Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32342d3234203d3e20323730373136.roa
File:                     3138392e3132372e3138382e302f32342d3234203d3e20323730373136.roa (raw, json)
Hash identifier:          iZbbUG9ELv7OGfm3t60N212kb6uN2BceYkUYoDTpkMA=
Subject key identifier:   7C:ED:FA:81:B3:59:06:EE:0E:D2:53:A4:96:60:99:90:17:46:80:40
Certificate issuer:       /CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
Certificate serial:       242BBCF35F5FA117D6B2B3B8C817B950C0149E5C
Authority key identifier: 2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32342d3234203d3e20323730373136.roa
Signing time:             Mon 24 Jul 2023 00:00:00 +0000
ROA not before:           Sun 23 Jul 2023 23:55:00 +0000
ROA not after:            Mon 22 Jul 2024 00:00:00 +0000
asID:                     270716
IP address blocks:        189.127.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2b:bc:f3:5f:5f:a1:17:d6:b2:b3:b8:c8:17:b9:50:c0:14:9e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
        Validity
            Not Before: Jul 23 23:55:00 2023 GMT
            Not After : Jul 22 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:da:f3:01:73:59:93:ba:67:69:49:b9:d8:
                    cd:a8:2b:c3:b6:4e:e5:e8:61:87:ee:d2:f8:2b:a9:
                    b3:05:e1:a5:2f:9f:8b:e7:50:fc:45:6a:f3:8a:c2:
                    eb:bf:e8:e7:57:cc:12:f2:86:20:dd:33:fc:32:87:
                    87:33:4d:eb:a1:20:d2:ed:80:97:14:84:cb:dc:d0:
                    42:87:8c:7b:33:7b:bc:ed:c8:77:15:0b:91:90:6b:
                    9a:46:4f:11:78:70:63:07:d9:bd:a4:7e:0c:8c:e4:
                    07:cb:00:7c:6a:89:fa:7b:02:0d:0d:60:a9:62:d1:
                    7d:c2:ad:87:0f:90:6d:30:fd:ac:78:42:ef:77:fc:
                    e3:5d:f8:0e:3d:25:23:06:aa:db:02:55:15:14:5b:
                    7a:1f:b2:ed:d6:0a:8e:05:70:61:5f:a0:31:30:70:
                    0b:9e:95:92:95:4d:c4:f3:30:75:71:0a:29:76:f0:
                    fd:2b:87:c2:a7:b4:6a:a0:8a:88:1d:43:cc:34:21:
                    3a:3b:05:41:28:ae:a8:0b:24:5e:26:67:00:01:4a:
                    e6:10:fe:bb:4b:0b:5c:0c:6d:9e:c4:d0:6d:a9:bf:
                    38:76:74:65:8a:63:50:b6:fe:d3:11:bd:bd:c9:c9:
                    21:88:81:72:70:71:26:ea:8e:d9:cb:dc:43:29:37:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:ED:FA:81:B3:59:06:EE:0E:D2:53:A4:96:60:99:90:17:46:80:40
            X509v3 Authority Key Identifier:
                keyid:2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32342d3234203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:40:9a:85:2e:48:47:52:71:ab:cc:8d:ae:41:b9:cb:e6:7f:
         da:22:1f:42:97:53:06:ee:ba:b8:ad:9c:51:2c:79:67:94:0f:
         14:37:14:00:da:1b:3d:aa:59:25:d4:69:85:1e:8a:e8:f7:15:
         87:ab:52:90:f0:29:29:e9:6b:87:42:46:4c:10:66:35:5a:50:
         69:be:53:7a:9c:db:09:c3:c1:c2:91:32:01:de:7f:8f:a7:b7:
         d9:b4:86:56:75:a2:28:40:12:64:9c:7c:9b:3a:cd:8a:08:3a:
         6f:7e:52:24:97:c3:6f:66:5c:8e:fc:a0:a7:d6:0a:22:6e:a6:
         c1:88:4f:d8:ff:53:b2:04:bd:29:60:ed:05:2d:b8:6e:b7:92:
         4e:7d:79:5a:2b:70:1e:dd:8a:56:92:33:80:b0:d5:f8:91:d8:
         67:87:ae:98:b3:65:39:cc:e0:fb:1d:3f:28:71:07:59:c6:ac:
         9b:e6:55:06:f6:9f:4b:17:fc:17:1a:bb:c0:73:3c:fe:95:b3:
         12:44:cd:f5:08:82:fc:da:a5:94:82:49:c5:c2:f6:97:68:16:
         f4:a1:32:32:95:e3:89:fe:ac:ab:2d:c0:b8:a6:4c:8a:a7:bd:
         f6:87:d0:52:57:17:85:87:c0:6b:80:7d:e2:5f:7c:e5:16:1d:
         dc:23:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org