Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38342e302f32322d3232203d3e20323632373439.roa
File:                     3138392e38392e38342e302f32322d3232203d3e20323632373439.roa (raw, json)
Hash identifier:          JxlafAKH56fZQuxVYU6oWnXYs4HjVQTAwDSWoz6OMsg=
Subject key identifier:   1A:A9:54:11:A6:1F:51:66:A6:C6:51:AF:90:33:65:A4:0D:DE:FC:5C
Certificate issuer:       /CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Certificate serial:       6823D0899A5FE003CBC160BF54D7874E22814787
Authority key identifier: 03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38342e302f32322d3232203d3e20323632373439.roa
Signing time:             Tue 27 Feb 2024 01:00:33 +0000
ROA not before:           Tue 27 Feb 2024 00:55:33 +0000
ROA not after:            Tue 25 Feb 2025 01:00:33 +0000
asID:                     262749
IP address blocks:        189.89.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:23:d0:89:9a:5f:e0:03:cb:c1:60:bf:54:d7:87:4e:22:81:47:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
        Validity
            Not Before: Feb 27 00:55:33 2024 GMT
            Not After : Feb 25 01:00:33 2025 GMT
        Subject: CN=1AA95411A61F5166A6C651AF903365A40DDEFC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:e0:2b:ad:d5:6e:f1:46:13:53:7a:67:dd:
                    60:f7:e1:17:f4:ac:38:59:a7:c6:1c:59:e7:8b:4d:
                    f7:13:32:68:6d:cb:b3:f5:82:95:ab:ee:34:b0:f4:
                    f6:16:1a:35:99:e1:8d:06:28:4e:bf:40:1e:a9:6c:
                    a8:5e:42:2d:85:03:9a:ba:53:f2:4d:8c:33:1f:49:
                    bf:55:2c:81:ff:83:94:ab:c4:33:85:8d:f5:d7:34:
                    a8:7c:eb:48:a1:a0:fc:d2:77:2e:67:4a:81:c3:ea:
                    97:02:58:11:2c:15:bd:58:e6:40:20:4d:91:48:be:
                    a9:7b:56:93:39:80:17:d5:9d:96:6d:db:c7:0a:dd:
                    85:7a:b6:e0:af:0f:72:62:92:e6:2e:ee:89:22:03:
                    58:fc:73:7c:dc:a7:a2:37:b6:6e:a1:c0:4e:89:fb:
                    d2:af:81:90:ac:cc:2a:f1:55:c7:79:a2:d2:26:45:
                    ed:e9:ef:4e:50:d2:da:00:db:c0:75:31:b2:7b:12:
                    28:e3:1d:5a:5d:b9:48:b3:4f:a0:4a:95:24:53:4d:
                    ab:a8:94:84:22:7c:01:a6:c1:0b:0b:56:5a:01:1e:
                    bd:16:f3:ee:43:f5:71:a2:b6:e9:08:44:dc:7f:37:
                    c4:25:cd:f9:75:62:50:b1:55:11:ef:1b:94:77:b8:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A9:54:11:A6:1F:51:66:A6:C6:51:AF:90:33:65:A4:0D:DE:FC:5C
            X509v3 Authority Key Identifier:
                keyid:03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38342e302f32322d3232203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:ba:30:20:e2:b4:24:2a:e6:4e:95:0d:a4:ab:62:46:06:
         c5:c8:00:3b:08:13:4a:53:03:a0:99:47:98:2b:a1:8c:61:65:
         ff:04:05:8e:39:40:c9:33:f8:e3:a8:7c:33:09:73:2f:83:9a:
         b1:42:bc:2e:88:6e:13:1b:98:93:0a:b6:ea:29:f7:97:80:bd:
         dc:da:9f:67:8a:54:f7:2f:04:da:f3:77:65:f9:f3:39:69:88:
         18:3d:8e:f3:48:1a:0f:5f:20:00:88:eb:f9:54:1c:cb:ee:ce:
         a0:c1:99:01:6b:5a:5b:5b:1b:49:3c:d3:57:02:4f:24:5f:78:
         bf:5e:b9:b7:cb:9a:27:47:9a:62:c4:5b:1f:33:c2:67:b8:69:
         46:b4:42:da:cd:12:0b:4d:18:ac:94:61:a3:9b:18:59:9f:83:
         04:eb:69:e0:90:22:6a:ea:fa:f4:d6:9b:b8:c8:cc:32:a5:ed:
         ea:4f:9e:2d:00:19:d2:b7:74:07:10:f5:dd:3f:64:cb:38:48:
         49:d8:55:4a:4a:58:da:66:3b:e7:d6:33:af:3e:ed:83:10:4e:
         dc:2a:92:72:c6:38:6b:64:45:dc:d4:82:f2:43:d8:8a:b7:0d:
         b6:89:17:6c:1e:6a:7e:58:17:8a:21:b2:69:4e:06:84:fa:fc:
         c4:cb:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org