Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/2/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
File:                     3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa (raw, json)
Hash identifier:          RXDYjJ+Oe5but4G+xzHxrdIutOyR8GaAr+PlsreOUf4=
Subject key identifier:   07:76:99:83:30:A3:A8:1A:8B:74:5E:83:1D:05:B9:22:3F:85:50:E2
Certificate issuer:       /CN=8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B
Certificate serial:       61EE4C0A6A37D2791A77A28502454264FD8F823F
Authority key identifier: 8A:05:DB:B6:FD:BC:2D:4B:1F:AC:6D:E0:3D:77:C0:8E:13:6E:CC:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/2/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
Signing time:             Fri 21 Jul 2023 22:12:35 +0000
ROA not before:           Fri 21 Jul 2023 22:07:35 +0000
ROA not after:            Fri 19 Jul 2024 22:12:35 +0000
asID:                     270632
IP address blocks:        189.126.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ee:4c:0a:6a:37:d2:79:1a:77:a2:85:02:45:42:64:fd:8f:82:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B
        Validity
            Not Before: Jul 21 22:07:35 2023 GMT
            Not After : Jul 19 22:12:35 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:3b:8e:41:fb:06:32:c7:fc:f9:b5:0d:af:
                    3f:0a:26:57:d6:5b:ca:ff:c3:a5:60:d6:95:49:d2:
                    10:c8:60:cf:fd:9c:81:d5:87:cf:1b:a0:6d:a8:30:
                    9a:a6:49:06:01:7d:da:37:b1:bb:69:00:30:72:72:
                    f3:08:a1:a3:4d:71:72:f2:d0:c4:2b:80:0b:63:4f:
                    ec:5b:82:0a:b8:1b:60:01:53:ea:a4:c7:4c:f0:1a:
                    69:7f:03:f5:e1:f9:a6:1c:2a:10:90:dd:81:98:48:
                    26:f3:c6:82:b3:64:2d:0f:0d:13:78:8b:eb:8e:4f:
                    73:e0:42:25:74:4f:bb:9a:29:e7:3c:ba:a3:f8:76:
                    81:48:db:4f:f3:c5:5e:c2:51:df:7c:8d:35:0c:c4:
                    e2:d4:5a:a5:90:93:98:35:ea:26:b3:1f:82:a9:21:
                    b1:a3:6c:36:91:34:17:f3:71:5f:46:5f:f4:e4:c9:
                    94:5a:41:1c:82:d5:91:7e:3c:c1:d3:91:79:ba:8f:
                    be:38:f9:c1:a1:13:6d:75:6c:e6:a2:b3:33:da:97:
                    3b:64:14:da:ba:9f:98:20:17:78:43:ff:fb:3f:13:
                    bd:ce:f6:3e:26:b3:9e:78:d8:12:b4:ba:b2:d0:b6:
                    95:16:03:72:f0:13:77:16:b1:50:b6:7c:88:c0:6e:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:76:99:83:30:A3:A8:1A:8B:74:5E:83:1D:05:B9:22:3F:85:50:E2
            X509v3 Authority Key Identifier:
                keyid:8A:05:DB:B6:FD:BC:2D:4B:1F:AC:6D:E0:3D:77:C0:8E:13:6E:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/2/8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/2/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:98:77:90:2c:c4:98:09:7e:bc:82:ad:3b:b3:cd:61:2f:f8:
         c1:49:c2:93:7c:0a:06:3a:b9:12:75:32:2f:ee:c2:7d:9d:e7:
         ad:02:9b:40:a5:12:bd:39:d9:b7:91:b2:3e:a9:18:b1:ad:cb:
         64:b3:35:5b:94:e9:e3:bd:71:db:e5:18:b4:32:80:41:a9:10:
         99:26:06:e1:a1:eb:8d:f5:30:cf:ec:48:95:2c:50:b0:d7:24:
