Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3138392e3131332e3231342e302f32332d3233203d3e20323632333434.roa
File:                     3138392e3131332e3231342e302f32332d3233203d3e20323632333434.roa (raw, json)
Hash identifier:          gHzv/4tAyMk9lTgwYyxy+YtvD3ciE0OUtHkM8fF8vqA=
Subject key identifier:   6C:4A:4A:36:CC:F4:DE:D7:0C:C5:CD:66:75:71:D9:1F:CC:D6:CF:C1
Certificate issuer:       /CN=C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3
Certificate serial:       22210B33D8029376F7EC2AC2C22F2AC50C74BAFB
Authority key identifier: C2:C1:FB:01:62:2C:A7:E7:2A:68:D5:CB:55:AA:FB:03:FD:BD:C6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3138392e3131332e3231342e302f32332d3233203d3e20323632333434.roa
Signing time:             Tue 27 Feb 2024 12:46:38 +0000
ROA not before:           Tue 27 Feb 2024 12:41:38 +0000
ROA not after:            Tue 25 Feb 2025 12:46:38 +0000
asID:                     262344
IP address blocks:        189.113.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:21:0b:33:d8:02:93:76:f7:ec:2a:c2:c2:2f:2a:c5:0c:74:ba:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3
        Validity
            Not Before: Feb 27 12:41:38 2024 GMT
            Not After : Feb 25 12:46:38 2025 GMT
        Subject: CN=6C4A4A36CCF4DED70CC5CD667571D91FCCD6CFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:78:b5:f6:b8:a2:8d:91:34:bb:15:60:e6:
                    6d:2e:4e:0a:5d:35:75:1f:06:9f:4b:bb:63:cb:dc:
                    80:4c:43:12:2c:97:93:7b:14:09:03:a1:f8:d6:d0:
                    92:56:0b:76:bb:db:7b:32:b2:a6:55:22:f4:fb:03:
                    17:37:8f:bc:4b:fb:f5:f9:4d:51:1d:da:fb:42:f1:
                    e4:6d:6d:a9:02:75:09:4e:31:ac:15:e5:84:68:b3:
                    38:2c:23:d8:0e:95:9f:69:d2:39:62:7b:a7:dc:7c:
                    be:37:8f:4d:85:d9:70:5f:b0:c9:df:bc:7d:38:a5:
                    32:c6:3c:b9:b0:81:44:cf:cf:e1:1c:f7:52:00:d2:
                    58:9b:e0:a2:45:a9:a2:ea:ff:c3:42:54:fa:f3:54:
                    fb:f9:dd:b4:5b:32:31:1a:1b:32:49:54:03:0d:8d:
                    fe:b4:ea:b3:4d:d2:f9:2a:a4:d3:fb:1e:95:9e:1b:
                    60:fd:58:4f:ed:bc:1d:65:c6:bf:87:ac:25:d2:f1:
                    9a:dc:3f:1f:ce:5a:eb:db:28:e0:76:dd:f0:ab:64:
                    64:73:26:21:fc:e1:fe:03:a8:b9:72:1c:16:14:0a:
                    ce:5a:c4:1e:82:18:d8:44:c2:91:bd:9f:f7:e6:ed:
                    a6:71:de:d6:4e:a7:0a:97:57:67:82:1f:a6:47:84:
                    c7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:4A:36:CC:F4:DE:D7:0C:C5:CD:66:75:71:D9:1F:CC:D6:CF:C1
            X509v3 Authority Key Identifier:
                keyid:C2:C1:FB:01:62:2C:A7:E7:2A:68:D5:CB:55:AA:FB:03:FD:BD:C6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3138392e3131332e3231342e302f32332d3233203d3e20323632333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:cb:65:c1:c8:cc:c7:6a:12:da:c8:67:3a:c9:c6:dc:50:ff:
         c6:0d:09:b8:df:98:d9:d2:47:0a:8f:bb:25:1a:d1:66:ff:52:
         4d:89:83:14:8d:89:5e:09:ce:fb:bf:7e:e5:d5:f6:2a:7a:e2:
         57:44:50:fd:84:a2:8b:e4:81:f7:05:40:4c:0d:6c:48:92:48:
         29:92:68:b5:64:0f:c0:c5:91:33:f7:b2:cc:17:f7:b2:7b:61:
         49:b5:d4:8d:ad:c8:9d:9e:3b:db:00:5e:a0:62:53:27:c6:63:
         f5:a9:84:82:74:b1:c4:19:ed:23:31:a9:89:c4:f8:5d:ef:37:
         15:cf:2f:7c:07:ca:97:08:a2:8b:29:b6:9f:d6:c9:97:df:62:
         e8:32:d8:3b:cc:6b:ee:ac:24:ac:dc:7d:e8:7d:c4:34:0a:ef:
         d0:20:f8:f4:03:c8:8f:69:ce:43:de:1f:d9:42:f3:55:04:64:
         aa:8a:4b:6b:d6:d7:17:01:4a:1a:16:17:99:8d:3b:e4:07:e9:
         42:f3:16:75:2f:5f:4c:53:c6:be:e5:91:d4:06:9a:1b:ed:ff:
         fa:40:15:ac:ac:d4:ea:38:9b:9c:33:b5:80:bb:eb:3a:81:72:
         0b:22:b4:5e:98:5c:6c:c4:f5:5e:c9:e3:24:19:b9:9d:1b:61:
         9c:f6:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org