Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133382e302f32342d3234203d3e20323730363331.roa
File:                     3138392e3132362e3133382e302f32342d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          hs1dLMOupCExpM8NpjJdkjKKCVz0YsYlKBKpA7H5t1w=
Subject key identifier:   28:BE:8F:67:D5:9A:BE:A0:47:96:60:BF:1D:57:9A:63:81:FA:E9:B6
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       7140D4AB814758C71B9ED6B1C57BC9524D9DE28D
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133382e302f32342d3234203d3e20323730363331.roa
Signing time:             Tue 11 Oct 2022 16:34:52 +0000
ROA not before:           Tue 11 Oct 2022 16:29:52 +0000
ROA not after:            Tue 10 Oct 2023 16:34:52 +0000
asID:                     270631
IP address blocks:        189.126.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:40:d4:ab:81:47:58:c7:1b:9e:d6:b1:c5:7b:c9:52:4d:9d:e2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Oct 11 16:29:52 2022 GMT
            Not After : Oct 10 16:34:52 2023 GMT
        Subject: CN=28BE8F67D59ABEA0479660BF1D579A6381FAE9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:5c:f5:2f:0b:5e:82:18:c3:44:71:40:9b:
                    d9:12:ae:9c:3a:ff:f2:6d:0a:e3:5d:05:0a:e7:a8:
                    45:37:47:dd:1f:bf:7e:a4:81:5b:4c:52:7b:52:bd:
                    5e:46:da:90:ad:8a:02:77:f7:03:c0:f3:de:15:b2:
                    70:5f:93:88:88:4a:1e:b1:f6:15:0e:38:0a:b1:4e:
                    9b:e3:65:04:ff:9f:93:a7:b1:91:39:4c:f4:0e:cc:
                    79:d8:b4:90:09:4c:6f:5f:72:e9:5a:2e:5b:7a:91:
                    e4:b6:87:55:45:2a:84:2b:57:b3:92:12:0f:72:d5:
                    cd:07:4f:44:80:2c:22:52:cd:d2:e9:bf:ff:3a:07:
                    f9:67:7f:a6:fe:7a:fd:ae:54:dd:6e:8d:a1:a0:0e:
                    cb:7d:f0:46:a8:34:d0:a4:fe:5f:e6:dc:69:18:a3:
                    8f:38:2a:62:f5:88:84:40:15:11:69:d4:e3:df:b7:
                    0f:71:76:ad:01:df:ea:2c:62:c2:70:46:4f:f6:08:
                    1a:19:cf:d8:14:1a:d5:f2:8a:70:18:da:6d:be:26:
                    31:8d:90:d6:58:e4:8e:68:ff:86:4a:8b:df:5c:9c:
                    62:32:5e:ea:85:c4:c8:74:8b:1e:a8:ee:88:c2:70:
                    3d:d8:df:8c:de:9f:f7:8d:4d:e5:e0:4e:68:44:be:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BE:8F:67:D5:9A:BE:A0:47:96:60:BF:1D:57:9A:63:81:FA:E9:B6
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133382e302f32342d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:7b:9b:5f:fc:fd:9d:fb:5b:98:09:28:ae:98:76:d8:a5:31:
         1c:9e:45:24:93:cd:f1:ff:7e:14:cf:b3:16:b5:30:dd:a4:7f:
