Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f31392d3230203d3e203238333238.roa
File:                     3138392e31342e3139322e302f31392d3230203d3e203238333238.roa (raw, json)
Hash identifier:          vHbSzn0Z5ES4D5L3/j2eXgufwqiojOHo5KzPurc8nRo=
Subject key identifier:   0D:B5:B5:7F:62:4C:56:85:D1:A4:86:87:BA:7E:9F:78:21:61:61:C9
Certificate issuer:       /CN=8E443FD1F05F76E9C306FEF6685D2F4527493550
Certificate serial:       54CC070F26F7836D9FA0BF29F3D1F7107954973D
Authority key identifier: 8E:44:3F:D1:F0:5F:76:E9:C3:06:FE:F6:68:5D:2F:45:27:49:35:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f31392d3230203d3e203238333238.roa
Signing time:             Mon 25 Mar 2024 14:59:11 +0000
ROA not before:           Mon 25 Mar 2024 14:54:11 +0000
ROA not after:            Mon 24 Mar 2025 14:59:11 +0000
asID:                     28328
IP address blocks:        189.14.192.0/19 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cc:07:0f:26:f7:83:6d:9f:a0:bf:29:f3:d1:f7:10:79:54:97:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E443FD1F05F76E9C306FEF6685D2F4527493550
        Validity
            Not Before: Mar 25 14:54:11 2024 GMT
            Not After : Mar 24 14:59:11 2025 GMT
        Subject: CN=0DB5B57F624C5685D1A48687BA7E9F78216161C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:f1:77:39:99:f8:d5:dc:54:5b:99:51:1f:
                    3e:9c:03:25:5f:55:0c:4b:2b:f8:f6:32:11:87:1b:
                    7e:a9:da:5b:54:1e:9a:f1:aa:22:6c:4d:8f:90:17:
                    2c:c1:7a:aa:4f:57:91:27:8e:83:c7:9a:88:82:bb:
                    04:6d:23:7d:88:a9:96:3c:46:2d:48:c2:e2:59:e4:
                    eb:48:8a:5c:47:dc:16:92:d6:2f:5f:58:6c:d7:c1:
                    8e:a3:ba:4d:32:09:20:a2:eb:65:63:62:d6:b0:f7:
                    e7:f6:b1:a7:e3:54:3f:59:0b:32:e7:26:2f:ce:1b:
                    a5:1a:1c:0b:0d:f6:d7:41:af:49:ac:69:f2:18:85:
                    07:88:bf:a0:f2:3b:6d:2b:7d:2b:30:d5:b8:fd:7b:
                    25:e3:f8:9a:de:7f:b1:40:6b:25:6f:a1:a3:db:a2:
                    82:d3:e8:29:d2:b5:23:93:42:81:46:e3:30:ad:59:
                    c3:e4:66:5a:0d:9e:2a:dd:7a:da:fc:63:64:72:4b:
                    1e:cf:77:ce:eb:85:8d:80:79:e4:8b:0b:dc:d9:04:
                    8a:5e:00:55:c8:b6:e3:ff:a0:86:eb:5c:cb:32:4d:
                    8f:28:cd:32:fd:4d:d9:35:58:d1:b9:12:bd:e5:72:
                    58:59:68:b6:6f:c2:25:c0:19:bd:51:29:7a:1d:d3:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B5:B5:7F:62:4C:56:85:D1:A4:86:87:BA:7E:9F:78:21:61:61:C9
            X509v3 Authority Key Identifier:
                keyid:8E:44:3F:D1:F0:5F:76:E9:C3:06:FE:F6:68:5D:2F:45:27:49:35:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f31392d3230203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:85:3a:d1:22:da:cb:37:1d:34:fa:95:22:a4:6e:0e:6e:b9:
