Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3138392e37362e39362e302f31392d3234203d3e203131373532.roa
File:                     3138392e37362e39362e302f31392d3234203d3e203131373532.roa (raw, json)
Hash identifier:          xeuA2PI7QR8b49NkqwHDYDvVWaxMjtd99g6M+M1kLlM=
Subject key identifier:   1D:9F:CC:F0:6B:F6:E8:6D:11:2D:C6:5A:DE:E7:DB:0E:D4:43:43:47
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       360340BC7A1431AB208075FD93209A5864A366D5
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3138392e37362e39362e302f31392d3234203d3e203131373532.roa
Signing time:             Sun 20 Aug 2023 18:02:01 +0000
ROA not before:           Sun 20 Aug 2023 17:57:01 +0000
ROA not after:            Sun 18 Aug 2024 18:02:01 +0000
asID:                     11752
IP address blocks:        189.76.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:03:40:bc:7a:14:31:ab:20:80:75:fd:93:20:9a:58:64:a3:66:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 20 17:57:01 2023 GMT
            Not After : Aug 18 18:02:01 2024 GMT
        Subject: CN=3082010A0282010100D7F644C14AB42EADA8C06A76B4E0C85339081E98344FD3E9C7BEBF0D56C292DC72404947302A082936CC17310CE9445A92E664D3C86D1DD08E7DE489861B4B73644B866051141052DE87316CB4B34A4F7194828B85813B377C5776185C8D1AA869DE3E343AA167DC3A988502FA9846AFD36563EFD79FCCA0A179F2F27B41A76F0F966C5ECE9A2FAFE63DA330DCE6A9672A8BF58765BA58D87A70CD7389EE74AF2ADB59A3F8A983FA17132157B32AA7893C0B45E93C0BF259BE54326B54BEE9FBDD4DB4C11B59316AED740D6189B962CEAEF7986311D7E3D0CF630155E8705E7D3F617A4D7440287A27D4EAD15A51F497F884756B4814ACF6891BBEF4172BC3C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:44:c1:4a:b4:2e:ad:a8:c0:6a:76:b4:e0:
                    c8:53:39:08:1e:98:34:4f:d3:e9:c7:be:bf:0d:56:
                    c2:92:dc:72:40:49:47:30:2a:08:29:36:cc:17:31:
                    0c:e9:44:5a:92:e6:64:d3:c8:6d:1d:d0:8e:7d:e4:
                    89:86:1b:4b:73:64:4b:86:60:51:14:10:52:de:87:
                    31:6c:b4:b3:4a:4f:71:94:82:8b:85:81:3b:37:7c:
                    57:76:18:5c:8d:1a:a8:69:de:3e:34:3a:a1:67:dc:
                    3a:98:85:02:fa:98:46:af:d3:65:63:ef:d7:9f:cc:
                    a0:a1:79:f2:f2:7b:41:a7:6f:0f:96:6c:5e:ce:9a:
                    2f:af:e6:3d:a3:30:dc:e6:a9:67:2a:8b:f5:87:65:
                    ba:58:d8:7a:70:cd:73:89:ee:74:af:2a:db:59:a3:
                    f8:a9:83:fa:17:13:21:57:b3:2a:a7:89:3c:0b:45:
                    e9:3c:0b:f2:59:be:54:32:6b:54:be:e9:fb:dd:4d:
                    b4:c1:1b:59:31:6a:ed:74:0d:61:89:b9:62:ce:ae:
                    f7:98:63:11:d7:e3:d0:cf:63:01:55:e8:70:5e:7d:
                    3f:61:7a:4d:74:40:28:7a:27:d4:ea:d1:5a:51:f4:
                    97:f8:84:75:6b:48:14:ac:f6:89:1b:be:f4:17:2b:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9F:CC:F0:6B:F6:E8:6D:11:2D:C6:5A:DE:E7:DB:0E:D4:43:43:47
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3138392e37362e39362e302f31392d3234203d3e203131373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:38:d9:09:49:d8:50:43:26:a5:b9:06:a9:2b:5a:ed:22:67:
         cf:b7:ee:a0:ff:3f:bb:8b:94:86:a2:d9:5c:3b:4c:71:7e:1b:
         8e:02:79:03:c1:59:d9:d3:86:dc:08:0f:0a:3c:32:1b:9f:4b:
         37:64:e7:2e:62:82:20:66:5c:9d:e0:44:1c:46:2f:81:da:cb:
         71:7f:24:c1:8b:03:e2:4e:6f:c5:29:8c:9b:95:8a:f3:e7:6b:
         92:6f:62:56:e3:82:f0:20:e3:23:dc:9d:13:5a:84:84:26:6f:
         fa:bd:44:a0:b9:4e:69:30:85:e2:be:16:6c:42:8f:ce:be:7d:
         8d:13:ed:a4:88:c7:75:95:1b:29:e3:bb:8f:85:4e:39:69:8c:
         e0:c1:6c:c0:0b:08:cc:83:c8:b2:d0:8e:41:0a:2e:6f:d9:89:
         92:81:3d:77:b3:e1:0f:8a:6d:34:ba:d3:cd:25:a3:b2:49:22:
         f3:0a:d6:ee:f8:33:da:33:ae:ab:62:b1:ac:78:fd:f0:f6:ec:
         de:13:a9:ec:6a:a4:e7:ed:29:56:cb:a0:1b:1c:64:71:fe:57:
         f8:72:73:e9:1d:3b:b4:95:a9:09:ff:29:66:2e:25:b2:8d:25:
         10:0b:9c:08:5a:53:02:26:ed:f0:94:10:bc:5e:31:fe:a6:ee:
         6d:57:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org