         c3:0e:c5:d6:eb:bb:23:78:bb:23:bf:44:b3:9e:8f:a5:00:35:
         81:fe:eb:4d:7a:ab:24:90:4e:9c:1e:ca:e6:f8:90:af:55:f1:
         96:e2:42:6c:30:99:3f:72:a7:9c:dc:64:f2:a5:c5:27:92:59:
         12:74:35:dd:d7:b9:5e:dc:c4:39:8a:a4:f7:97:90:f0:33:8b:
         5d:78:5b:79:a2:5d:ef:cb:df:cc:e2:b1:cf:32:92:b7:f4:c3:
         c2:5d:99:26:c0:b6:ef:89:2c:22:47:b3:b8:22:76:cc:16:64:
         51:5c:b3:25:21:33:1a:69:19:92:f1:80:99:80:b2:e4:21:77:
         69:cf:c7:9b:ac:c1:96:07:af:ab:51:d9:f8:82:f4:cb:7f:00:
         59:14:e3:26:b5:bc:b7:bb:12:f5:f3:d0:53:5d:20:73:de:d0:
         d2:d2:7f:b3:18:86:88:5f:75:eb:5f:8e:91:e1:94:c8:8a:ef:
         68:d1:09:90:41:58:4c:28:0a:f2:22:05:26:83:25:3b:55:c9:
         88:1e:9c:c8:26:52:84:02:06:53:5c:3e:8a:ec:55:9a:2f:eb:
         a3:11:80:37
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcUDUq4FHWMcbntaxxXvJUk2d4o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZFOTI2Nzk3RUQ2QjRCNzcyNTRFNTc0RTFFNzYyMzhB
NzI5MzUyMDAeFw0yMjEwMTExNjI5NTJaFw0yMzEwMTAxNjM0NTJaMDMxMTAvBgNV
BAMTKDI4QkU4RjY3RDU5QUJFQTA0Nzk2NjBCRjFENTc5QTYzODFGQUU5QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xFz1LwteghjDRHFAm9kSrpw6
//JtCuNdBQrnqEU3R90fv36kgVtMUntSvV5G2pCtigJ39wPA894VsnBfk4iISh6x
9hUOOAqxTpvjZQT/n5OnsZE5TPQOzHnYtJAJTG9fculaLlt6keS2h1VFKoQrV7OS
Eg9y1c0HT0SALCJSzdLpv/86B/lnf6b+ev2uVN1ujaGgDst98EaoNNCk/l/m3GkY
o484KmL1iIRAFRFp1OPftw9xdq0B3+osYsJwRk/2CBoZz9gUGtXyinAY2m2+JjGN
kNZY5I5o/4ZKi99cnGIyXuqFxMh0ix6o7ojCcD3Y34zen/eNTeXgTmhEvp/ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKL6PZ9WavqBHlmC/HVeaY4H66bYwHwYDVR0j
BBgwFoAU/+kmeX7WtLdyVOV04ediOKcpNSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHBiSzEzVHpxZFdLZlhwck1ESEh4OUtaQ0o2d3Z2WUcyR2ROdGZwZkRi
WFAvMC9GRkU5MjY3OTdFRDZCNEI3NzI1NEU1NzRFMUU3NjIzOEE3MjkzNTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGRTkyNjc5N0VENkI0Qjc3
MjU0RTU3NEUxRTc2MjM4QTcyOTM1MjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RwYksxM1R6cWRXS2ZYcHJNREhIeDlLWkNKNnd2dllHMkdkTnRmcGZEYlhQLzAv
MzEzODM5MmUzMTMyMzYyZTMxMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1+ijANBgkqhkiG9w0BAQsFAAOCAQEAPHub
X/z9nftbmAkorph22KUxHJ5FJJPN8f9+FM+zFrUw3aR/ww7F1uu7I3i7I79Es56P
pQA1gf7rTXqrJJBOnB7K5viQr1XxluJCbDCZP3KnnNxk8qXFJ5JZEnQ13de5XtzE
OYqk95eQ8DOLXXhbeaJd78vfzOKxzzKSt/TDwl2ZJsC274ksIkezuCJ2zBZkUVyz
JSEzGmkZkvGAmYCy5CF3ac/Hm6zBlgevq1HZ+IL0y38AWRTjJrW8t7sS9fPQU10g
c97Q0tJ/sxiGiF9161+OkeGUyIrvaNEJkEFYTCgK8iIFJoMlO1XJiB6cyCZShAIG
U1w+iuxVmi/roxGANw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:14 2023 by rpki-client on console-ams.rpki-client.org