Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33322e302f32302d3234203d3e203238323233.roa
File:                     3138392e3132362e33322e302f32302d3234203d3e203238323233.roa (raw, json)
Hash identifier:          P7xKzDLI+ofpaNHIGWuJc9SHK/RalPS1VFfZOjLsEHE=
Subject key identifier:   B5:05:2C:D3:F6:EB:DD:16:BB:31:0D:57:47:19:1A:4A:53:7F:8A:C7
Certificate issuer:       /CN=3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55
Certificate serial:       1694559C15A0F8A635EB0D41E814D1AB930EFC67
Authority key identifier: 3D:9D:3E:D6:8C:C6:24:CD:26:DC:2C:CE:25:12:A5:AD:AF:1D:AA:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33322e302f32302d3234203d3e203238323233.roa
Signing time:             Mon 25 Sep 2023 20:11:27 +0000
ROA not before:           Mon 25 Sep 2023 20:06:27 +0000
ROA not after:            Mon 23 Sep 2024 20:11:27 +0000
asID:                     28223
IP address blocks:        189.126.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:94:55:9c:15:a0:f8:a6:35:eb:0d:41:e8:14:d1:ab:93:0e:fc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55
        Validity
            Not Before: Sep 25 20:06:27 2023 GMT
            Not After : Sep 23 20:11:27 2024 GMT
        Subject: CN=B5052CD3F6EBDD16BB310D5747191A4A537F8AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:34:fc:4f:7a:89:38:9a:a2:3b:e7:44:4c:
                    2e:3c:6f:bd:57:16:78:fc:38:1d:69:21:f1:c3:91:
                    6c:39:97:3b:23:8d:5d:9b:95:89:09:be:e4:3c:ed:
                    bb:30:08:6f:46:ff:99:32:de:8e:5d:c3:26:eb:3f:
                    08:fe:e4:e3:d0:b6:2d:79:56:9f:ca:27:52:59:a4:
                    62:80:c4:92:17:77:ae:ff:42:52:55:29:12:0d:32:
                    2a:e0:a2:21:11:57:35:3a:22:21:5a:5d:dd:ee:f1:
                    21:0b:a1:a1:d0:02:51:13:45:ce:f7:fe:0c:cb:c2:
                    dd:a4:94:df:c4:66:9e:93:50:f7:16:93:81:2f:83:
                    dc:1f:37:97:64:c0:21:c5:eb:5b:0c:0a:d0:c6:93:
                    f1:7a:0d:ab:3d:4d:ec:3c:8b:a5:7b:2f:93:a2:db:
                    ed:83:1f:7c:55:78:c7:46:f0:a3:53:4d:03:8d:8e:
                    d0:98:19:3f:5b:74:b0:54:a0:ac:14:6d:b0:fd:d8:
                    7b:83:bd:2a:80:01:2f:38:27:28:cb:bd:9f:5b:a3:
                    51:87:4a:ce:be:87:d6:69:cc:b8:d8:dc:28:9d:ad:
                    f0:ed:52:9f:e9:35:fc:0f:7f:0e:32:6d:aa:61:eb:
                    55:6d:17:e7:02:b4:60:21:d0:2e:4d:4e:b0:81:b0:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:2C:D3:F6:EB:DD:16:BB:31:0D:57:47:19:1A:4A:53:7F:8A:C7
            X509v3 Authority Key Identifier:
                keyid:3D:9D:3E:D6:8C:C6:24:CD:26:DC:2C:CE:25:12:A5:AD:AF:1D:AA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33322e302f32302d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:84:09:24:e5:c6:7b:3d:de:0e:86:c2:e6:11:09:45:b9:fe:
         bd:67:fa:d6:a1:10:28:c3:f3:4b:7e:1f:e9:24:f0:96:fd:4a:
         0f:59:ca:12:a7:83:3a:84:0d:a8:c5:52:77:eb:9f:47:55:8a:
         0b:77:e2:05:ca:9b:96:79:d5:3e:b7:f4:5d:bb:60:8a:9d:a9:
         26:ab:15:58:a9:1d:bf:1f:1c:83:53:12:e2:b1:cf:1d:99:e4:
         22:c0:6c:e3:1b:de:f7:01:84:53:be:48:ec:71:2f:4c:29:31:
         39:7e:6b:b7:4e:20:7c:03:d9:12:bc:dc:63:d2:a8:b6:55:39:
         d3:7c:66:f1:2f:bf:aa:52:e2:bf:db:fe:d0:c5:ac:80:bf:60:
         f6:ac:26:29:75:3d:c0:97:50:86:f7:cc:0a:96:92:f8:ff:55:
         5a:73:b5:27:02:db:0d:af:b8:32:2c:25:d9:cf:95:5f:bb:d4:
         d1:65:44:66:2c:e5:4a:0e:9b:0f:e2:e8:5a:2e:a9:e5:23:f1:
         dd:4c:03:26:02:4b:15:d9:b1:97:8a:f0:cc:63:5f:6b:0b:31:
         0e:f1:95:07:9b:1c:63:74:19:0c:25:a6:67:a5:40:e7:a9:77:
         e2:3a:67:d1:0d:7f:e0:6c:e3:10:8a:02:25:5d:71:31:92:2c:
         23:50:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org