Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e39302e302f32332d3233203d3e20323632373439.roa
File:                     3138392e38392e39302e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier:          ipxa2iZKt/rxkMIvkKP83QArGJ721RjJKOBHJZu2Ii0=
Subject key identifier:   E1:39:DA:0C:10:43:AD:16:4B:C7:32:64:9B:B3:E9:C8:E7:DA:08:DA
Certificate issuer:       /CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Certificate serial:       3BE7C0C57D811074575D70C3C15DE3C2698594A7
Authority key identifier: 03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e39302e302f32332d3233203d3e20323632373439.roa
Signing time:             Tue 27 Feb 2024 01:00:32 +0000
ROA not before:           Tue 27 Feb 2024 00:55:32 +0000
ROA not after:            Tue 25 Feb 2025 01:00:32 +0000
asID:                     262749
IP address blocks:        189.89.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e7:c0:c5:7d:81:10:74:57:5d:70:c3:c1:5d:e3:c2:69:85:94:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
        Validity
            Not Before: Feb 27 00:55:32 2024 GMT
            Not After : Feb 25 01:00:32 2025 GMT
        Subject: CN=E139DA0C1043AD164BC732649BB3E9C8E7DA08DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:81:25:f0:98:53:b1:c7:60:59:c8:e9:2b:
                    c0:40:4f:01:a3:21:3f:e8:f4:51:69:bf:cf:cf:57:
                    7d:b7:97:42:9c:15:10:c2:92:4e:53:97:3e:03:cb:
                    da:6a:a8:26:43:02:62:1c:20:33:94:2c:02:8d:8f:
                    36:fb:43:b4:78:16:2e:ef:2c:02:93:99:a9:eb:39:
                    fa:a7:4f:56:7f:54:a8:13:8d:df:a7:4c:6d:57:8e:
                    44:8d:bc:08:98:ad:a8:f6:b4:f5:58:bf:bd:9a:aa:
                    e7:40:b3:2f:17:79:b5:d8:58:38:81:ce:72:4a:89:
                    8c:2d:ea:06:14:0d:af:7a:e7:85:2d:55:30:74:4e:
                    09:60:ba:5f:1f:b6:cc:1e:01:25:3c:4d:ee:0a:dc:
                    b0:24:c8:f8:14:49:63:bd:87:c7:e6:fc:8a:55:fd:
                    84:e8:18:1d:c8:5f:35:ff:96:b6:0a:17:b0:07:34:
                    07:2a:12:69:be:b7:25:f8:9d:1c:d3:6e:c6:1d:2c:
                    9f:77:e7:e6:55:7d:0b:e0:3c:a0:1c:51:e3:73:15:
                    51:1a:e3:2f:0b:5e:ea:8c:6b:68:80:1e:f7:d8:ff:
                    72:a5:5b:a8:4e:2a:cd:c7:fe:01:07:29:15:f1:55:
                    28:ad:df:b8:5a:4a:e4:d3:85:d5:69:0b:ca:92:de:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:DA:0C:10:43:AD:16:4B:C7:32:64:9B:B3:E9:C8:E7:DA:08:DA
            X509v3 Authority Key Identifier:
                keyid:03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e39302e302f32332d3233203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:ce:85:d0:ca:74:9b:a5:03:11:db:46:30:91:0f:e8:17:
         01:64:94:c0:89:4c:38:1e:bc:a2:41:55:8d:ac:3f:ad:cf:2a:
         59:75:f1:8a:c2:d1:99:c2:1a:24:78:63:9d:cb:66:f6:b4:33:
         0a:79:31:0b:fb:31:3e:e8:2b:ae:2d:a1:1d:fd:f9:13:80:d8:
         96:78:d2:d5:b1:ad:7c:82:b2:93:79:06:ce:67:e3:32:f7:bc:
         f2:da:41:dc:e9:cb:13:5f:65:13:c4:78:98:a5:37:41:60:94:
         50:0c:b6:13:97:8a:41:74:8f:4e:58:59:0b:f2:bf:71:fb:ae:
         95:48:94:6b:b0:f0:cc:a4:02:98:49:bd:ba:5d:7f:c0:ba:d7:
         e8:66:6e:c3:ff:69:e4:5c:ed:82:61:49:56:83:d5:39:79:18:
         ed:7d:a6:88:70:89:82:32:e8:ce:89:c6:07:0e:27:53:46:ac:
         75:9d:c4:5d:db:1c:06:d0:71:6e:4f:ef:a7:d3:91:17:55:9e:
         95:f7:ad:52:7c:8f:6b:2e:15:20:25:89:ee:70:06:f3:9a:1c:
         d4:2f:b2:77:b9:71:fb:46:9d:5e:05:11:cc:8b:9a:52:d0:25:
         e7:b2:3a:6f:77:14:75:62:d2:62:ff:32:11:d7:6f:c8:af:01:
         6b:fd:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org