Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32342d3234203d3e20323730353533.roa
File:                     3138392e38352e3130382e302f32342d3234203d3e20323730353533.roa (raw, json)
Hash identifier:          RDH22obTrydBF5fRufOsshqoqCKJttcjJ6EuAiDAUSA=
Subject key identifier:   96:E3:53:F2:DA:8C:29:B2:E6:B2:1A:EE:23:DC:E3:62:A5:B8:CD:CA
Certificate issuer:       /CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
Certificate serial:       75651737D080E728E70A89058A4378DDC50F2D21
Authority key identifier: 15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32342d3234203d3e20323730353533.roa
Signing time:             Tue 11 Jul 2023 14:54:02 +0000
ROA not before:           Tue 11 Jul 2023 14:49:02 +0000
ROA not after:            Tue 09 Jul 2024 14:54:02 +0000
asID:                     270553
IP address blocks:        189.85.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:65:17:37:d0:80:e7:28:e7:0a:89:05:8a:43:78:dd:c5:0f:2d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
        Validity
            Not Before: Jul 11 14:49:02 2023 GMT
            Not After : Jul  9 14:54:02 2024 GMT
        Subject: CN=96E353F2DA8C29B2E6B21AEE23DCE362A5B8CDCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:44:f2:05:29:27:5d:30:97:f8:4e:72:da:
                    4a:85:28:7d:e7:67:92:21:a7:91:0f:84:7b:dd:01:
                    fe:fc:63:21:cd:54:65:31:c3:52:b7:a4:27:f1:05:
                    e0:e2:3b:f4:37:60:d9:c0:86:82:0d:12:3d:84:42:
                    0f:df:4e:05:c8:0e:80:91:87:56:42:b9:b4:67:1f:
                    bb:b2:fb:25:22:be:f7:3c:0a:7a:98:e3:a8:eb:51:
                    4b:b6:f4:4a:15:cb:9c:0c:10:41:03:42:23:4d:69:
                    23:36:1e:25:16:bc:f2:a6:99:fd:38:32:15:26:ce:
                    ad:04:3e:43:bd:1b:37:83:69:40:1b:9c:5f:c5:54:
                    96:5c:7a:2e:14:3c:fd:d0:b0:b5:fb:a9:64:74:3d:
                    3e:39:30:bd:27:97:61:b8:65:29:7f:84:df:b8:ec:
                    5c:cf:3d:b8:7b:3a:2a:31:82:59:2c:5c:52:c4:e0:
                    0b:ee:18:4e:ba:de:7f:93:41:29:87:c4:6a:1c:b9:
                    ed:97:5e:89:b8:01:ac:4b:7a:17:14:dd:59:38:fd:
                    29:93:2f:8d:6a:50:c8:ba:2c:d5:2a:6b:69:ff:df:
                    9d:43:60:52:08:0d:d0:a5:45:b6:79:b2:12:c1:e5:
                    2d:f6:13:7c:08:d3:9b:ca:f9:80:60:31:17:15:26:
                    38:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E3:53:F2:DA:8C:29:B2:E6:B2:1A:EE:23:DC:E3:62:A5:B8:CD:CA
            X509v3 Authority Key Identifier:
                keyid:15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130382e302f32342d3234203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:66:6a:53:f1:76:b6:fb:50:d6:b5:99:27:a6:34:04:50:c5:
