Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/3138392e38342e3134342e302f32302d3234203d3e203238333730.roa
File:                     3138392e38342e3134342e302f32302d3234203d3e203238333730.roa (raw, json)
Hash identifier:          X1BOU5gKvQmXYdvvFfkkoLJNirR5f7EIhAv1pY2x8LE=
Subject key identifier:   DB:53:E0:1E:D1:CF:86:94:E1:DB:0B:FD:B4:8D:04:AC:37:28:F4:A7
Certificate issuer:       /CN=ACED7F3D5F45458F3754EC755B6951DE6D19CDDE
Certificate serial:       7D808AC979E862C699AFC8974A3F7D22835067AA
Authority key identifier: AC:ED:7F:3D:5F:45:45:8F:37:54:EC:75:5B:69:51:DE:6D:19:CD:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/3138392e38342e3134342e302f32302d3234203d3e203238333730.roa
Signing time:             Wed 07 Feb 2024 23:07:17 +0000
ROA not before:           Wed 07 Feb 2024 23:02:17 +0000
ROA not after:            Wed 05 Feb 2025 23:07:17 +0000
asID:                     28370
IP address blocks:        189.84.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:80:8a:c9:79:e8:62:c6:99:af:c8:97:4a:3f:7d:22:83:50:67:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACED7F3D5F45458F3754EC755B6951DE6D19CDDE
        Validity
            Not Before: Feb  7 23:02:17 2024 GMT
            Not After : Feb  5 23:07:17 2025 GMT
        Subject: CN=DB53E01ED1CF8694E1DB0BFDB48D04AC3728F4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:6a:f2:d0:dd:48:35:48:48:9a:47:32:e3:
                    1b:20:65:8f:33:fa:dd:01:0d:c2:5c:ab:a5:e5:f7:
                    cf:96:0b:1b:42:9c:d0:9e:21:10:ce:36:99:d0:d9:
                    39:2a:9e:eb:0e:5e:11:d0:36:1a:d0:5c:12:e5:7a:
                    9d:ab:bb:4f:25:97:fd:cd:90:aa:03:72:c9:d1:37:
                    73:31:8e:e8:90:b4:3c:8d:f2:f9:28:64:df:ac:ae:
                    0d:85:44:c6:7d:30:34:ef:91:a8:23:ad:46:a9:87:
                    83:5d:3c:36:a5:d5:0e:4b:11:7d:f8:53:a8:4e:cd:
                    05:30:65:68:0a:78:52:f4:e0:c6:b0:07:b2:bb:03:
                    09:fe:e9:70:ee:61:91:5d:70:5d:90:b6:5b:64:14:
                    39:c8:90:87:7f:ff:c2:7f:af:1c:c9:f0:ba:7d:bf:
                    e4:dc:71:07:17:78:2d:56:5a:63:cb:f2:d3:91:d1:
                    c3:a7:eb:2c:15:c6:e9:f9:d2:c4:62:4a:97:6d:eb:
                    84:69:05:84:a2:15:48:f4:9d:77:8c:e5:26:b4:9b:
                    7a:92:6e:f3:a2:65:be:8c:a1:96:aa:6a:fb:73:60:
                    43:a8:55:59:94:82:b7:65:25:4c:21:36:53:85:b3:
                    a4:8b:a9:2a:33:92:60:28:ac:76:8a:0e:2a:41:ec:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:53:E0:1E:D1:CF:86:94:E1:DB:0B:FD:B4:8D:04:AC:37:28:F4:A7
            X509v3 Authority Key Identifier:
