b7:60:ee:c7:76:5c:c9:f5:0b:
                    ef:d0:47:cf:e5:90:e2:12:d9:60:a7:9b:19:a5:82:
                    0d:2c:9d:b3:05:98:d7:bc:5e:b8:24:a3:98:46:2b:
                    1c:47:58:f6:ff:93:13:a1:96:06:3c:45:f2:91:2c:
                    5e:db:1a:76:1e:7b:37:9e:3a:e1:c4:75:95:ab:46:
                    c3:86:65:5a:47:5d:65:4d:f1:84:30:bc:47:50:09:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:59:D8:48:9D:C7:4A:54:8E:A1:26:9D:3C:0E:4E:F1:83:4D:A3:FF
            X509v3 Authority Key Identifier:
                keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138392e37362e3132382e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:b6:9f:df:22:11:47:9e:c9:3c:41:54:ef:71:19:4b:80:0c:
         ec:ed:a9:63:87:54:e4:1b:49:de:7f:b0:62:6a:28:b7:c9:61:
         f5:88:78:26:74:43:39:ec:1f:8a:38:27:d6:18:88:81:64:33:
         cc:72:2a:b7:3d:6c:d2:ea:0a:1a:75:d6:fb:56:a8:e5:c2:81:
         7a:f5:47:53:90:af:da:c2:dc:b0:19:34:c1:f6:22:b1:ea:d7:
         a7:ea:d1:37:f1:02:5a:c6:c4:ec:0b:10:bc:8a:88:5d:1c:fd:
         51:e7:93:0b:d8:21:36:88:3c:d1:25:db:8c:f0:82:39:fe:0f:
         81:ae:63:54:38:14:18:c3:1a:0f:e4:85:56:9d:1e:0e:3e:d7:
         fc:36:7a:5f:44:9d:0a:11:82:7f:29:38:cd:41:4b:4f:78:7a:
         fb:35:f7:ab:f9:8e:6f:9c:58:04:ba:28:14:3e:42:ef:52:a0:
         82:f8:37:03:35:87:c6:7c:8b:7d:6f:ad:5e:c1:bb:a1:ac:72:
         bd:e8:94:db:36:e1:e2:09:32:54:bb:d3:65:f4:57:d7:3a:0b:
         e1:11:9a:d7:0b:2c:67:67:69:99:20:04:3d:30:1b:e7:7b:fb:
         45:dc:c5:77:1e:21:d4:65:9e:3e:d3:b4:a3:8b:88:45:b3:c2:
         39:9b:e4:69
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGKrJxrMfVJppdwsDLrz+i7kJDkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU3MjE2QjE2OEE5NkZENjkzODlCMUM3RTFBMTVGQkFE
MUUyMTg0RjAeFw0yNDA3MjMxMTQ2MTJaFw0yNTA3MjIxMTUxMTJaMDMxMTAvBgNV
BAMTKEY0NTlEODQ4OURDNzRBNTQ4RUExMjY5RDNDMEU0RUYxODM0REEzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYkQmhxdV2TyVwrKgcbgUBecXy
xShtGY8UF4B5i1f2DY3OIRIMfZ7merICVdpWG8RE/VeM1KIjtHLwe6UpTMgSz0+I
VB1xa0TTNqVE8VgGEvgJ9WGtKVKFrU8Cy85ramG7AJs8UMv0tBCmSSBd5ayFG0sa
GmacGBDm20i7xEcdwGubgCYlzBhNNoR3pMjLZBXpdV65pM8rMhPzUSRbwKyHfg1R
fSK9Of3OfLdg7sd2XMn1C+/QR8/lkOIS2WCnmxmlgg0snbMFmNe8Xrgko5hGKxxH
WPb/kxOhlgY8RfKRLF7bGnYeezeeOuHEdZWrRsOGZVpHXWVN8YQwvEdQCYKjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9FnYSJ3HSlSOoSadPA5O8YNNo/8wHwYDVR0j
BBgwFoAURXIWsWipb9aTibHH4aFfutHiGE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMi80NTcyMTZCMTY4QTk2RkQ2OTM4OUIxQzdFMUExNUZCQUQxRTIxODRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1NzIxNkIxNjhBOTZGRDY5
Mzg5QjFDN0UxQTE1RkJBRDFFMjE4NEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzIv
MzEzODM5MmUzNzM2MmUzMTMyMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvUyAMA0GCSqGSIb3DQEBCwUAA4IBAQA2tp/fIhFH
nsk8QVTvcRlLgAzs7aljh1TkG0nef7Biaii3yWH1iHgmdEM57B+KOCfWGIiBZDPM
ciq3PWzS6goaddb7VqjlwoF69UdTkK/awtywGTTB9iKx6ten6tE38QJaxsTsCxC8
iohdHP1R55ML2CE2iDzRJduM8II5/g+BrmNUOBQYwxoP5IVWnR4OPtf8NnpfRJ0K
EYJ/KTjNQUtPeHr7Nfer+Y5vnFgEuigUPkLvUqCC+DcDNYfGfIt9b61ewbuhrHK9
6JTbNuHiCTJUu9Nl9FfXOgvhEZrXCyxnZ2mZIAQ9MBvne/tF3MV3HiHUZZ4+07Sj
i4hFs8I5m+Rp
-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org