Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          cVJBf63KJNeCR0Bc44XCPiR215UrYobNmDpILhJnANE=
Subject key identifier:   31:51:DC:03:03:AE:9D:28:2E:1D:CB:CE:D2:4E:9D:30:33:68:DF:5A
Certificate issuer:       /CN=2484B14E03EFF793036E555AD18ED34F764A758B
Certificate serial:       763D09652B6EF6935A2390BCC1D8D1766A418CCE
Authority key identifier: 24:84:B1:4E:03:EF:F7:93:03:6E:55:5A:D1:8E:D3:4F:76:4A:75:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2484B14E03EFF793036E555AD18ED34F764A758B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
Signing time:             Tue 02 Apr 2024 15:06:01 +0000
ROA not before:           Tue 02 Apr 2024 15:01:01 +0000
ROA not after:            Tue 01 Apr 2025 15:06:01 +0000
asID:                     270579
IP address blocks:        189.126.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:09:65:2b:6e:f6:93:5a:23:90:bc:c1:d8:d1:76:6a:41:8c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2484B14E03EFF793036E555AD18ED34F764A758B
        Validity
            Not Before: Apr  2 15:01:01 2024 GMT
            Not After : Apr  1 15:06:01 2025 GMT
        Subject: CN=3151DC0303AE9D282E1DCBCED24E9D303368DF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:cc:99:7d:3f:65:e1:c6:f1:69:87:2a:d5:
                    a8:6d:11:59:3a:d0:4f:0d:70:61:2a:a4:f1:28:88:
                    67:b8:37:e8:89:64:0e:d7:99:22:c1:4b:3f:16:75:
                    89:8c:96:d7:9e:e1:f9:38:ee:56:08:1b:9e:eb:98:
                    9f:32:13:e4:55:9b:fa:81:6c:38:78:de:92:f0:3a:
                    e6:76:19:70:c5:bd:6c:a6:71:d1:b7:35:79:c4:6b:
                    a2:88:6f:d2:47:56:ec:a2:3d:76:10:4d:74:35:03:
                    4f:ee:b9:86:59:29:83:fb:5e:cb:1c:77:1d:a8:88:
                    e7:a2:57:48:6b:f0:f3:e1:d5:f1:45:00:b7:b5:5e:
                    ea:68:80:aa:75:97:07:10:fe:5e:8b:99:f6:fc:5c:
                    da:0f:a2:0e:ad:4d:10:44:fe:45:b8:0e:da:31:e4:
                    52:68:43:9c:ed:a5:ff:7c:c5:65:05:36:e8:84:94:
                    8b:fd:6c:ad:41:1c:72:3e:1a:b2:71:e3:7b:e0:20:
                    40:a8:92:c2:76:44:6e:93:12:f2:a1:66:d4:31:35:
                    20:c1:aa:f7:67:79:e8:b3:f9:87:f8:f2:07:ec:64:
                    fa:86:2a:df:60:55:27:6c:c9:e2:1b:57:fd:e9:dd:
                    d2:97:ab:1e:33:8c:3c:14:8c:b3:29:b4:8c:13:21:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:DC:03:03:AE:9D:28:2E:1D:CB:CE:D2:4E:9D:30:33:68:DF:5A
            X509v3 Authority Key Identifier:
                keyid:24:84:B1:4E:03:EF:F7:93:03:6E:55:5A:D1:8E:D3:4F:76:4A:75:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/2484B14E03EFF793036E555AD18ED34F764A758B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2484B14E03EFF793036E555AD18ED34F764A758B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:d8:94:36:6b:bd:4e:07:a6:3b:05:f5:f3:c1:00:5e:41:
         a6:fd:4d:ed:a8:ae:a4:98:20:ce:70:12:17:58:d1:24:8f:25:
         e1:1b:a4:70:ed:cb:c5:1e:3d:be:f1:30:f1:61:63:6e:9a:32:
         89:4f:67:41:48:f7:0e:0a:b0:ca:27:8f:dd:f2:20:f9:34:55:
         5b:a1:7d:2e:11:63:ee:48:32:4e:71:75:73:22:7c:1e:3d:6b:
         7c:8a:25:d2:77:02:d4:91:cc:bd:76:1a:d1:b0:90:92:57:04:
         ba:8a:2e:2a:76:e9:72:7d:4a:d7:b2:4e:25:2e:b0:9c:26:e8:
         1a:fc:d6:5f:11:3b:63:5a:3b:2e:51:db:30:ee:fc:94:57:7b:
         5e:42:0c:09:9f:f5:71:14:8a:6c:ce:8f:61:88:94:a8:77:a9:
         ad:b6:71:37:a7:d3:8c:ff:95:e6:82:f7:ad:29:00:8c:93:83:
         69:b6:15:26:cd:67:a8:28:8e:d4:53:79:75:46:ce:12:1c:bc:
         c5:c2:51:14:16:c4:ca:37:c6:cf:ea:2c:2f:9e:98:e6:d2:08:
         7f:4c:c7:a3:dc:37:f1:07:8e:d8:83:ac:5a:fd:f0:d0:40:66:
         a2:3e:8d:5c:f0:49:85:09:01:79:aa:10:db:66:41:e3:73:d7:
         c8:39:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org