Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa
File:                     3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa (raw, json)
Hash identifier:          iqtpyAXoxqgY/48rIi20f/k6+R7kZKoPoZYKU4Gx1wQ=
Subject key identifier:   A7:0F:32:E2:AD:91:72:FB:0D:97:45:F0:D6:7F:FC:37:F7:7F:CF:D4
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       1BAAA44B30E9842300B95AD903317D0C08260652
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa
Signing time:             Mon 14 Aug 2023 14:16:38 +0000
ROA not before:           Mon 14 Aug 2023 14:11:38 +0000
ROA not after:            Mon 12 Aug 2024 14:16:38 +0000
asID:                     40356
IP address blocks:        189.126.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:aa:a4:4b:30:e9:84:23:00:b9:5a:d9:03:31:7d:0c:08:26:06:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Aug 14 14:11:38 2023 GMT
            Not After : Aug 12 14:16:38 2024 GMT
        Subject: CN=A70F32E2AD9172FB0D9745F0D67FFC37F77FCFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:ca:02:39:39:63:8d:eb:51:f9:30:59:8f:
                    fb:bc:82:26:5c:01:25:29:0e:fc:d6:52:88:03:04:
                    25:cc:31:5b:21:fd:32:21:51:d8:4d:a6:34:ad:7e:
                    82:af:c3:f4:35:f3:e4:23:4a:68:46:d5:d5:85:67:
                    8c:37:d0:2e:2e:dd:50:bf:19:b2:d4:af:e4:83:d8:
                    a8:82:a4:a0:43:3d:de:94:9a:11:bc:79:79:1b:ef:
                    16:00:19:b1:05:18:10:97:c5:a0:c5:d9:d0:ba:cc:
                    40:b2:e6:e8:76:94:dd:ee:6e:42:58:ca:f6:a9:74:
                    9e:e7:8f:8d:88:1f:c6:e9:f5:77:5e:a2:b7:e1:7b:
                    9b:21:c1:57:c1:89:29:83:a2:f7:3b:13:cd:cf:20:
                    b2:1b:d6:c5:a9:b6:ab:69:5a:45:c9:7c:67:19:90:
                    88:4e:a6:b2:6b:16:b0:97:3d:7a:23:63:17:38:01:
                    b5:c6:28:4b:9d:ad:69:91:a7:0b:95:83:8b:ac:cd:
                    13:3b:60:30:fe:2f:a9:01:f9:57:e6:27:35:da:64:
                    fd:3d:50:e3:9e:5a:c6:f2:2a:fc:9a:54:7e:7d:be:
                    ce:03:5b:b0:86:4d:be:6c:62:24:a1:79:29:13:c9:
                    f9:6d:6b:86:ce:14:bc:78:a8:5b:30:52:3c:1c:1a:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0F:32:E2:AD:91:72:FB:0D:97:45:F0:D6:7F:FC:37:F7:7F:CF:D4
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:91:1b:46:fe:91:4a:75:82:a0:79:3f:a8:6c:13:86:c0:f0:
         41:59:25:ab:a8:50:16:25:c8:e6:ca:6e:c5:ae:0e:19:ef:f7:
         55:28:b2:37:f9:91:6d:ce:28:50:8b:64:1d:4a:4c:d1:9b:7a:
         96:88:c0:1e:c2:96:88:21:cb:04:ed:90:5a:94:3d:0c:06:18:
         ef:1f:c4:49:e7:68:93:1d:5e:44:1c:70:07:49:43:38:f7:10:
         23:73:2f:6c:8f:82:b2:7b:a5:31:aa:f6:dc:ed:6d:8c:a0:cd:
         a7:14:68:06:36:c1:44:05:3e:34:bc:65:49:2f:76:64:6b:2c:
         04:09:b7:80:4b:97:60:d3:95:15:09:18:ad:e5:dd:ed:38:fc:
         34:e8:b7:1d:cb:10:07:c0:42:75:c9:c8:fc:e0:dd:26:0f:52:
         e5:dd:a9:ba:64:c7:f3:8e:8d:1d:b4:41:33:6b:6e:2b:6f:26:
         fc:58:76:fa:9e:d4:85:ab:da:aa:b7:6b:4e:7c:fb:ae:c1:80:
         87:7d:88:86:44:45:a4:4b:e7:b8:5f:28:07:30:8b:1c:fc:02:
         cc:15:bf:ae:60:1e:94:12:73:f5:9d:fb:76:5c:22:a3:1a:ca:
         64:70:f3:9a:aa:8a:60:0d:e9:d0:67:88:27:18:15:60:e0:35:
         b3:b7:29:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG6qkSzDphCMAuVrZAzF9DAgmBlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZFOTI2Nzk3RUQ2QjRCNzcyNTRFNTc0RTFFNzYyMzhB
NzI5MzUyMDAeFw0yMzA4MTQxNDExMzhaFw0yNDA4MTIxNDE2MzhaMDMxMTAvBgNV
BAMTKEE3MEYzMkUyQUQ5MTcyRkIwRDk3NDVGMEQ2N0ZGQzM3Rjc3RkNGRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApMoCOTljjetR+TBZj/u8giZc
ASUpDvzWUogDBCXMMVsh/TIhUdhNpjStfoKvw/Q18+QjSmhG1dWFZ4w30C4u3VC/
GbLUr+SD2KiCpKBDPd6UmhG8eXkb7xYAGbEFGBCXxaDF2dC6zECy5uh2lN3ubkJY
yvapdJ7nj42IH8bp9Xdeorfhe5shwVfBiSmDovc7E83PILIb1sWptqtpWkXJfGcZ
kIhOprJrFrCXPXojYxc4AbXGKEudrWmRpwuVg4uszRM7YDD+L6kB+VfmJzXaZP09
UOOeWsbyKvyaVH59vs4DW7CGTb5sYiSheSkTyflta4bOFLx4qFswUjwcGklfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpw8y4q2RcvsNl0Xw1n/8N/d/z9QwHwYDVR0j
BBgwFoAU/+kmeX7WtLdyVOV04ediOKcpNSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHBiSzEzVHpxZFdLZlhwck1ESEh4OUtaQ0o2d3Z2WUcyR2ROdGZwZkRi
WFAvMC9GRkU5MjY3OTdFRDZCNEI3NzI1NEU1NzRFMUU3NjIzOEE3MjkzNTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGRTkyNjc5N0VENkI0Qjc3
MjU0RTU3NEUxRTc2MjM4QTcyOTM1MjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RwYksxM1R6cWRXS2ZYcHJNREhIeDlLWkNKNnd2dllHMkdkTnRmcGZEYlhQLzAv
MzEzODM5MmUzMTMyMzYyZTMxMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0
MzAzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9fokwDQYJKoZIhvcNAQELBQADggEBAISRG0b+
kUp1gqB5P6hsE4bA8EFZJauoUBYlyObKbsWuDhnv91Uosjf5kW3OKFCLZB1KTNGb
epaIwB7CloghywTtkFqUPQwGGO8fxEnnaJMdXkQccAdJQzj3ECNzL2yPgrJ7pTGq
9tztbYygzacUaAY2wUQFPjS8ZUkvdmRrLAQJt4BLl2DTlRUJGK3l3e04/DTotx3L
EAfAQnXJyPzg3SYPUuXdqbpkx/OOjR20QTNrbitvJvxYdvqe1IWr2qq3a058+67B
gId9iIZERaRL57hfKAcwixz8AswVv65gHpQSc/Wd+3ZcIqMaymRw85qqimAN6dBn
iCcYFWDgNbO3KTA=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org