Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa
File:                     3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa (raw, json)
Hash identifier:          P3LcZKM/0np8oVD7tAChE9L00ebcA+qS80qN6Q0j28Y=
Subject key identifier:   D2:37:34:E8:8B:FC:13:33:35:28:FA:BA:92:3B:1E:D6:A7:A3:CE:FB
Certificate issuer:       /CN=EFC6D9641E6897F52BC48673F154FC946766AD90
Certificate serial:       601E8128E3E774AACDA20B0FD236C1968576D4C3
Authority key identifier: EF:C6:D9:64:1E:68:97:F5:2B:C4:86:73:F1:54:FC:94:67:66:AD:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFC6D9641E6897F52BC48673F154FC946766AD90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa
Signing time:             Fri 12 Apr 2024 13:27:23 +0000
ROA not before:           Fri 12 Apr 2024 13:22:23 +0000
ROA not after:            Sat 12 Apr 2025 13:27:23 +0000
asID:                     263080
IP address blocks:        189.201.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1e:81:28:e3:e7:74:aa:cd:a2:0b:0f:d2:36:c1:96:85:76:d4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC6D9641E6897F52BC48673F154FC946766AD90
        Validity
            Not Before: Apr 12 13:22:23 2024 GMT
            Not After : Apr 12 13:27:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:78:e9:79:f2:eb:d1:05:4d:1b:61:0f:dd:0a:
                    16:bf:9e:10:b3:ec:23:b7:93:11:a3:51:7e:29:59:
                    0b:30:58:a3:02:ff:05:5b:cd:dd:51:31:af:71:e0:
                    37:aa:15:6c:c6:dd:7d:3b:b3:9e:33:90:e7:92:86:
                    67:1d:d6:7d:1a:c3:53:a4:64:3b:d6:7d:2f:8c:21:
                    64:6a:f3:a0:bd:90:80:19:68:81:f3:80:60:c7:c4:
                    d9:7e:ac:75:6c:e5:56:a5:c0:6d:23:ef:8f:61:de:
                    ca:26:c0:5c:b9:a2:bb:7e:e6:25:73:2c:ce:0b:71:
                    6c:c5:dd:b7:03:73:07:81:db:43:ab:83:c0:bf:43:
                    e7:47:71:f3:17:a4:04:46:a6:7d:ec:ca:45:8d:1b:
                    5e:3d:9b:cb:d2:46:4c:37:5c:ce:17:f8:0b:c0:e8:
                    ee:f4:f8:d2:0c:04:e2:2b:45:63:15:43:12:6b:bd:
                    e1:2f:52:33:e3:0e:0b:17:92:fd:98:9d:7b:8e:9f:
                    5e:e2:75:98:1a:45:d1:28:ca:5a:4e:3d:3a:02:0c:
                    d9:b1:03:c7:ca:fb:97:0c:b9:03:43:51:ca:39:79:
                    50:56:42:ef:5d:e6:fe:11:ca:84:a9:9a:4a:75:39:
                    5a:dc:f8:6a:00:59:0f:cf:b0:d9:e1:d3:de:07:68:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:37:34:E8:8B:FC:13:33:35:28:FA:BA:92:3B:1E:D6:A7:A3:CE:FB
            X509v3 Authority Key Identifier:
                keyid:EF:C6:D9:64:1E:68:97:F5:2B:C4:86:73:F1:54:FC:94:67:66:AD:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/EFC6D9641E6897F52BC48673F154FC946766AD90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFC6D9641E6897F52BC48673F154FC946766AD90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:0f:c1:49:24:c7:0c:03:f5:f0:9d:a5:4f:01:a4:03:bd:
         5c:d5:5a:04:b6:6d:05:5b:a2:c4:35:37:fa:ef:01:93:a6:d1:
         6c:83:b4:33:30:d7:89:2c:ed:cc:8f:8d:18:8a:70:2a:93:1e:
         37:ca:ce:98:50:a9:7e:c9:8f:85:00:e3:ac:8b:73:68:cf:2f:
         63:84:50:f9:50:48:78:be:37:fe:0a:2a:e9:e9:1b:5b:01:73:
         60:fa:b5:13:e8:ea:60:9e:86:c8:16:6b:3d:2c:d1:8a:6b:2b:
         42:63:7b:12:d6:da:e8:e1:74:13:b4:4a:fd:54:69:8a:ba:09:
         df:22:a7:f5:c8:a6:92:16:de:24:1f:7a:6a:81:2f:1f:e2:ae:
         39:5a:06:37:46:b7:08:35:e4:81:a3:7e:12:52:fb:68:c4:ad:
         32:5b:04:87:40:d0:25:05:5c:3b:d7:43:a4:69:b7:ea:80:e6:
         73:3c:33:2e:da:d7:58:cc:8c:70:4d:a9:59:57:8f:6d:04:91:
         3f:98:cb:f9:9c:f8:32:92:23:c8:4e:69:f8:36:00:8d:9a:47:
         e4:66:08:50:b7:62:29:70:79:09:cc:61:3d:2a:6a:90:07:ea:
         d6:a8:53:17:7c:76:a8:17:22:39:51:05:8c:c4:8e:55:87:3f:
         6d:1e:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org