Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3138392e3131332e3230382e302f32312d3231203d3e20323632333434.roa
File:                     3138392e3131332e3230382e302f32312d3231203d3e20323632333434.roa (raw, json)
Hash identifier:          kQkfdE3hJryCFrX7kk6XAiIlGmLcp3Zu4S4QCwu72VA=
Subject key identifier:   78:34:88:9A:3A:A6:F7:69:04:64:5E:0B:CA:61:14:49:1B:5B:F3:18
Certificate issuer:       /CN=C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3
Certificate serial:       566DDFDFEB8E1681BEF3E1003FF0F4641B1866C9
Authority key identifier: C2:C1:FB:01:62:2C:A7:E7:2A:68:D5:CB:55:AA:FB:03:FD:BD:C6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3138392e3131332e3230382e302f32312d3231203d3e20323632333434.roa
Signing time:             Tue 27 Feb 2024 12:36:26 +0000
ROA not before:           Tue 27 Feb 2024 12:31:26 +0000
ROA not after:            Tue 25 Feb 2025 12:36:26 +0000
asID:                     262344
IP address blocks:        189.113.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6d:df:df:eb:8e:16:81:be:f3:e1:00:3f:f0:f4:64:1b:18:66:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3
        Validity
            Not Before: Feb 27 12:31:26 2024 GMT
            Not After : Feb 25 12:36:26 2025 GMT
        Subject: CN=7834889A3AA6F76904645E0BCA6114491B5BF318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:79:0e:b5:23:b2:d5:18:1f:82:98:1b:67:
                    23:2e:c1:18:43:3b:ce:af:69:66:71:cf:14:41:60:
                    97:19:dc:31:47:6d:27:74:89:77:4f:23:5d:1a:a6:
                    1d:99:51:3b:a6:06:89:a0:53:9c:e5:c7:30:55:83:
                    39:ff:d3:db:cd:31:9b:4e:8d:1d:fa:77:27:16:68:
                    f9:9c:6d:71:42:fd:f0:fc:3f:92:b0:83:b4:c3:c4:
                    f0:43:b0:76:e1:64:74:51:b0:3c:c7:0c:82:50:c8:
                    e5:05:1a:d0:73:dd:11:59:de:8e:25:14:59:14:18:
                    f7:aa:e1:3d:0a:b5:9b:b6:7d:75:eb:2e:2e:ea:51:
                    58:f7:fa:f9:59:38:6c:4e:b8:bb:b2:5e:a9:23:3e:
                    35:5e:dc:c2:2c:be:12:ce:b4:b2:0a:1b:91:1d:35:
                    0d:43:fd:bb:7a:7b:98:71:64:89:a1:dc:44:07:a9:
                    f4:89:93:d8:75:50:25:db:b6:b4:6f:0c:bc:73:ca:
                    bd:e0:45:8d:30:e4:04:6b:98:f1:2f:6d:9b:e7:37:
                    00:7d:c6:d2:27:9c:36:e2:4a:5c:e6:0d:32:6d:fe:
                    e3:d5:c8:e3:2e:cf:bd:6d:de:99:82:5d:07:68:0b:
                    14:9c:ef:ca:2b:06:5a:09:ae:5b:f4:a2:5f:86:91:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:88:9A:3A:A6:F7:69:04:64:5E:0B:CA:61:14:49:1B:5B:F3:18
            X509v3 Authority Key Identifier:
                keyid:C2:C1:FB:01:62:2C:A7:E7:2A:68:D5:CB:55:AA:FB:03:FD:BD:C6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3138392e3131332e3230382e302f32312d3231203d3e20323632333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:df:a8:8e:13:03:73:a4:20:f8:53:bb:8c:29:55:6d:78:
         a7:71:cb:85:4a:e7:2e:4c:a6:6b:20:d8:91:46:9f:62:6e:de:
         d5:9a:09:06:81:d4:56:44:3c:79:b3:2e:18:4b:c3:bd:64:88:
         56:50:f6:28:93:9a:f9:f7:e0:04:d3:b4:de:10:b6:3a:9c:d5:
         78:c9:6b:06:24:48:ec:89:e6:c4:a7:71:43:e2:8a:a6:42:3b:
         46:09:23:5a:1e:ef:f8:bd:27:49:7c:64:5d:04:cb:03:30:e8:
         c2:1d:c2:61:c9:c6:6b:5a:4c:dc:43:18:8f:34:58:ad:a8:bf:
         cb:95:75:a5:dc:6a:45:c8:f6:ae:04:52:74:af:f9:e2:6c:5c:
         b4:de:90:7f:ec:bf:5c:32:29:1e:b4:f4:5e:2a:d8:ea:f0:92:
         a7:92:a6:c2:3c:36:9c:d7:29:fb:c6:09:af:25:be:08:83:bb:
         b2:35:35:a2:6c:2d:0b:94:4a:52:a9:f8:7f:c0:9f:e6:cb:6d:
         1f:64:0c:43:65:5b:8e:f5:2d:10:5c:e5:c8:41:ac:6f:87:0f:
         c7:25:05:71:1a:8c:1e:85:cb:d3:fd:42:d7:2b:15:0e:a1:b6:
         5d:07:f1:b5:c4:ea:3d:6a:8d:ff:a1:0b:2c:9b:96:74:0f:1a:
         01:56:27:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org