                keyid:AC:ED:7F:3D:5F:45:45:8F:37:54:EC:75:5B:69:51:DE:6D:19:CD:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/3138392e38342e3134342e302f32302d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:1a:42:38:f7:2b:7b:1b:9a:e4:f5:48:47:c0:67:7a:56:55:
         3e:95:c9:b4:51:63:31:85:0a:a6:f6:f4:b2:53:bb:1f:dc:0f:
         7c:83:80:29:a4:dc:80:78:83:9d:65:26:40:23:eb:2d:02:13:
         ea:00:24:79:b2:fe:21:2d:4d:d4:27:e0:f4:77:56:b0:c3:33:
         8b:69:e8:4e:1f:aa:42:8f:cd:5e:59:ca:f2:64:5b:73:50:07:
         9e:fd:16:c3:e4:e6:e8:db:3a:7d:9b:48:38:19:c6:6a:66:b2:
         64:d4:95:bb:e3:cd:e4:9e:80:75:84:55:8f:d4:99:fb:88:13:
         a2:25:78:cd:72:b9:10:f8:33:88:75:13:2d:6e:c7:1c:5c:ea:
         5e:9e:68:74:c5:39:cb:22:4f:b4:c1:04:df:d1:b9:76:ed:c0:
         0f:c5:30:46:bf:ca:71:63:90:cc:4b:39:d8:da:b1:c3:80:6c:
         f6:8d:85:b7:eb:f2:e3:51:e1:38:6d:61:2c:3e:58:9e:5f:8e:
         97:34:12:7f:ce:b7:f7:00:e2:27:47:4f:5c:00:83:2a:6d:ec:
         00:8d:4e:ee:08:5b:66:30:a4:52:79:33:c8:4f:7f:5e:1c:fa:
         70:43:53:53:14:a2:f5:00:04:6d:c4:8b:1b:2e:40:2f:97:66:
         7d:eb:4e:a4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfYCKyXnoYsaZr8iXSj99IoNQZ6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNFRDdGM0Q1RjQ1NDU4RjM3NTRFQzc1NUI2OTUxREU2
RDE5Q0RERTAeFw0yNDAyMDcyMzAyMTdaFw0yNTAyMDUyMzA3MTdaMDMxMTAvBgNV
BAMTKERCNTNFMDFFRDFDRjg2OTRFMURCMEJGREI0OEQwNEFDMzcyOEY0QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEGry0N1INUhImkcy4xsgZY8z
+t0BDcJcq6Xl98+WCxtCnNCeIRDONpnQ2TkqnusOXhHQNhrQXBLlep2ru08ll/3N
kKoDcsnRN3MxjuiQtDyN8vkoZN+srg2FRMZ9MDTvkagjrUaph4NdPDal1Q5LEX34
U6hOzQUwZWgKeFL04MawB7K7Awn+6XDuYZFdcF2QtltkFDnIkId//8J/rxzJ8Lp9
v+TccQcXeC1WWmPL8tOR0cOn6ywVxun50sRiSpdt64RpBYSiFUj0nXeM5Sa0m3qS
bvOiZb6MoZaqavtzYEOoVVmUgrdlJUwhNlOFs6SLqSozkmAorHaKDipB7OkNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU21PgHtHPhpTh2wv9tI0ErDco9KcwHwYDVR0j
BBgwFoAUrO1/PV9FRY83VOx1W2lR3m0Zzd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMC9BQ0VEN0YzRDVGNDU0NThGMzc1NEVDNzU1QjY5NTFERTZEMTlDRERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FDRUQ3RjNENUY0NTQ1OEYz
NzU0RUM3NTVCNjk1MURFNkQxOUNEREUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzAv
MzEzODM5MmUzODM0MmUzMTM0MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvVSQMA0GCSqGSIb3DQEBCwUAA4IBAQAOGkI49yt7
G5rk9UhHwGd6VlU+lcm0UWMxhQqm9vSyU7sf3A98g4AppNyAeIOdZSZAI+stAhPq
ACR5sv4hLU3UJ+D0d1awwzOLaehOH6pCj81eWcryZFtzUAee/RbD5Obo2zp9m0g4
GcZqZrJk1JW7483knoB1hFWP1Jn7iBOiJXjNcrkQ+DOIdRMtbsccXOpenmh0xTnL
Ik+0wQTf0bl27cAPxTBGv8pxY5DMSznY2rHDgGz2jYW36/LjUeE4bWEsPlieX46X
NBJ/zrf3AOInR09cAIMqbewAjU7uCFtmMKRSeTPIT39eHPpwQ1NTFKL1AARtxIsb
LkAvl2Z9606k
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org