         82:ae:26:5e:ea:00:a5:ef:65:62:a4:d9:70:af:45:92:67:04:
         9b:04:aa:ce:30:5a:f3:dd:0a:dd:01:f2:4d:94:a3:9a:bf:ba:
         4a:8b:d5:c5:cf:d0:5e:b4:cb:66:92:d7:01:56:7f:6d:a4:dc:
         ba:a8:d2:6d:de:36:5f:b2:a2:40:9e:b9:a6:b2:fb:50:f4:f9:
         8d:42:8a:47:44:52:77:7a:fb:f3:04:ba:f3:32:0a:9a:ae:df:
         4f:ff:bc:87:f3:50:42:b5:29:45:cc:50:05:3e:4a:83:63:a3:
         bd:37:f8:76:98:71:44:02:c6:cb:50:8c:0f:75:ab:52:71:62:
         d8:cc:cc:4a:64:7b:87:89:84:75:b5:4f:74:fb:aa:73:63:be:
         e8:80:0e:88:60:5d:a2:0a:53:5d:6b:09:12:1e:b8:41:65:20:
         5f:23:56:0a:25:75:a7:d5:95:2d:78:90:e0:c6:b6:6f:88:b5:
         78:89:39:f2:33:52:ba:52:ae:76:c4:c9:62:de:20:ec:54:ed:
         5e:1f:55:dc:ff:d4:28:a6:4f:75:f4:42:f0:a4:ce:61:eb:3c:
         83:f6:47:db:9a:40:70:fe:d7:6c:ca:f3:43:fa:fc:1f:93:38:
         f5:e1:10:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdWUXN9CA5yjnCokFikN43cUPLSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU4ODlDNTE2MjgzNzAyMUM1OUJBNjgwQ0Y5NENEQzVE
NURCOEQ0MzAeFw0yMzA3MTExNDQ5MDJaFw0yNDA3MDkxNDU0MDJaMDMxMTAvBgNV
BAMTKDk2RTM1M0YyREE4QzI5QjJFNkIyMUFFRTIzRENFMzYyQTVCOENEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIcETyBSknXTCX+E5y2kqFKH3n
Z5Ihp5EPhHvdAf78YyHNVGUxw1K3pCfxBeDiO/Q3YNnAhoINEj2EQg/fTgXIDoCR
h1ZCubRnH7uy+yUivvc8CnqY46jrUUu29EoVy5wMEEEDQiNNaSM2HiUWvPKmmf04
MhUmzq0EPkO9GzeDaUAbnF/FVJZcei4UPP3QsLX7qWR0PT45ML0nl2G4ZSl/hN+4
7FzPPbh7OioxglksXFLE4AvuGE663n+TQSmHxGocue2XXom4AaxLehcU3Vk4/SmT
L41qUMi6LNUqa2n/351DYFIIDdClRbZ5shLB5S32E3wI05vK+YBgMRcVJjh3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUluNT8tqMKbLmshruI9zjYqW4zcowHwYDVR0j
BBgwFoAUFYicUWKDcCHFm6aAz5TNxdXbjUMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZhMVJOV0xRWktYMm1LR1gzQUJOekRmMkdVRW1IdHVkbjhpYUF3UEo1
OWIvMC8xNTg4OUM1MTYyODM3MDIxQzU5QkE2ODBDRjk0Q0RDNUQ1REI4RDQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1ODg5QzUxNjI4MzcwMjFD
NTlCQTY4MENGOTRDREM1RDVEQjhENDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2YTFSTldMUVpLWDJtS0dYM0FCTnpEZjJHVUVtSHR1ZG44aWFBd1BKNTliLzAv
MzEzODM5MmUzODM1MmUzMTMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9VWwwDQYJKoZIhvcNAQELBQADggEBAJZmalPx
drb7UNa1mSemNARQxYKuJl7qAKXvZWKk2XCvRZJnBJsEqs4wWvPdCt0B8k2Uo5q/
ukqL1cXP0F60y2aS1wFWf22k3Lqo0m3eNl+yokCeuaay+1D0+Y1CikdEUnd6+/ME
uvMyCpqu30//vIfzUEK1KUXMUAU+SoNjo703+HaYcUQCxstQjA91q1JxYtjMzEpk
e4eJhHW1T3T7qnNjvuiADohgXaIKU11rCRIeuEFlIF8jVgoldafVlS14kODGtm+I
tXiJOfIzUrpSrnbEyWLeIOxU7V4fVdz/1CimT3X0QvCkzmHrPIP2R9uaQHD+12zK
80P6/B+TOPXhEAE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org