Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/3138392e35302e3131322e302f32302d3332203d3e203238333239.roa
File:                     3138392e35302e3131322e302f32302d3332203d3e203238333239.roa (raw, json)
Hash identifier:          dcANsoH9JU3Dt1Vy/+aq0b5aJJkVwvWY06wgFU/utgg=
Subject key identifier:   2A:77:FF:5B:59:E5:F1:83:59:BE:E0:5A:1F:CE:37:58:82:45:5C:7B
Certificate issuer:       /CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
Certificate serial:       103E4C0B5FC79F950A28C9705E164D874F271435
Authority key identifier: D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/3138392e35302e3131322e302f32302d3332203d3e203238333239.roa
Signing time:             Mon 26 Dec 2022 01:00:00 +0000
ROA not before:           Mon 26 Dec 2022 00:55:00 +0000
ROA not after:            Tue 26 Dec 2023 01:00:00 +0000
asID:                     28329
IP address blocks:        189.50.112.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3e:4c:0b:5f:c7:9f:95:0a:28:c9:70:5e:16:4d:87:4f:27:14:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
        Validity
            Not Before: Dec 26 00:55:00 2022 GMT
            Not After : Dec 26 01:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:d0:fa:52:d2:3b:33:b7:a1:10:89:ef:88:
                    50:3f:a7:ad:72:ac:e1:dc:0f:e9:09:1f:e4:19:df:
                    91:fd:5e:7b:a6:dc:85:61:73:b3:fe:46:c1:8a:20:
                    9f:e9:76:3c:69:42:e8:c4:da:66:4a:55:b5:53:29:
                    bb:cd:d4:9b:b6:34:ed:86:e5:3a:1f:da:b3:f4:fe:
                    4c:a5:03:5a:d4:e1:a5:f8:a4:40:20:3c:84:20:46:
                    ef:66:b4:6d:14:32:94:c1:13:2f:ec:a9:7d:cd:b2:
                    59:de:b3:89:45:5b:92:be:59:1e:b1:67:f9:d2:68:
                    59:94:ed:90:4f:48:7f:ea:a3:df:50:72:29:e7:24:
                    80:0e:49:cc:c2:c1:e5:ef:b0:92:e0:ce:53:00:0e:
                    20:bd:48:a9:97:62:e5:4e:e3:65:62:7f:9d:33:d7:
                    7b:96:58:28:6c:92:02:d6:58:7a:e6:3d:a7:51:18:
                    42:8f:7a:21:93:8d:60:94:3e:6c:f0:a6:23:6c:12:
                    01:12:f0:80:d5:6d:10:ca:4e:a8:3c:26:1d:11:62:
                    46:36:dc:bf:bf:31:20:35:d1:9d:15:64:d7:a3:82:
                    73:ed:1e:13:94:e8:69:bf:5b:30:fb:91:1d:a2:21:
                    ae:94:df:fd:f7:26:2a:b2:2d:bb:cf:df:da:2b:c7:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:77:FF:5B:59:E5:F1:83:59:BE:E0:5A:1F:CE:37:58:82:45:5C:7B
            X509v3 Authority Key Identifier:
                keyid:D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/3138392e35302e3131322e302f32302d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:0e:73:df:00:79:a9:f0:b1:ea:87:ad:69:20:5c:b6:d5:47:
         4c:d4:c1:b4:91:d7:73:48:2a:4c:7a:8a:ac:3a:ff:1d:9b:98:
         26:9d:23:13:e0:c1:95:af:dc:74:81:48:68:50:3d:19:f9:28:
         f5:0d:24:c7:d9:f3:37:f4:78:1e:45:14:67:95:cb:89:51:00:
         29:35:8e:fd:d8:45:04:5a:19:ac:a7:c4:e9:0d:13:3a:f0:d5:
         08:a1:e5:b1:c7:ef:ba:c6:55:2a:0b:7c:2d:1c:96:20:b7:7f:
         32:69:c7:c4:57:09:69:15:01:fc:d6:20:5f:aa:0b:9b:3e:f1:
         b3:20:39:15:f4:8a:d2:11:91:a9:27:ec:24:ad:29:24:3d:a9:
         31:aa:d3:56:12:4a:4a:8b:ac:36:00:e5:47:62:a9:9a:9d:06:
         f7:07:75:3f:a0:5e:23:70:97:1e:9a:fa:f4:f9:c3:5c:02:b8:
         95:3e:c7:85:2f:78:d4:e2:17:c1:34:69:53:b9:35:08:e0:80:
         49:f3:f0:d9:e6:08:2b:e6:76:dc:e4:3c:76:e4:6a:51:ca:96:
         30:8b:fd:ff:53:cf:f5:e3:c7:fc:71:37:a8:62:75:19:c0:58:
         5a:c6:bd:c7:dc:e9:6d:2b:eb:9f:5c:f3:ea:b6:6c:3f:8d:68:
         7a:cd:07:9a
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUED5MC1/Hn5UKKMlwXhZNh08nFDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgwODBENThDRTREMzBFRkIxNDA3RThERURFREIwMkIz
Q0M5NkNEQjAeFw0yMjEyMjYwMDU1MDBaFw0yMzEyMjYwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTREQ0QwRkE1MkQyM0IzM0I3
QTExMDg5RUY4ODUwM0ZBN0FENzJBQ0UxREMwRkU5MDkxRkU0MTlERjkxRkQ1RTdC
QTZEQzg1NjE3M0IzRkU0NkMxOEEyMDlGRTk3NjNDNjk0MkU4QzREQTY2NEE1NUI1
NTMyOUJCQ0RENDlCQjYzNEVEODZFNTNBMUZEQUIzRjRGRTRDQTUwMzVBRDRFMUE1
RjhBNDQwMjAzQzg0MjA0NkVGNjZCNDZEMTQzMjk0QzExMzJGRUNBOTdEQ0RCMjU5
REVCMzg5NDU1QjkyQkU1OTFFQjE2N0Y5RDI2ODU5OTRFRDkwNEY0ODdGRUFBM0RG
NTA3MjI5RTcyNDgwMEU0OUNDQzJDMUU1RUZCMDkyRTBDRTUzMDAwRTIwQkQ0OEE5
OTc2MkU1NEVFMzY1NjI3RjlEMzNENzdCOTY1ODI4NkM5MjAyRDY1ODdBRTYzREE3
NTExODQyOEY3QTIxOTM4RDYwOTQzRTZDRjBBNjIzNkMxMjAxMTJGMDgwRDU2RDEw
Q0E0RUE4M0MyNjFEMTE2MjQ2MzZEQ0JGQkYzMTIwMzVEMTlEMTU2NEQ3QTM4Mjcz
RUQxRTEzOTRFODY5QkY1QjMwRkI5MTFEQTIyMUFFOTRERkZERjcyNjJBQjIyREJC
Q0ZERkRBMkJDN0Q1RTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5NzQ+lLSOzO3oRCJ74hQP6etcqzh3A/pCR/kGd+R/V57ptyFYXOz
/kbBiiCf6XY8aULoxNpmSlW1Uym7zdSbtjTthuU6H9qz9P5MpQNa1OGl+KRAIDyE
IEbvZrRtFDKUwRMv7Kl9zbJZ3rOJRVuSvlkesWf50mhZlO2QT0h/6qPfUHIp5ySA
DknMwsHl77CS4M5TAA4gvUipl2LlTuNlYn+dM9d7llgobJIC1lh65j2nURhCj3oh
k41glD5s8KYjbBIBEvCA1W0Qyk6oPCYdEWJGNty/vzEgNdGdFWTXo4Jz7R4TlOhp
v1sw+5EdoiGulN/99yYqsi27z9/aK8fV6QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCp3/1tZ5fGDWb7gWh/ON1iCRVx7MB8GA1UdIwQYMBaAFNgIDVjOTTDvsUB+je3t
sCs8yWzbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dMTk04QmdOS2tZSEJI
SG4xeGpqY2FXVHl4Q3lySFk3WU4yc2JWZU1qNXpkLzAvRDgwODBENThDRTREMzBF
RkIxNDA3RThERURFREIwMkIzQ0M5NkNEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EODA4MEQ1OENFNEQzMEVGQjE0MDdFOERFREVEQjAyQjNDQzk2
Q0RCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HTE5NOEJnTktrWUhCSEhuMXhq
amNhV1R5eEN5ckhZN1lOMnNiVmVNajV6ZC8wLzMxMzgzOTJlMzUzMDJlMzEzMTMy
MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzODMzMzIzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL0y
cDANBgkqhkiG9w0BAQsFAAOCAQEAVg5z3wB5qfCx6oetaSBcttVHTNTBtJHXc0gq
THqKrDr/HZuYJp0jE+DBla/cdIFIaFA9Gfko9Q0kx9nzN/R4HkUUZ5XLiVEAKTWO
/dhFBFoZrKfE6Q0TOvDVCKHlscfvusZVKgt8LRyWILd/MmnHxFcJaRUB/NYgX6oL
mz7xsyA5FfSK0hGRqSfsJK0pJD2pMarTVhJKSousNgDlR2Kpmp0G9wd1P6BeI3CX
Hpr69PnDXAK4lT7HhS941OIXwTRpU7k1COCASfPw2eYIK+Z23OQ8duRqUcqWMIv9
/1PP9ePH/HE3qGJ1GcBYWsa9x9zpbSvrn1zz6rZsP41oes0Hmg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org