         c3:b9:22:37:e4:b3:4e:f4:c9:ab:d9:dc:0d:37:b2:65:ef:2f:
         7b:20:9e:59:6f:56:ce:39:3d:72:8c:42:a8:23:cf:96:d2:3b:
         95:64:fe:57:8b:b6:d7:65:cd:7a:6d:45:aa:b0:c7:c8:fd:fc:
         39:3e:b0:ae:0d:83:cd:6d:62:af:24:05:31:71:8a:d8:73:47:
         f4:b3:c6:2c:f2:ee:67:ae:c4:14:9a:4c:4a:ed:fb:4e:9e:a3:
         d7:e3:f4:a8:b0:05:6d:dc:3a:1e:a4:79:1b:81:e0:18:45:d6:
         f4:91:1e:64:70:8b:96:1b:47:c1:e7:fa:49:49:e9:33:15:3f:
         fb:46:ad:bf:44:e0:f3:48:fa:95:a4:31:f5:be:8e:42:52:3f:
         c4:77:ff:e8:31:5a:e2:c5:0f:3f:3d:e4:08:14:e1:09:25:a9:
         9e:34:2a:5e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUYe5MCmo30nkad6KFAkVCZP2Pgj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwNURCQjZGREJDMkQ0QjFGQUM2REUwM0Q3N0MwOEUx
MzZFQ0MxQjAeFw0yMzA3MjEyMjA3MzVaFw0yNDA3MTkyMjEyMzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREE2NzNCOEU0MUZCMDYzMkM3
RkNGOUI1MERBRjNGMEEyNjU3RDY1QkNBRkZDM0E1NjBENjk1NDlEMjEwQzg2MENG
RkQ5QzgxRDU4N0NGMUJBMDZEQTgzMDlBQTY0OTA2MDE3RERBMzdCMUJCNjkwMDMw
NzI3MkYzMDhBMUEzNEQ3MTcyRjJEMEM0MkI4MDBCNjM0RkVDNUI4MjBBQjgxQjYw
MDE1M0VBQTRDNzRDRjAxQTY5N0YwM0Y1RTFGOUE2MUMyQTEwOTBERDgxOTg0ODI2
RjNDNjgyQjM2NDJEMEYwRDEzNzg4QkVCOEU0RjczRTA0MjI1NzQ0RkJCOUEyOUU3
M0NCQUEzRjg3NjgxNDhEQjRGRjNDNTVFQzI1MURGN0M4RDM1MENDNEUyRDQ1QUE1
OTA5Mzk4MzVFQTI2QjMxRjgyQTkyMUIxQTM2QzM2OTEzNDE3RjM3MTVGNDY1RkY0
RTRDOTk0NUE0MTFDODJENTkxN0UzQ0MxRDM5MTc5QkE4RkJFMzhGOUMxQTExMzZE
NzU2Q0U2QTJCMzMzREE5NzNCNjQxNERBQkE5Rjk4MjAxNzc4NDNGRkZCM0YxM0JE
Q0VGNjNFMjZCMzlFNzhEODEyQjRCQUIyRDBCNjk1MTYwMzcyRjAxMzc3MTZCMTUw
QjY3Qzg4QzA2RURCNTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2mc7jkH7BjLH/Pm1Da8/CiZX1lvK/8OlYNaVSdIQyGDP/ZyB1YfP
G6BtqDCapkkGAX3aN7G7aQAwcnLzCKGjTXFy8tDEK4ALY0/sW4IKuBtgAVPqpMdM
8BppfwP14fmmHCoQkN2BmEgm88aCs2QtDw0TeIvrjk9z4EIldE+7minnPLqj+HaB
SNtP88VewlHffI01DMTi1FqlkJOYNeomsx+CqSGxo2w2kTQX83FfRl/05MmUWkEc
gtWRfjzB05F5uo++OPnBoRNtdWzmorMz2pc7ZBTaup+YIBd4Q//7PxO9zvY+JrOe
eNgStLqy0LaVFgNy8BN3FrFQtnyIwG7bUwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAd2mYMwo6gai3Regx0FuSI/hVDiMB8GA1UdIwQYMBaAFIoF27b9vC1LH6xt4D13
wI4TbswbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pEQUZDR01Hc2dydTFl
eURrZXkzcEhkQ1hLWWMzMlV3eTFUd3E3dkFpc2thLzIvOEEwNURCQjZGREJDMkQ0
QjFGQUM2REUwM0Q3N0MwOEUxMzZFQ0MxQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84QTA1REJCNkZEQkMyRDRCMUZBQzZERTAzRDc3QzA4RTEzNkVD
QzFCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KREFGQ0dNR3NncnUxZXlEa2V5
M3BIZENYS1ljMzJVd3kxVHdxN3ZBaXNrYS8yLzMxMzgzOTJlMzEzMjM2MmUzODMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMwMzYzMzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
vX5QMA0GCSqGSIb3DQEBCwUAA4IBAQCQmHeQLMSYCX68gq07s81hL/jBScKTfAoG
OrkSdTIv7sJ9neetAptApRK9Odm3kbI+qRixrctkszVblOnjvXHb5Ri0MoBBqRCZ
JgbhoeuN9TDP7EiVLFCw1yTDuSI35LNO9Mmr2dwNN7Jl7y97IJ5Zb1bOOT1yjEKo
I8+W0juVZP5Xi7bXZc16bUWqsMfI/fw5PrCuDYPNbWKvJAUxcYrYc0f0s8Ys8u5n
rsQUmkxK7ftOnqPX4/SosAVt3DoepHkbgeAYRdb0kR5kcIuWG0fB5/pJSekzFT/7
Rq2/RODzSPqVpDH1vo5CUj/Ed//oMVrixQ8/PeQIFOEJJameNCpe
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org