Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38382e302f32312d3231203d3e20323632373439.roa
File:                     3138392e38392e38382e302f32312d3231203d3e20323632373439.roa (raw, json)
Hash identifier:          xYuwlD49gGXphcewEjyXixRxCDjjA+W54ohuJedlUgE=
Subject key identifier:   B0:31:43:76:07:72:2E:09:D6:83:B0:6F:B9:55:78:8C:D9:44:9E:58
Certificate issuer:       /CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Certificate serial:       47B145A2EDAD00381F95C53DB484D4214B955D7A
Authority key identifier: 03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38382e302f32312d3231203d3e20323632373439.roa
Signing time:             Tue 27 Feb 2024 01:00:32 +0000
ROA not before:           Tue 27 Feb 2024 00:55:32 +0000
ROA not after:            Tue 25 Feb 2025 01:00:32 +0000
asID:                     262749
IP address blocks:        189.89.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b1:45:a2:ed:ad:00:38:1f:95:c5:3d:b4:84:d4:21:4b:95:5d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
        Validity
            Not Before: Feb 27 00:55:32 2024 GMT
            Not After : Feb 25 01:00:32 2025 GMT
        Subject: CN=B031437607722E09D683B06FB955788CD9449E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:eb:49:47:dd:70:84:bc:54:63:37:f4:65:
                    71:20:6f:da:62:03:08:96:59:f8:92:59:a2:c4:5a:
                    7e:dd:73:47:7c:62:cd:78:1c:a6:95:76:2d:80:12:
                    69:33:c2:80:0e:4c:59:4e:13:2b:65:ad:46:ba:1a:
                    e0:7a:23:19:a7:a7:65:3e:0f:64:6d:0f:f2:11:f8:
                    d6:2f:d9:0e:19:60:27:37:93:45:f1:41:dd:f5:33:
                    be:c1:2f:35:f1:6e:48:63:23:93:f6:c8:cd:f0:ed:
                    78:b5:1b:50:8c:2d:cd:31:d3:a2:06:b4:8e:cf:63:
                    1a:44:bd:ed:7b:22:ca:7d:24:ab:46:26:4a:3c:ca:
                    67:aa:02:b5:7f:21:08:18:f2:b4:e9:45:be:ff:ef:
                    12:7c:af:ff:72:5f:f1:23:e9:f6:e0:af:83:6b:68:
                    01:3c:7e:03:36:bd:85:5e:9b:c1:f4:76:ec:08:5a:
                    df:1b:13:61:16:cc:f0:32:94:9b:8b:07:cc:9e:3d:
                    ee:44:3b:83:90:fe:cf:1a:fc:d1:08:35:e6:9b:4c:
                    07:c3:c5:13:6d:bb:71:76:7b:25:e8:91:13:d7:c5:
                    a6:6b:ca:ed:3f:51:fb:03:15:1a:d2:fa:b5:1b:2c:
                    6f:7f:88:c5:28:54:24:57:5f:56:38:89:3b:74:78:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:31:43:76:07:72:2E:09:D6:83:B0:6F:B9:55:78:8C:D9:44:9E:58
            X509v3 Authority Key Identifier:
                keyid:03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38382e302f32312d3231203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:2a:00:0d:f2:f2:f9:97:59:c7:b5:16:a3:99:58:cf:2d:31:
