Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32332d3233203d3e20323730373136.roa
File:                     3138392e3132372e3139302e302f32332d3233203d3e20323730373136.roa (raw, json)
Hash identifier:          7eZ9o1sclvhVnlDeQhUnoU1Hxkp5k5sSG0MvX/VP/Qw=
Subject key identifier:   8B:A1:00:73:1D:FE:34:CE:98:8B:AA:6A:2C:51:0C:6E:79:74:D3:BF
Certificate issuer:       /CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
Certificate serial:       1A3DB7AB59C0DB14ED87FC0CF965CD6C228B34EF
Authority key identifier: 2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32332d3233203d3e20323730373136.roa
Signing time:             Mon 24 Jul 2023 01:00:00 +0000
ROA not before:           Mon 24 Jul 2023 00:55:00 +0000
ROA not after:            Mon 22 Jul 2024 01:00:00 +0000
asID:                     270716
IP address blocks:        189.127.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3d:b7:ab:59:c0:db:14:ed:87:fc:0c:f9:65:cd:6c:22:8b:34:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
        Validity
            Not Before: Jul 24 00:55:00 2023 GMT
            Not After : Jul 22 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:df:87:c8:25:0e:30:1f:53:d7:a2:08:0d:
                    f1:04:88:26:b6:ba:f5:7a:b4:d1:49:7f:64:94:4c:
                    c3:a3:62:02:92:88:fb:96:da:86:a8:f4:46:f0:d0:
                    75:ca:7d:a3:e7:7c:9d:4b:53:1a:ea:fb:73:fd:48:
                    cc:a1:d7:cc:94:77:09:1a:0c:12:76:00:15:04:63:
                    bc:ca:27:f1:45:87:aa:60:9b:d0:51:70:d0:b3:2b:
                    69:81:7b:a6:50:fd:5a:88:e7:1c:15:90:ff:6a:2b:
                    f1:25:d8:c2:52:83:da:45:14:1c:43:d5:f0:a5:23:
                    6b:37:e3:ba:e7:6f:59:32:ff:77:b1:38:b4:a9:a4:
                    cf:06:ee:7e:4c:62:bd:af:46:7f:b6:f8:84:0f:32:
                    e7:33:96:8a:16:b3:05:c6:51:44:49:df:ec:8f:89:
                    58:a1:f8:87:d0:71:4b:10:f8:93:d2:46:a5:9f:66:
                    d2:71:8e:dc:1d:59:45:82:cc:41:22:f7:ed:82:a7:
                    34:7f:26:87:cd:10:93:74:1b:d4:c9:b3:26:4f:a8:
                    11:d3:64:a7:3f:3e:67:56:8c:48:fc:c6:ab:f5:17:
                    f7:b0:ad:69:89:56:8a:1d:8a:1b:8e:bb:e7:12:76:
                    d3:a0:08:05:3b:8a:5b:9a:cb:cf:85:1e:64:13:a1:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A1:00:73:1D:FE:34:CE:98:8B:AA:6A:2C:51:0C:6E:79:74:D3:BF
            X509v3 Authority Key Identifier:
                keyid:2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32332d3233203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:1b:8e:8d:ea:f5:2b:e3:26:85:05:8f:44:24:a4:ab:39:c6:
         36:9e:fa:f1:c1:1c:31:a3:f5:e5:6a:51:78:2e:b0:42:62:28:
         c5:95:35:95:59:bd:51:8a:4f:0c:aa:d0:68:bd:a2:a1:9f:a7:
         a8:44:35:69:64:9c:f1:69:df:30:8b:58:50:42:18:cf:73:58:
         84:c8:31:6a:bc:76:f7:03:2b:bc:a1:24:9a:75:68:62:b3:d1:
         ee:7f:14:3a:4f:65:d6:5a:9a:cd:09:90:30:34:21:fb:1b:1c:
         91:1f:84:a2:cb:05:20:fb:58:72:44:ac:be:f0:09:8e:f3:40:
         73:f5:78:cc:89:09:0a:a2:a1:ba:d6:be:56:26:33:74:8a:9b:
         2a:b9:59:5f:d2:62:fa:80:d6:95:17:e6:9c:8a:a4:d1:55:c1:
         a8:e1:30:de:24:ff:64:40:dd:b1:d0:93:43:d3:f4:0b:ae:0a:
         84:7b:58:8a:cf:0d:5f:9c:0c:b2:9e:79:7d:5d:db:ab:99:c0:
         d2:22:04:b3:bc:7f:02:df:9a:35:aa:38:ce:cd:6e:f8:24:40:
         90:e4:a2:a3:58:ed:9f:b1:0a:98:05:4f:85:02:f2:9b:b5:c5:
         ed:89:cc:70:be:49:7e:e4:db:88:4c:76:23:a7:33:9b:97:27:
         ff:31:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org