Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3234203d3e203238333630.roa
File:                     3138392e37362e3232342e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier:          TxuMPVT8q/ZTLyKo6KpnHze2pbjIjJoBEvAFXr5MAMU=
Subject key identifier:   25:0D:B2:60:CB:99:41:A2:40:38:FE:71:A7:FB:44:67:2A:95:49:5B
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       50F9DA19DAF3164E5175BFDFB0C2A537C30C5D23
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:06:21 +0000
ROA not before:           Sat 06 Apr 2024 03:01:21 +0000
ROA not after:            Sat 05 Apr 2025 03:06:21 +0000
asID:                     28360
IP address blocks:        189.76.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f9:da:19:da:f3:16:4e:51:75:bf:df:b0:c2:a5:37:c3:0c:5d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:01:21 2024 GMT
            Not After : Apr  5 03:06:21 2025 GMT
        Subject: CN=250DB260CB9941A24038FE71A7FB44672A95495B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:75:4f:88:9b:29:08:d8:99:be:8f:60:fb:
                    cf:e8:d5:9a:98:d2:a3:ff:4d:58:51:12:c5:77:09:
                    61:67:01:c5:9e:9a:b4:ed:00:50:58:25:03:32:d3:
                    6f:5d:92:6a:3e:67:a6:af:f7:a1:1f:a0:a9:fe:fd:
                    64:0d:fd:31:38:1d:6e:e6:c3:74:f5:8e:b9:59:c0:
                    a9:12:fb:e3:06:68:00:9f:46:03:21:29:1c:7e:d9:
                    22:61:5e:51:0b:bc:48:1c:44:ad:41:29:1f:30:f6:
                    2f:5e:96:04:92:24:97:e9:d4:fd:59:df:4b:e0:3b:
                    46:f8:db:87:a9:60:bd:79:dd:3a:e0:c1:82:f0:09:
                    15:b5:93:a6:88:ed:04:b4:ff:4b:0f:99:a2:21:2d:
                    9e:83:40:d1:81:93:11:0e:0e:74:7a:b3:ae:1b:d3:
                    91:4b:eb:50:8c:85:aa:d0:3e:8d:93:b4:6c:8c:24:
                    0c:9a:94:61:b8:f6:df:a8:16:fe:14:63:a7:6d:16:
                    74:41:dc:84:ed:25:7b:84:70:42:aa:bf:4b:46:c1:
                    41:e4:b5:65:e7:36:03:c6:37:67:a0:d5:8f:92:f2:
                    37:d5:5f:7d:ae:b2:da:84:9e:b4:a4:89:c8:26:66:
                    13:d4:38:5a:41:c9:50:7e:c4:37:ae:2b:fe:8c:99:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0D:B2:60:CB:99:41:A2:40:38:FE:71:A7:FB:44:67:2A:95:49:5B
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:62:6f:f1:99:5a:ed:46:58:e5:9e:dc:66:c2:fb:0d:cd:43:
         08:d1:7b:f3:f7:b4:c7:d7:32:90:4a:fe:e6:65:cf:40:fe:30:
         05:6d:07:fc:c9:0d:6b:7e:95:af:ac:8c:f0:44:37:c3:0a:f6:
         05:86:ae:41:02:c1:50:85:99:13:06:4d:e4:e3:a0:3c:e6:d8:
         e4:ee:a0:d6:59:0c:cd:26:c5:d7:21:20:3b:02:92:3c:4a:08:
         39:f8:91:c7:59:89:a3:db:1f:f7:e9:28:32:f9:e2:5a:a5:c7:
         9b:72:4d:dc:98:2e:eb:cd:47:9f:8d:7c:30:ff:30:18:e5:0b:
         16:33:c5:a8:45:20:58:2b:8e:c4:42:49:17:c3:ce:65:1c:b9:
         63:dd:ec:68:b8:cb:38:df:66:de:2a:5c:23:14:16:dc:d1:83:
         ad:fb:14:d9:e1:00:9d:95:7d:55:61:c8:5c:29:aa:58:34:86:
         a8:0d:2b:76:10:13:8e:aa:be:76:a9:b2:6f:2f:dd:10:5b:a8:
         70:61:56:1b:57:f6:f3:15:01:79:fa:0e:74:75:c8:e7:0e:d8:
         b6:bc:fa:4f:33:86:76:f1:e2:20:d6:3e:c2:62:a1:82:16:c3:
         95:db:65:6c:ed:db:86:dd:bc:7b:f1:a7:00:49:14:64:06:1a:
         ba:87:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org