         64:29:3c:e6:3e:66:d6:1a:29:5c:28:84:73:97:3b:2a:a5:06:
         02:2c:9d:d9:44:b3:95:7f:72:16:b5:25:2e:79:a2:a7:c4:e4:
         31:db:4d:b2:5f:50:56:8b:87:83:5d:b2:d6:1a:1e:ec:cb:bd:
         7c:66:a9:ad:e1:0e:a0:07:09:40:34:51:ec:59:c7:ec:30:a1:
         bf:17:5f:d4:b8:e2:8a:46:66:cb:a9:b8:05:40:25:00:e5:2a:
         75:57:f9:75:79:b3:91:bb:61:c3:ad:04:56:8c:b3:9b:b6:81:
         a9:4e:aa:8b:6f:93:93:57:ac:81:01:c1:6a:c1:37:d4:81:25:
         42:9d:fe:a3:d2:76:03:1a:b5:1c:27:4f:d7:c0:bf:b3:cc:3f:
         7b:2d:cc:3b:34:de:2a:f7:4a:ce:9b:44:eb:67:79:dc:6f:6c:
         00:a8:fa:e3:83:7e:e5:a1:f8:26:e8:6c:ad:62:67:c3:37:e4:
         53:01:73:4a:90:74:b8:7c:3a:20:7e:c2:11:3f:29:b4:97:46:
         e6:a4:e6:69:5f:b7:c8:0f:31:cb:f2:16:92:42:79:63:e2:de:
         2a:92:b6:c0:f1:5e:a6:74:cf:73:a4:27:4e:71:1d:81:67:e6:
         5a:3b:2c:0c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUR7FFou2tADgflcU9tITUIUuVXXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNCNTk2MjZBQTkyRUE4MDdBOTAzRDFFQUFCMEUwRUE0
RjlGMThBMzAeFw0yNDAyMjcwMDU1MzJaFw0yNTAyMjUwMTAwMzJaMDMxMTAvBgNV
BAMTKEIwMzE0Mzc2MDc3MjJFMDlENjgzQjA2RkI5NTU3ODhDRDk0NDlFNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClVOtJR91whLxUYzf0ZXEgb9pi
AwiWWfiSWaLEWn7dc0d8Ys14HKaVdi2AEmkzwoAOTFlOEytlrUa6GuB6Ixmnp2U+
D2RtD/IR+NYv2Q4ZYCc3k0XxQd31M77BLzXxbkhjI5P2yM3w7Xi1G1CMLc0x06IG
tI7PYxpEve17Isp9JKtGJko8ymeqArV/IQgY8rTpRb7/7xJ8r/9yX/Ej6fbgr4Nr
aAE8fgM2vYVem8H0duwIWt8bE2EWzPAylJuLB8yePe5EO4OQ/s8a/NEINeabTAfD
xRNtu3F2eyXokRPXxaZryu0/UfsDFRrS+rUbLG9/iMUoVCRXX1Y4iTt0eEx9AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUsDFDdgdyLgnWg7BvuVV4jNlEnlgwHwYDVR0j
BBgwFoAUA7WWJqqS6oB6kD0eqrDg6k+fGKMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GdHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNp
LzEvMDNCNTk2MjZBQTkyRUE4MDdBOTAzRDFFQUFCMEUwRUE0RjlGMThBMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wM0I1OTYyNkFBOTJFQTgwN0E5
MDNEMUVBQUIwRTBFQTRGOUYxOEEzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G
dHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNpLzEvMzEz
ODM5MmUzODM5MmUzODM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMyMzcz
NDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDvVlYMA0GCSqGSIb3DQEBCwUAA4IBAQBdKgAN8vL5l1nH
tRajmVjPLTFkKTzmPmbWGilcKIRzlzsqpQYCLJ3ZRLOVf3IWtSUueaKnxOQx202y
X1BWi4eDXbLWGh7sy718Zqmt4Q6gBwlANFHsWcfsMKG/F1/UuOKKRmbLqbgFQCUA
5Sp1V/l1ebORu2HDrQRWjLObtoGpTqqLb5OTV6yBAcFqwTfUgSVCnf6j0nYDGrUc
J0/XwL+zzD97Lcw7NN4q90rOm0TrZ3ncb2wAqPrjg37lofgm6GytYmfDN+RTAXNK
kHS4fDogfsIRPym0l0bmpOZpX7fIDzHL8haSQnlj4t4qkrbA8V6mdM9zpCdOcR2B
Z+ZaOywM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org