Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3234203d3e203533323234.roa
File:                     3138392e34352e31362e302f32312d3234203d3e203533323234.roa (raw, json)
Hash identifier:          BZ7nk+/XIqHv9zw/F9VbyuPn6+pmJyRPebzTVBw2AJU=
Subject key identifier:   EE:BB:65:AF:CA:F0:88:5C:58:4A:59:CF:BE:AE:4C:6F:93:BA:FA:52
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       5F1FF4567473BAADE4B21BAA044BFA92B4254C49
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3234203d3e203533323234.roa
Signing time:             Mon 13 Mar 2023 17:08:27 +0000
ROA not before:           Mon 13 Mar 2023 17:03:27 +0000
ROA not after:            Mon 11 Mar 2024 17:08:27 +0000
asID:                     53224
IP address blocks:        189.45.16.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1f:f4:56:74:73:ba:ad:e4:b2:1b:aa:04:4b:fa:92:b4:25:4c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar 13 17:03:27 2023 GMT
            Not After : Mar 11 17:08:27 2024 GMT
        Subject: CN=EEBB65AFCAF0885C584A59CFBEAE4C6F93BAFA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:67:21:ce:33:4f:dc:a8:63:c6:fe:93:ae:
                    1d:d4:83:17:27:40:4b:7c:22:06:76:f6:55:69:79:
                    ae:8d:ea:2f:61:11:7f:67:78:6e:31:d5:e6:52:4b:
                    58:4c:2f:95:02:2e:f8:b4:96:bf:98:12:c4:f3:59:
                    2d:5a:d1:52:94:18:ae:6c:5e:02:c7:44:fa:02:8d:
                    2e:4c:a3:c0:6b:90:54:12:98:90:af:9d:3b:b7:e0:
                    4f:bc:54:a8:67:eb:32:07:cb:44:df:39:d0:2c:07:
                    1c:84:47:dd:8f:0d:d9:19:d9:b4:80:2d:07:8a:3f:
                    1d:87:fa:d0:50:4b:42:27:92:93:70:e8:ee:11:79:
                    2c:66:6b:34:d7:68:b3:2f:98:ac:70:0b:93:06:1f:
                    e5:de:39:2f:e6:46:13:33:f2:a9:e8:8c:3d:6d:38:
                    22:3b:35:e2:51:f2:5d:fb:13:f5:57:f5:c1:fe:70:
                    04:f9:a0:e2:ea:da:1d:6a:75:e6:93:26:1d:30:36:
                    17:3e:3a:45:51:ac:69:cb:48:e0:ec:55:ba:bb:63:
                    e5:49:3f:d8:74:eb:d0:18:a8:96:0b:4a:b5:1f:c1:
                    61:c1:38:01:e5:6b:b1:3c:3f:a0:de:a1:11:dc:65:
                    71:85:fd:09:c9:30:be:4f:e6:a8:4e:3b:a5:94:2c:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BB:65:AF:CA:F0:88:5C:58:4A:59:CF:BE:AE:4C:6F:93:BA:FA:52
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3234203d3e203533323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:77:e6:09:02:27:72:7d:0a:35:60:38:b9:49:ae:1e:d6:85:
         94:90:60:3f:c3:3e:85:05:6d:c8:4e:e5:24:1b:46:c5:f5:1b:
         de:13:92:13:87:b0:fd:74:f3:b0:68:81:f3:7e:d8:86:73:aa:
         48:fa:8b:e2:62:85:19:44:da:02:d1:f6:9a:a0:28:f3:f8:bf:
         42:26:98:c1:32:92:90:a6:f0:48:a4:e7:17:01:a5:2a:67:7e:
         3c:78:c0:7d:7a:df:dd:88:3e:60:97:05:74:f0:c8:c7:08:39:
         27:0a:a4:14:aa:b3:bc:7c:d0:03:bb:bb:4d:e9:7e:7c:45:6c:
         4a:aa:04:19:f5:db:09:12:d8:f3:80:91:44:69:4f:70:68:d7:
         4f:82:46:80:bd:ec:26:22:df:32:1d:7f:b3:78:8a:62:d2:a1:
         66:00:e0:94:38:2d:b2:69:65:1a:f4:c0:49:45:c5:39:29:02:
         09:8f:e4:eb:2a:d8:d3:cc:77:e5:a6:80:7b:cf:b2:94:21:90:
         c0:6a:67:e0:93:13:66:3d:b2:4b:f0:6a:f2:58:09:f3:53:a3:
         75:d9:95:e7:80:1d:64:78:49:17:9e:87:bb:6a:85:0f:40:dd:
         d2:f0:df:7b:61:c6:47:88:59:65:76:87:03:00:70:79:70:72:
         50:50:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org