Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa (raw, json)
Hash identifier:          hWI85vhCUza2dWOf4c6TcalIMPjJzCdUPyfMr3nW+i0=
Subject key identifier:   99:DB:25:35:D2:E1:47:C1:36:04:0D:8C:75:9C:35:D8:DE:40:12:C7
Certificate issuer:       /CN=2484B14E03EFF793036E555AD18ED34F764A758B
Certificate serial:       689E02C2AB09929593913403908CF5AA4A590321
Authority key identifier: 24:84:B1:4E:03:EF:F7:93:03:6E:55:5A:D1:8E:D3:4F:76:4A:75:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2484B14E03EFF793036E555AD18ED34F764A758B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
Signing time:             Tue 02 Apr 2024 15:05:59 +0000
ROA not before:           Tue 02 Apr 2024 15:00:59 +0000
ROA not after:            Tue 01 Apr 2025 15:05:59 +0000
asID:                     270579
IP address blocks:        189.126.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9e:02:c2:ab:09:92:95:93:91:34:03:90:8c:f5:aa:4a:59:03:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2484B14E03EFF793036E555AD18ED34F764A758B
        Validity
            Not Before: Apr  2 15:00:59 2024 GMT
            Not After : Apr  1 15:05:59 2025 GMT
        Subject: CN=99DB2535D2E147C136040D8C759C35D8DE4012C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:67:ac:ef:71:31:b0:8d:0f:25:49:13:fd:
                    7d:3e:01:f5:d5:a3:6b:ee:00:ef:0c:fc:b4:bd:89:
                    71:77:f9:61:4d:d9:13:39:f3:fb:00:75:d9:c1:b4:
                    ec:36:60:26:61:b5:7e:e5:36:16:8b:4b:a3:8a:32:
                    17:a1:d5:19:18:6f:21:51:8e:6d:da:76:5b:61:cf:
                    03:55:06:c4:65:10:05:fb:ee:b5:bb:6a:dc:b5:0c:
                    27:f2:83:8d:11:04:26:05:6d:8d:8b:ba:64:c1:47:
                    30:df:7c:03:5f:48:1d:97:14:b1:21:e8:42:08:7c:
                    32:d1:b1:12:76:a9:f8:c2:02:40:a5:18:f8:19:ba:
                    08:6f:43:4e:dd:f6:00:21:e6:dd:e3:8d:6c:3f:a3:
                    71:4a:3c:0f:79:80:0d:1c:22:48:c9:3f:a0:ae:8b:
                    d7:1c:8a:50:df:76:3b:a3:34:bf:f9:ed:dd:48:9b:
                    5d:5b:f5:8a:75:48:5d:89:f7:35:1d:a9:5a:72:b2:
                    e1:2d:d4:45:b8:b6:01:65:95:5b:02:81:20:d0:12:
                    50:9e:68:6f:8e:b7:50:d0:8b:0b:08:13:e3:ad:50:
                    4e:40:8e:cc:81:8e:68:b7:3e:5b:28:7e:6b:a2:1b:
                    8e:bd:8e:27:16:28:85:91:91:a6:11:e7:ee:6c:29:
                    5e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DB:25:35:D2:E1:47:C1:36:04:0D:8C:75:9C:35:D8:DE:40:12:C7
            X509v3 Authority Key Identifier:
                keyid:24:84:B1:4E:03:EF:F7:93:03:6E:55:5A:D1:8E:D3:4F:76:4A:75:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/2484B14E03EFF793036E555AD18ED34F764A758B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2484B14E03EFF793036E555AD18ED34F764A758B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:58:7a:65:8f:03:9a:ae:bf:0d:ed:53:88:ab:f0:76:17:b6:
         83:a0:c5:56:f9:a4:6d:8e:0f:36:d0:18:f1:d8:45:ac:06:d3:
         d0:96:28:b0:2e:50:4f:34:8d:11:19:a4:2e:56:9b:85:c5:98:
         31:ea:17:7b:29:02:93:c1:38:a1:fa:1b:31:71:b3:1c:6e:48:
         8f:6e:70:4b:08:de:f3:8b:e8:8b:d5:cd:16:44:31:56:72:16:
         27:aa:ee:ce:f2:6f:54:40:23:fe:39:4b:d4:f5:0e:63:aa:d7:
         e2:23:68:fd:9c:fa:2f:d4:5b:d7:4e:46:70:52:34:ef:22:5d:
         4d:b7:6f:fb:83:40:4b:03:b5:b9:97:3f:b4:1a:7e:8f:03:46:
         72:d4:0f:21:20:df:05:d7:d5:3f:0f:ba:1a:6a:59:2b:d1:2a:
         9c:a0:ec:f5:99:14:3c:0e:a3:22:ea:3f:16:b9:c0:57:7b:63:
         7c:f1:76:d7:5b:d8:ef:f0:eb:e2:3a:48:10:0c:cc:c6:a9:22:
         43:9e:ac:8a:53:f1:7d:e3:fc:ce:a0:17:a0:0a:3e:8a:52:7d:
         43:36:c5:fc:c3:da:5a:88:2d:dd:29:46:30:1f:bb:4e:6f:d5:
         25:99:70:c6:c0:67:9a:0f:55:b0:f6:86:0b:83:72:4d:fd:20:
         62:b2:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org