         a6:b1:84:53:29:cb:98:79:3f:f1:f4:5c:35:ca:27:ae:43:c3:
         5c:b9:f3:9f:5b:40:9a:66:1b:1b:c8:5b:7c:12:4a:38:78:b6:
         76:c1:d2:19:39:c5:c3:32:7b:4c:58:7d:2c:ea:45:4b:98:9b:
         a1:12:50:86:52:8b:fa:f1:34:e8:f3:d7:86:18:f4:ff:44:4a:
         aa:d2:4c:7a:76:d0:a5:ad:9d:ee:e4:8a:b1:43:61:21:d8:55:
         aa:81:c9:96:03:62:53:0a:cc:f5:f1:e9:bf:17:6a:e2:ac:9a:
         c3:09:16:6d:d5:21:5f:df:ac:a6:09:3a:df:8c:16:81:67:22:
         6b:f7:5a:8d:b3:84:3d:40:b2:58:2d:c2:a8:f7:78:d4:aa:38:
         4a:13:9d:83:4e:ab:0c:fa:ac:2f:0d:ed:09:3d:7e:8d:77:3f:
         ad:a9:73:09:48:28:b7:93:a9:9a:14:fe:26:42:21:d8:42:92:
         34:5f:31:41:e0:cc:46:35:ef:f0:4a:1f:e0:b8:97:6b:50:e8:
         6c:50:66:4a:0d:f3:70:88:ba:98:d0:27:a3:e5:8a:43:71:db:
         8e:29:d4:85:0a:cc:39:c2:67:0e:1a:5d:94:e4:47:57:19:d1:
         da:d5:ca:3b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUVMwHDyb3g22foL8p89H3EHlUlz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU0NDNGRDFGMDVGNzZFOUMzMDZGRUY2Njg1RDJGNDUy
NzQ5MzU1MDAeFw0yNDAzMjUxNDU0MTFaFw0yNTAzMjQxNDU5MTFaMDMxMTAvBgNV
BAMTKDBEQjVCNTdGNjI0QzU2ODVEMUE0ODY4N0JBN0U5Rjc4MjE2MTYxQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oPF3OZn41dxUW5lRHz6cAyVf
VQxLK/j2MhGHG36p2ltUHprxqiJsTY+QFyzBeqpPV5EnjoPHmoiCuwRtI32IqZY8
Ri1IwuJZ5OtIilxH3BaS1i9fWGzXwY6juk0yCSCi62VjYtaw9+f2safjVD9ZCzLn
Ji/OG6UaHAsN9tdBr0msafIYhQeIv6DyO20rfSsw1bj9eyXj+Jref7FAayVvoaPb
ooLT6CnStSOTQoFG4zCtWcPkZloNnirdetr8Y2RySx7Pd87rhY2AeeSLC9zZBIpe
AFXItuP/oIbrXMsyTY8ozTL9Tdk1WNG5Er3lclhZaLZvwiXAGb1RKXod02x5AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUDbW1f2JMVoXRpIaHun6feCFhYckwHwYDVR0j
BBgwFoAUjkQ/0fBfdunDBv72aF0vRSdJNVAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YV1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZI
LzAvOEU0NDNGRDFGMDVGNzZFOUMzMDZGRUY2Njg1RDJGNDUyNzQ5MzU1MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84RTQ0M0ZEMUYwNUY3NkU5QzMw
NkZFRjY2ODVEMkY0NTI3NDkzNTUwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
V1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZILzAvMzEz
ODM5MmUzMTM0MmUzMTM5MzIyZTMwMmYzMTM5MmQzMjMwMjAzZDNlMjAzMjM4MzMz
MjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQFvQ7AMA0GCSqGSIb3DQEBCwUAA4IBAQBShTrRItrLNx00
+pUipG4ObrmmsYRTKcuYeT/x9Fw1yieuQ8NcufOfW0CaZhsbyFt8Eko4eLZ2wdIZ
OcXDMntMWH0s6kVLmJuhElCGUov68TTo89eGGPT/REqq0kx6dtClrZ3u5IqxQ2Eh
2FWqgcmWA2JTCsz18em/F2rirJrDCRZt1SFf36ymCTrfjBaBZyJr91qNs4Q9QLJY
LcKo93jUqjhKE52DTqsM+qwvDe0JPX6Ndz+tqXMJSCi3k6maFP4mQiHYQpI0XzFB
4MxGNe/wSh/guJdrUOhsUGZKDfNwiLqY0Cej5YpDcduOKdSFCsw5wmcOGl2U5EdX
GdHa1co7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org