Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38302e302f32322d3232203d3e20323632373439.roa
File:                     3138392e38392e38302e302f32322d3232203d3e20323632373439.roa (raw, json)
Hash identifier:          IPACZFx2nZ1eLWkNHa5qlv7X9UhIIr4PAsRqfzm2ba4=
Subject key identifier:   A5:28:2F:59:7F:02:FC:2F:BD:9F:5B:0D:0D:78:74:2D:BA:93:89:1D
Certificate issuer:       /CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Certificate serial:       6E679DAF1C0DBAF84F68D5694008C3400D7C2F6F
Authority key identifier: 03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38302e302f32322d3232203d3e20323632373439.roa
Signing time:             Wed 21 Feb 2024 14:00:21 +0000
ROA not before:           Wed 21 Feb 2024 13:55:21 +0000
ROA not after:            Wed 19 Feb 2025 14:00:21 +0000
asID:                     262749
IP address blocks:        189.89.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:67:9d:af:1c:0d:ba:f8:4f:68:d5:69:40:08:c3:40:0d:7c:2f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
        Validity
            Not Before: Feb 21 13:55:21 2024 GMT
            Not After : Feb 19 14:00:21 2025 GMT
        Subject: CN=A5282F597F02FC2FBD9F5B0D0D78742DBA93891D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:fb:1d:25:a0:b4:b1:46:14:52:e6:f1:ba:
                    3d:81:81:bd:66:f9:eb:eb:39:ba:46:a5:27:0d:d8:
                    37:25:84:ad:f4:c2:f8:e9:e5:18:31:83:76:47:71:
                    05:10:00:3f:44:0c:85:b1:cf:e5:74:f8:ab:41:ec:
                    79:34:9e:c6:09:93:82:fb:05:2e:40:0a:f5:ed:52:
                    c3:63:19:bd:2f:b9:1b:a7:6d:cf:51:8f:a4:79:7e:
                    ea:d3:2f:e8:ae:a0:2a:8c:44:0b:7a:54:3b:d0:12:
                    59:11:bf:73:b4:ad:67:89:fd:ca:88:df:2f:83:1b:
                    2d:51:cc:a8:f2:ab:1e:c9:26:e1:0c:ef:60:bf:a1:
                    6a:6a:90:f4:90:d5:5c:73:9e:f8:65:89:71:f4:c2:
                    fe:eb:4c:cf:b0:d1:ec:07:ab:d0:fa:fe:f4:81:e6:
                    82:53:1c:14:48:10:35:85:c2:05:ae:86:1d:e5:d6:
                    f8:73:51:05:b9:bf:6e:44:7b:6b:6a:60:39:e3:84:
                    b7:57:a3:ec:d2:4a:45:19:49:50:cf:ca:46:d3:01:
                    84:52:bc:ba:a5:95:5f:2f:82:f0:77:e0:f7:e5:1c:
                    f8:4d:6e:a8:81:c1:8a:d2:ae:30:37:65:32:14:1d:
                    f6:08:32:e1:08:cd:87:cd:57:d1:cb:c2:d0:cf:e5:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:28:2F:59:7F:02:FC:2F:BD:9F:5B:0D:0D:78:74:2D:BA:93:89:1D
            X509v3 Authority Key Identifier:
                keyid:03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38302e302f32322d3232203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:46:6a:ed:e9:cd:83:b6:70:56:66:d0:bd:ac:08:fa:c0:4f:
         16:14:e7:00:25:5f:02:f7:da:bb:ec:89:f6:d8:b2:45:03:37:
         5e:ad:ca:72:2c:b2:b4:cc:09:90:61:55:8d:de:2d:46:db:10:
         54:4c:2f:4e:58:88:3c:33:1f:08:6f:14:89:68:dc:95:16:07:
         96:5b:16:e2:96:c7:a6:bf:ab:1f:ca:9f:08:04:6e:ad:c5:a8:
         83:06:27:f4:f6:bc:04:29:aa:04:49:53:15:2c:07:62:03:40:
         d8:6d:73:6e:1a:45:f2:89:08:1c:ad:e5:0f:14:fa:93:d5:94:
         7d:ef:aa:8a:04:ea:55:52:18:8c:39:8f:7c:a6:eb:5b:5d:1c:
         51:ab:38:58:a3:c6:46:df:9a:70:88:1a:6f:cb:2c:61:4c:46:
         5f:9d:2d:d0:66:e1:e1:f3:73:16:d4:7b:8c:15:9f:cb:3f:8c:
         5f:ee:c4:07:62:4d:78:81:7b:e9:54:f9:41:c9:33:c0:70:54:
         55:da:7f:aa:ac:9a:d1:77:e8:ac:e2:6b:77:4c:d6:e3:59:99:
         6e:41:67:b9:b2:19:39:35:3f:11:ce:8f:ee:63:b0:2c:1c:ca:
         31:3e:54:36:c6:f0:a1:41:a9:a2:b0:c7:d7:d6:d1:ed:9c:e6:
         98:90:9d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org