Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e32312e302e302f31392d3234203d3e203238313836.roa
File:                     3137372e32312e302e302f31392d3234203d3e203238313836.roa (raw, json)
Hash identifier:          wRS6fQmRmLaUu0IijHBw75aol9sxtW40mOTzJ9rZRFg=
Subject key identifier:   3B:B6:22:B2:99:62:3D:0F:32:7E:C6:1C:DC:96:71:CD:D9:79:75:D8
Certificate issuer:       /CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
Certificate serial:       15263DFFDF3C4C4EE2AC368652672641079F3424
Authority key identifier: 89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e32312e302e302f31392d3234203d3e203238313836.roa
Signing time:             Thu 23 Nov 2023 13:35:43 +0000
ROA not before:           Thu 23 Nov 2023 13:30:43 +0000
ROA not after:            Thu 21 Nov 2024 13:35:43 +0000
asID:                     28186
IP address blocks:        177.21.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:26:3d:ff:df:3c:4c:4e:e2:ac:36:86:52:67:26:41:07:9f:34:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
        Validity
            Not Before: Nov 23 13:30:43 2023 GMT
            Not After : Nov 21 13:35:43 2024 GMT
        Subject: CN=3BB622B299623D0F327EC61CDC9671CDD97975D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:6f:31:13:6c:63:59:df:97:50:06:16:7f:
                    e8:da:b6:f5:38:35:2d:f0:f5:f7:0b:13:31:59:8e:
                    0e:94:fa:8f:e6:57:69:14:2a:71:53:0d:23:eb:ee:
                    18:a6:21:1d:7d:18:be:4a:79:b6:ed:be:fb:68:39:
                    51:c0:42:f3:4c:2a:38:ce:36:9a:e7:4b:8a:12:97:
                    6f:cc:b3:80:44:27:73:d4:41:37:e7:33:c3:da:b0:
                    51:28:e5:69:54:da:a4:dc:a4:c0:4e:d1:da:e2:6c:
                    8b:ca:8e:82:74:e4:53:1b:cf:77:ea:a0:95:7a:dd:
                    1b:62:23:05:fe:43:f0:e1:cc:9e:18:54:a4:c9:2f:
                    66:5e:f6:58:f0:94:be:00:0f:c4:cc:3e:1d:de:9e:
                    55:97:4c:37:60:96:51:4e:93:b4:b5:67:23:a4:f9:
                    0b:5a:e6:b6:4d:af:bb:42:8f:76:aa:ed:64:9d:0f:
                    d3:62:f6:f0:61:2d:7f:ee:d3:0b:41:83:df:30:83:
                    9a:b4:4e:d1:28:0b:f5:ed:4a:7c:fe:c3:6c:9b:f0:
                    e6:da:bc:a5:4e:78:2a:c4:6d:b3:31:73:68:15:8a:
                    b5:70:4a:bd:27:2c:29:4a:f1:34:e6:00:37:97:70:
                    26:f8:48:98:02:4a:ce:9c:af:92:77:63:1c:42:63:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B6:22:B2:99:62:3D:0F:32:7E:C6:1C:DC:96:71:CD:D9:79:75:D8
            X509v3 Authority Key Identifier:
                keyid:89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e32312e302e302f31392d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:95:11:b0:3e:f3:67:d3:48:93:2d:83:49:6e:d4:b0:b0:09:
         ff:23:3f:0e:26:5d:cb:d8:62:bf:d2:4a:fd:7a:e6:7e:c5:5c:
         f2:48:cc:27:83:49:7a:0b:70:98:b2:c7:5f:eb:2e:71:c2:01:
         1b:13:d6:86:1b:f8:5e:85:6c:9e:e4:c4:41:90:b2:b2:41:84:
         0f:b7:26:94:5c:78:d9:d2:b4:79:31:62:fb:de:64:6a:83:f5:
         c3:2e:9a:cb:3c:a5:a2:d2:8d:08:e8:6e:4f:3e:cb:c8:b2:ed:
         89:d6:14:5b:10:01:b7:e8:19:11:ad:a0:24:2d:36:4c:9b:4a:
         ac:4d:68:35:ec:06:c1:a9:0d:11:ff:20:5b:80:8b:92:b5:7c:
         02:6c:0b:4d:7c:39:4f:d1:d7:4b:f4:4c:34:13:a2:7a:22:e6:
         db:ef:f6:cf:fb:14:14:fc:68:89:72:b0:b5:fc:3a:f5:ad:ab:
         8f:01:d0:8b:7b:3e:aa:d1:23:27:34:4f:48:e6:99:c0:0f:f6:
         42:df:00:49:b9:b6:e0:14:58:83:e4:3e:fd:f9:c3:db:45:d2:
         7f:7e:fa:f2:bc:b3:11:91:fe:5c:49:2f:55:1e:8b:42:aa:bf:
         09:33:08:b4:96:ae:9f:fc:ce:ea:26:d6:d5:5c:4b:71:f9:b1:
         78:b1:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org