Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/3138392e382e3132302e302f32322d3234203d3e20323730373332.roa
File:                     3138392e382e3132302e302f32322d3234203d3e20323730373332.roa (raw, json)
Hash identifier:          ch0x2nOFZoKFswXllo+BoME0lCQ9t8wGrv9rzKG2LjE=
Subject key identifier:   02:40:2B:71:E2:C5:5A:6B:33:90:85:68:E2:94:23:1B:B1:B3:E0:21
Certificate issuer:       /CN=B8C512507A29EDA5D36B9B84C04F6AEC61017290
Certificate serial:       2AD205B5B2852F42C419DD28C36FE11D793D1FCA
Authority key identifier: B8:C5:12:50:7A:29:ED:A5:D3:6B:9B:84:C0:4F:6A:EC:61:01:72:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8C512507A29EDA5D36B9B84C04F6AEC61017290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/3138392e382e3132302e302f32322d3234203d3e20323730373332.roa
Signing time:             Wed 10 Apr 2024 13:20:18 +0000
ROA not before:           Wed 10 Apr 2024 13:15:18 +0000
ROA not after:            Wed 09 Apr 2025 13:20:18 +0000
asID:                     270732
IP address blocks:        189.8.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d2:05:b5:b2:85:2f:42:c4:19:dd:28:c3:6f:e1:1d:79:3d:1f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C512507A29EDA5D36B9B84C04F6AEC61017290
        Validity
            Not Before: Apr 10 13:15:18 2024 GMT
            Not After : Apr  9 13:20:18 2025 GMT
        Subject: CN=02402B71E2C55A6B33908568E294231BB1B3E021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:50:fd:64:ce:ac:13:c8:00:bd:a6:e7:d8:87:
                    cf:16:01:3b:24:68:3a:c8:53:d6:6d:c0:06:69:b1:
                    3b:c6:10:f8:e6:b8:c2:87:58:b3:5c:a9:61:40:f8:
                    64:2f:93:da:41:e5:53:29:94:d6:af:49:95:fb:48:
                    d1:92:67:85:09:cc:9e:cc:7c:fc:72:95:7c:3e:2f:
                    4c:b7:15:81:d8:75:c4:f2:c2:bc:94:c6:18:19:2f:
                    e5:51:d3:e6:5e:82:a9:20:db:27:cd:f3:30:e9:90:
                    aa:73:4f:93:1b:14:fc:2e:2f:75:ed:c6:ab:f8:cc:
                    f2:a3:74:be:b6:9e:15:8c:01:45:5e:62:b4:01:47:
                    20:d1:e7:76:89:d6:17:ef:45:88:32:06:47:9f:70:
                    46:fd:75:96:02:13:dc:44:11:01:5e:c5:87:bc:07:
                    b8:71:75:68:05:8b:69:a3:60:34:85:c2:8c:e5:c5:
                    26:aa:8a:ec:96:e6:51:f9:87:74:f7:14:3a:d2:f2:
                    5e:91:c4:38:da:d2:64:d9:a9:5d:7f:a1:18:88:c6:
                    f9:b9:63:55:e0:0c:2f:e8:f5:14:96:15:6c:8a:d0:
                    e0:15:f8:1b:98:1d:4a:02:ba:3c:a4:7f:69:32:66:
                    e2:01:95:4e:3d:c6:f8:8d:74:fe:31:73:e8:ff:e0:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:40:2B:71:E2:C5:5A:6B:33:90:85:68:E2:94:23:1B:B1:B3:E0:21
            X509v3 Authority Key Identifier:
                keyid:B8:C5:12:50:7A:29:ED:A5:D3:6B:9B:84:C0:4F:6A:EC:61:01:72:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/B8C512507A29EDA5D36B9B84C04F6AEC61017290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8C512507A29EDA5D36B9B84C04F6AEC61017290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/3138392e382e3132302e302f32322d3234203d3e20323730373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:7d:e2:62:06:2a:ea:63:db:f9:22:14:5e:7a:50:27:a3:a1:
         4c:fa:ce:25:85:19:5e:2c:0b:77:08:6a:63:6e:7a:24:06:45:
         c7:f5:bf:56:0e:89:21:8d:31:71:d8:2d:d8:21:61:40:a8:dd:
         64:26:25:20:0a:46:06:11:d5:fb:b3:69:bf:8e:17:7e:b4:31:
         24:b2:3b:bd:33:01:d0:0c:f7:a1:fe:9b:1a:33:81:40:6d:fb:
         0c:b0:77:64:83:e6:82:52:b3:d5:f2:52:df:84:c8:03:b3:6f:
         5a:11:1a:ad:42:0a:35:e0:7f:e9:11:bb:6d:a3:e1:73:e5:72:
         7d:2d:bc:b0:97:7a:82:77:a7:35:47:d4:40:9a:34:b6:85:01:
         b8:49:69:17:ae:ee:6c:2a:92:6b:2c:6b:ea:45:9e:f5:07:a2:
         1b:21:59:95:39:25:8b:3c:e4:07:03:0d:2d:3c:68:66:bc:26:
         e2:64:d2:dc:b8:60:0f:71:90:ac:6d:05:cd:b9:b4:e7:db:4f:
         70:48:2f:70:c6:42:6c:e3:dc:04:2b:25:0f:f5:a9:17:fd:85:
         74:07:f2:4b:55:fa:4a:23:4a:d5:6c:77:ca:08:f8:5a:6f:56:
         d3:4a:cd:4c:79:a9:13:92:fb:df:52:8e:95:7e:a6:1e:5c:90:
         c5:0d:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org