Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa
File:                     3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (raw, json)
Hash identifier:          jxlTGfwV3UBMTnZ4ig0l8mC+1ZpcBvzfJXdhqdHY44I=
Subject key identifier:   A3:A3:1A:6B:53:6E:90:42:F2:C1:0E:E4:DC:FA:C6:35:7A:67:6E:95
Certificate issuer:       /CN=52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52
Certificate serial:       0DAD6A6A88DD22C0C24C072E3ED1E671579E39E3
Authority key identifier: 52:E1:AA:55:28:EE:C0:8F:20:FB:CD:16:90:FC:E7:FB:06:DF:5A:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa
Signing time:             Fri 09 Feb 2024 16:59:50 +0000
ROA not before:           Fri 09 Feb 2024 16:54:50 +0000
ROA not after:            Fri 07 Feb 2025 16:59:50 +0000
asID:                     270838
IP address blocks:        189.39.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ad:6a:6a:88:dd:22:c0:c2:4c:07:2e:3e:d1:e6:71:57:9e:39:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52
        Validity
            Not Before: Feb  9 16:54:50 2024 GMT
            Not After : Feb  7 16:59:50 2025 GMT
        Subject: CN=A3A31A6B536E9042F2C10EE4DCFAC6357A676E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:e9:f7:58:bd:05:66:e7:0c:76:2c:db:08:
                    58:59:8b:21:e4:e1:97:a0:64:25:ef:ae:8a:18:70:
                    0a:07:ef:fb:f3:24:93:72:f5:3b:34:6e:2a:16:b9:
                    a8:5f:a1:7f:68:34:13:93:4e:b1:c2:6a:9c:6f:e7:
                    03:ec:95:f9:72:58:d5:0d:a7:54:83:a4:c5:8b:af:
                    ee:0b:9e:fb:b2:63:9a:95:56:d7:64:c6:4f:e7:01:
                    7e:03:64:9e:13:7d:e3:b3:c5:e3:88:f8:76:75:7e:
                    b3:44:56:46:f4:6a:2b:be:26:03:38:28:9f:f3:4e:
                    3a:3c:e4:de:1f:54:62:b5:47:98:26:ae:96:de:41:
                    94:62:62:4d:81:1e:3c:6d:1b:ee:c7:66:70:64:1d:
                    0c:83:c0:09:53:4d:f6:f8:f2:36:46:b3:ff:39:97:
                    88:19:a4:1d:20:f5:88:67:37:4a:dc:d6:95:69:8b:
                    5c:4c:00:4a:20:5d:8e:f2:f4:01:88:a7:b3:4a:e7:
                    02:c6:a3:f4:9b:72:01:1d:fc:a7:66:9b:a7:a6:c9:
                    02:9d:6d:6a:4c:95:ba:16:d5:9e:3a:92:93:01:f6:
                    01:51:a5:6a:7e:fb:8b:0b:fc:4d:90:13:b7:b4:48:
                    82:8b:03:3c:d3:db:ac:fd:d5:68:70:7a:d6:00:44:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A3:1A:6B:53:6E:90:42:F2:C1:0E:E4:DC:FA:C6:35:7A:67:6E:95
            X509v3 Authority Key Identifier:
                keyid:52:E1:AA:55:28:EE:C0:8F:20:FB:CD:16:90:FC:E7:FB:06:DF:5A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:2c:cc:6f:0d:06:27:79:e8:fd:3e:b6:42:22:4b:4c:75:64:
         e5:53:ad:3e:1b:61:93:c7:c7:18:0a:84:3e:3a:86:7d:64:75:
         e6:fb:49:83:a6:cd:ab:c6:93:9f:8f:2e:ee:84:b0:55:35:38:
         66:f1:c4:51:2e:66:f6:9d:e8:19:c2:a5:c5:34:fb:ed:17:78:
         3d:56:a4:72:31:46:f6:3b:27:0c:7e:90:b5:3f:6d:1d:87:71:
         4c:98:a0:fb:09:48:ea:31:01:f7:46:77:1c:57:f9:1b:f3:7f:
         4a:9b:30:c2:63:ff:dc:42:45:27:85:26:b9:42:75:9d:3a:ed:
         e6:d9:46:5f:d3:14:87:75:96:bc:f6:8c:66:11:df:41:d9:d7:
         e7:76:bd:95:56:fc:bc:f0:a1:a3:47:25:4d:d0:53:ed:09:c0:
         9e:dc:c2:da:a2:c7:b6:06:c5:bd:0c:6c:85:fb:c0:b9:19:99:
         e7:50:51:a2:fd:ea:b1:43:34:c9:b6:3d:75:71:18:d1:90:9c:
         ca:ff:f3:20:02:14:c3:43:4b:e7:73:cf:a7:be:ed:d0:2c:26:
         28:7a:c1:b8:8c:a0:d9:72:8e:2d:e1:ae:0b:7a:27:58:d3:07:
         17:bf:91:1d:fb:bb:ef:9e:4d:f1:d9:2c:63:0d:25:f6:6f:50:
         a2:7f:e4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org