Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3137362e302f32302d3234203d3e203238313731.roa
File:                     3138392e38342e3137362e302f32302d3234203d3e203238313731.roa (raw, json)
Hash identifier:          jZo5eH1SQW+uOM2PLe/ybKWzkStuQwjEeF2EW8lfegs=
Subject key identifier:   03:F5:0B:1B:C4:38:36:C9:B2:01:63:BE:C4:7A:DF:48:B7:18:B3:B0
Certificate issuer:       /CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
Certificate serial:       0E9DA755B81CCD6B09A0BE37F0BA0CF87746C48C
Authority key identifier: 68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3137362e302f32302d3234203d3e203238313731.roa
Signing time:             Tue 02 Apr 2024 22:00:00 +0000
ROA not before:           Tue 02 Apr 2024 21:55:00 +0000
ROA not after:            Wed 02 Apr 2025 22:00:00 +0000
asID:                     28171
IP address blocks:        189.84.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9d:a7:55:b8:1c:cd:6b:09:a0:be:37:f0:ba:0c:f8:77:46:c4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
        Validity
            Not Before: Apr  2 21:55:00 2024 GMT
            Not After : Apr  2 22:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c0:2f:63:ba:6a:2a:10:6d:9d:43:6b:af:78:
                    17:df:1d:06:cd:0e:65:ad:92:23:f9:2c:e9:50:ec:
                    71:c1:ab:d5:cf:1f:82:c8:ac:89:51:7d:4d:e7:14:
                    8a:a4:1c:52:4b:c9:95:46:7b:60:44:f5:5c:ea:e8:
                    6e:ac:98:ce:f4:03:e4:da:fa:ab:5a:69:47:04:46:
                    a3:4f:33:10:a5:55:ff:74:c4:2f:b9:5f:0f:d4:f0:
                    41:5e:38:27:ff:43:a5:17:d4:65:cb:8d:f9:36:1b:
                    2c:b9:82:60:de:d4:0d:03:f5:c9:5e:a0:35:ea:89:
                    d9:9c:4e:fa:e3:df:3f:5a:ce:9a:c7:5f:6f:4b:e1:
                    03:9a:ba:8f:5e:5b:5f:97:77:ab:b9:4f:96:8b:61:
                    f8:6d:51:48:45:63:90:7d:4b:73:0d:e9:ca:6a:07:
                    70:b1:da:73:40:f5:0e:57:e7:9d:2b:53:81:d0:96:
                    f5:1d:f2:bf:6a:64:dd:c6:84:44:d7:09:ba:1e:49:
                    20:a0:20:33:cf:bb:61:5d:89:91:59:3f:d4:4d:ff:
                    4b:c3:e1:ec:65:e9:34:b4:ef:f1:78:1f:33:4f:87:
                    ef:78:49:0f:c2:1e:f5:22:26:b8:96:68:ea:89:ed:
                    33:ec:88:4e:ae:f5:91:27:7e:72:c2:f4:39:0f:f4:
                    12:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F5:0B:1B:C4:38:36:C9:B2:01:63:BE:C4:7A:DF:48:B7:18:B3:B0
            X509v3 Authority Key Identifier:
                keyid:68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3137362e302f32302d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:d9:bf:71:34:f1:7d:36:dc:b3:49:7f:97:6b:c4:42:b5:
         5c:e2:c6:29:aa:65:60:22:ce:75:b7:a6:59:18:73:c2:0c:d5:
         98:c7:b6:cd:ea:89:1e:49:99:8e:c2:a2:ef:5f:51:8f:58:d9:
         0a:bc:94:32:f5:98:8c:f6:29:77:3d:88:43:05:c1:87:3b:77:
         7e:e3:7b:b2:e5:7c:9f:30:6c:21:af:e8:d3:44:d8:5b:f8:90:
         00:03:1d:71:66:93:8e:51:10:c8:fb:a1:e9:7a:f8:9b:23:b4:
         1b:c4:d1:7e:0e:d1:ab:9e:8d:e7:e4:52:53:c6:f8:af:0f:20:
         52:a8:04:38:ba:38:b7:8b:6b:8f:90:4d:db:a6:cb:0f:c3:55:
         ca:c6:c3:45:d2:4b:1a:c5:d4:e2:ac:f7:dd:3d:59:de:b7:70:
         ec:c1:be:52:98:5e:1c:8d:a0:d9:0c:b3:0a:67:3e:77:33:13:
         1d:04:f1:a7:5e:51:84:2e:f9:50:c6:24:91:6b:cd:26:0f:e1:
         6b:61:b3:4e:86:c0:80:23:d0:13:89:9f:e2:63:0b:63:0a:df:
         f1:f8:d0:c0:60:17:40:c4:1f:5a:53:4c:a8:ea:c9:9d:e5:7a:
         66:09:64:52:e7:c6:3d:e2:6b:8b:17:ae:f3:a6:19:1b:55:61:
         3f:9e:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org