Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3138392e3132342e39362e302f32302d3234203d3e203232333536.roa
File:                     3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          lOQ1npFMTiE43+AkT1PfePz+6LuPf0uKuscmwqHnWeI=
Subject key identifier:   54:6B:25:28:5D:65:95:3D:17:79:3D:85:58:EB:1B:D7:2C:23:78:B4
Certificate issuer:       /CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
Certificate serial:       3318FF314787FEA3EF3E41400B583281F55851FA
Authority key identifier: CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3138392e3132342e39362e302f32302d3234203d3e203232333536.roa
Signing time:             Wed 03 Apr 2024 18:31:40 +0000
ROA not before:           Wed 03 Apr 2024 18:26:40 +0000
ROA not after:            Wed 02 Apr 2025 18:31:40 +0000
asID:                     22356
IP address blocks:        189.124.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:18:ff:31:47:87:fe:a3:ef:3e:41:40:0b:58:32:81:f5:58:51:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
        Validity
            Not Before: Apr  3 18:26:40 2024 GMT
            Not After : Apr  2 18:31:40 2025 GMT
        Subject: CN=546B25285D65953D17793D8558EB1BD72C2378B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:c7:de:1f:9a:23:47:04:06:60:3d:ce:1c:
                    14:f5:77:4f:95:1b:ac:c4:65:27:aa:3a:d8:39:15:
                    98:99:f0:fb:4a:97:c9:9f:c8:76:06:8e:45:64:36:
                    bb:b3:02:c0:35:49:41:c7:9c:47:d7:e2:6a:df:3b:
                    95:db:53:f4:4c:5a:2e:7a:2a:5e:cd:6c:c6:db:d6:
                    a1:19:75:ca:44:ab:32:39:95:2b:45:a9:c3:9b:a1:
                    18:bd:7a:02:06:d4:14:75:e3:7b:4a:a1:6b:21:fa:
                    27:3c:35:90:50:f0:93:3c:f6:97:03:21:f2:87:7b:
                    1f:dd:2a:ca:5d:c8:70:c0:53:3e:4a:0e:19:75:6e:
                    28:bc:9c:a5:29:6c:c9:7d:3d:09:6b:67:85:c3:e0:
                    a6:d8:75:e6:4b:b2:28:2e:f0:96:a4:a0:c6:34:60:
                    dc:8d:0d:2e:93:83:6a:8e:40:51:99:12:bc:d4:9b:
                    fb:ca:7a:6f:61:75:e6:82:1d:61:9d:a6:15:fd:72:
                    84:44:f3:7a:39:02:f8:9c:17:3b:74:df:02:e2:90:
                    59:ee:ba:90:13:41:8d:2b:5f:77:7c:e5:c0:5c:3d:
                    ab:e1:3a:e2:6e:bd:06:53:26:a3:f5:ba:73:7a:15:
                    84:3b:99:eb:25:8d:c3:6e:92:68:d7:57:8e:45:18:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6B:25:28:5D:65:95:3D:17:79:3D:85:58:EB:1B:D7:2C:23:78:B4
            X509v3 Authority Key Identifier:
                keyid:CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3138392e3132342e39362e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:2c:1e:25:af:c1:32:2e:e1:1f:56:e4:66:4a:a4:ed:d7:11:
