Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          qqH2yhwpEtZjybq4bbFTs3I/fkL6+L2xdow5/F1aZb0=
Subject key identifier:   F6:CA:03:C7:CB:60:4B:CF:13:E7:77:02:6A:D4:72:8F:91:28:88:F7
Certificate issuer:       /CN=2484B14E03EFF793036E555AD18ED34F764A758B
Certificate serial:       115AE4802EA3FA354A131463F91F5CF4B8E3C7
Authority key identifier: 24:84:B1:4E:03:EF:F7:93:03:6E:55:5A:D1:8E:D3:4F:76:4A:75:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2484B14E03EFF793036E555AD18ED34F764A758B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa
Signing time:             Tue 02 Apr 2024 15:06:05 +0000
ROA not before:           Tue 02 Apr 2024 15:01:05 +0000
ROA not after:            Tue 01 Apr 2025 15:06:05 +0000
asID:                     270579
IP address blocks:        189.126.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5a:e4:80:2e:a3:fa:35:4a:13:14:63:f9:1f:5c:f4:b8:e3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2484B14E03EFF793036E555AD18ED34F764A758B
        Validity
            Not Before: Apr  2 15:01:05 2024 GMT
            Not After : Apr  1 15:06:05 2025 GMT
        Subject: CN=F6CA03C7CB604BCF13E777026AD4728F912888F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:37:8a:14:92:63:87:22:f3:cf:53:ed:46:0f:
                    90:6f:d0:d2:d2:ec:91:94:7b:54:78:ea:20:ea:74:
                    c5:48:e9:23:3e:fa:9c:40:e8:ec:30:1b:b5:7e:d4:
                    7f:af:47:7d:e4:1b:7b:2e:c1:28:4d:e0:a4:ef:25:
                    8a:02:7f:c1:9d:5b:7a:30:37:84:b5:63:fa:af:ac:
                    0a:d7:2d:06:f8:86:d1:d8:4c:f9:82:7a:32:d9:bb:
                    be:7c:c2:46:5e:3b:44:93:5a:3a:c6:4a:39:a5:aa:
                    c0:4f:cb:51:81:9f:fc:88:3f:d3:ec:6d:50:be:43:
                    1f:57:48:de:5c:86:3f:15:20:60:08:9c:8e:3d:75:
                    51:aa:cb:89:a3:4b:5a:a6:bb:6a:99:24:89:a3:a3:
                    7a:a1:af:53:7f:47:ef:79:d2:76:86:2e:54:0c:f8:
                    1b:d0:4a:85:dd:33:94:98:af:8d:80:f1:c2:bf:a1:
                    e7:21:93:38:73:76:d7:03:c9:2a:b8:cd:c7:59:ad:
                    cb:9e:56:27:52:77:fa:ed:3b:89:57:0e:c9:30:ca:
                    be:0c:8b:45:f4:fa:8d:7e:74:b7:fc:38:18:bb:8c:
                    81:11:45:5c:f8:b0:0b:fe:2f:b4:43:a5:2b:f6:c4:
                    9e:17:b0:c5:1c:82:72:14:e5:d8:bc:65:4d:87:1c:
                    dc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:03:C7:CB:60:4B:CF:13:E7:77:02:6A:D4:72:8F:91:28:88:F7
            X509v3 Authority Key Identifier:
                keyid:24:84:B1:4E:03:EF:F7:93:03:6E:55:5A:D1:8E:D3:4F:76:4A:75:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/2484B14E03EFF793036E555AD18ED34F764A758B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2484B14E03EFF793036E555AD18ED34F764A758B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:73:16:a5:56:67:84:1b:26:64:b3:95:a3:54:9d:4f:6c:68:
         50:c3:74:7f:2e:7d:a8:79:f2:2f:fd:47:0f:57:4b:d8:fc:31:
         73:d0:2d:90:6e:c7:f2:9e:ac:e7:01:40:63:09:93:36:02:8a:
         c0:84:f3:57:db:85:c5:16:d2:20:6d:4f:48:d4:d6:49:14:67:
         c1:f9:39:1c:00:0e:ac:d9:2b:04:3d:04:a3:f2:c5:96:62:28:
         4d:b4:43:f1:7b:53:9c:f9:e8:a5:ea:fe:41:a3:e8:63:84:60:
         6d:a0:2d:c7:da:7e:08:eb:2c:5b:11:05:0f:2d:76:2e:21:b6:
         df:68:e5:94:8a:dc:b5:58:b2:da:de:16:cc:f6:a7:d6:6b:4c:
         88:37:7a:2b:4d:ab:60:ce:7e:c3:25:a0:d1:40:43:36:ff:45:
         6a:00:cb:21:03:ba:ae:29:bb:dd:04:34:71:dc:22:10:18:b2:
         2c:26:ac:be:79:89:70:57:77:1f:82:e2:a9:00:71:c9:de:ff:
         82:e0:fd:62:c3:7e:ef:57:9b:41:5a:29:7a:a4:8a:98:9a:c4:
         57:6d:be:b3:1a:50:66:b7:55:ff:77:f3:57:b4:fb:60:fb:19:
         0c:58:73:bd:27:8a:fb:f3:de:dc:b9:7d:13:95:8a:a4:fd:df:
         f2:d0:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org