         1d:35:a0:2f:5d:dc:d7:1f:d7:3b:ce:7f:fd:0b:67:03:6d:36:
         37:ac:52:a6:2c:14:0d:52:39:21:b9:01:63:83:fe:86:f6:18:
         fd:b3:b3:1d:d0:f8:e3:a7:90:d3:e7:74:9b:bc:49:ed:b9:d7:
         00:43:b8:99:d5:3b:fb:c7:25:7a:62:eb:4b:8e:35:68:26:66:
         16:2e:a8:00:0d:42:33:47:11:3b:03:5f:46:3d:4b:68:18:45:
         59:4e:07:79:71:03:92:0d:75:7c:c8:09:21:85:2a:e3:09:d1:
         13:4d:91:0b:42:07:f2:5c:1b:7d:b9:4b:d0:bd:f0:e1:1d:bf:
         ef:b9:08:8f:73:04:ea:fe:4c:8e:f5:39:31:8b:ad:71:90:2c:
         7b:c3:8e:9a:ee:db:0c:2e:e9:69:06:bc:ec:86:1a:1a:7a:91:
         b7:6c:a4:27:a2:0c:ea:c0:46:c7:43:a1:d8:cf:e7:c8:44:f2:
         82:26:40:e5:47:9a:1d:58:33:1a:6b:91:d7:4d:c3:57:69:3c:
         d6:77:d7:60:a1:23:96:b4:b6:88:5a:23:8c:4b:b4:72:23:2e:
         3f:77:14:40:58:37:d3:76:89:36:6f:60:e4:95:6f:9b:44:68:
         2b:6d:f6:d6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMxj/MUeH/qPvPkFAC1gygfVYUfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y1RERDNjg0NkYxMDhCMzc3OEMzODc3NERCMDlEREMw
M0M5MjkwMzAeFw0yNDA0MDMxODI2NDBaFw0yNTA0MDIxODMxNDBaMDMxMTAvBgNV
BAMTKDU0NkIyNTI4NUQ2NTk1M0QxNzc5M0Q4NTU4RUIxQkQ3MkMyMzc4QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeW8feH5ojRwQGYD3OHBT1d0+V
G6zEZSeqOtg5FZiZ8PtKl8mfyHYGjkVkNruzAsA1SUHHnEfX4mrfO5XbU/RMWi56
Kl7NbMbb1qEZdcpEqzI5lStFqcOboRi9egIG1BR143tKoWsh+ic8NZBQ8JM89pcD
IfKHex/dKspdyHDAUz5KDhl1bii8nKUpbMl9PQlrZ4XD4KbYdeZLsigu8JakoMY0
YNyNDS6Tg2qOQFGZErzUm/vKem9hdeaCHWGdphX9coRE83o5AvicFzt03wLikFnu
upATQY0rX3d85cBcPavhOuJuvQZTJqP1unN6FYQ7mesljcNukmjXV45FGPmlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVGslKF1llT0XeT2FWOsb1ywjeLQwHwYDVR0j
BBgwFoAUz13caEbxCLN3jDh3TbCd3APJKQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2U0NTlKcDlFcW9NcldOTmtWaGdNNzh4MWtENE1LZGpmRHI5MnczdWhR
b3IvMS9DRjVEREM2ODQ2RjEwOEIzNzc4QzM4Nzc0REIwOUREQzAzQzkyOTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNUREQzY4NDZGMTA4QjM3
NzhDMzg3NzREQjA5RERDMDNDOTI5MDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlNDU5SnA5RXFvTXJXTk5rVmhnTTc4eDFrRDRNS2RqZkRyOTJ3M3VoUW9yLzEv
MzEzODM5MmUzMTMyMzQyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMy
MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvXxgMA0GCSqGSIb3DQEBCwUAA4IBAQBuLB4lr8Ey
LuEfVuRmSqTt1xEdNaAvXdzXH9c7zn/9C2cDbTY3rFKmLBQNUjkhuQFjg/6G9hj9
s7Md0Pjjp5DT53SbvEntudcAQ7iZ1Tv7xyV6YutLjjVoJmYWLqgADUIzRxE7A19G
PUtoGEVZTgd5cQOSDXV8yAkhhSrjCdETTZELQgfyXBt9uUvQvfDhHb/vuQiPcwTq
/kyO9Tkxi61xkCx7w46a7tsMLulpBrzshhoaepG3bKQnogzqwEbHQ6HYz+fIRPKC
JkDlR5odWDMaa5HXTcNXaTzWd9dgoSOWtLaIWiOMS7RyIy4/dxRAWDfTdok2b2Dk
lW+bRGgrbfbW
-----END CERTIFICATE-----
Generated at Fri May 17 16:58:23 2024 by rpki-client on console-ams.rpki-client.org