Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32342e302f32312d3231203d3e203533303539.roa
File:                     3138392e34352e32342e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          Jwn9TX0S/ld0TSunjTnvT/ddwJIXyZyC+6WSOKFqMwI=
Subject key identifier:   27:2F:FC:62:1B:31:13:AA:A6:54:F7:AA:A0:FE:8C:20:D7:54:52:38
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       5BAD76E6D5DBA22421336653FD45159D7DEB116B
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32342e302f32312d3231203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:33 +0000
ROA not before:           Fri 03 Mar 2023 12:14:33 +0000
ROA not after:            Fri 01 Mar 2024 12:19:33 +0000
asID:                     53059
IP address blocks:        189.45.24.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ad:76:e6:d5:db:a2:24:21:33:66:53:fd:45:15:9d:7d:eb:11:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:33 2023 GMT
            Not After : Mar  1 12:19:33 2024 GMT
        Subject: CN=272FFC621B3113AAA654F7AAA0FE8C20D7545238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:ff:4e:2e:bb:8b:fb:3e:f6:2e:38:33:d9:
                    23:46:ff:45:6a:cd:c7:6b:0a:7f:67:29:64:7d:82:
                    9b:7f:23:d6:cc:74:de:b8:f3:12:1c:41:cb:96:c4:
                    81:51:97:0d:89:38:af:5d:bb:e5:69:e7:58:bd:0c:
                    42:48:43:71:3a:20:c4:c1:8a:d1:a5:86:42:58:f3:
                    60:0d:30:b4:04:62:6a:48:c5:ae:36:69:41:99:9b:
                    f5:e9:c4:bc:49:01:69:06:59:5c:eb:6f:7f:04:f8:
                    0d:94:fc:2b:19:69:77:52:cf:86:44:0f:04:d9:85:
                    c3:bf:02:a5:69:09:d7:4d:cd:75:5d:6f:17:72:dc:
                    98:a1:09:25:2c:69:52:8e:95:28:79:43:27:22:9a:
                    72:c4:7d:54:7c:21:ba:7b:2a:2a:c1:96:fb:17:5a:
                    98:87:17:0a:18:ed:a7:77:39:12:26:3a:5f:de:3b:
                    63:60:77:4b:14:87:54:60:cb:32:c7:d0:3d:a5:57:
                    52:f2:d2:4e:4b:2e:fc:cf:fc:1b:b6:67:18:93:96:
                    40:a8:55:31:90:6e:2d:a4:b6:0d:89:33:6e:c3:42:
                    a3:e7:8c:7a:39:49:c8:be:ad:77:01:d0:77:41:21:
                    85:53:9b:7d:a8:b4:ce:f5:d2:ae:2b:af:56:1f:f1:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2F:FC:62:1B:31:13:AA:A6:54:F7:AA:A0:FE:8C:20:D7:54:52:38
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32342e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:7d:b8:e8:6f:fd:21:35:4b:31:9e:78:d0:26:84:fd:0b:a7:
         16:d0:36:3c:14:25:b7:22:c5:f9:be:4d:51:b2:63:31:f2:0b:
         31:46:0d:b3:f5:29:8f:07:77:48:c2:cc:61:b1:b6:f9:4a:ea:
         25:cb:6f:9a:6c:0d:65:37:5b:76:fb:7e:ab:18:4f:27:16:91:
         b2:a1:71:b4:d8:5c:c8:4f:35:df:63:36:74:29:5e:49:bc:76:
         5b:2a:b2:2f:19:af:44:ea:19:ab:a7:40:84:eb:e0:d1:51:de:
         a2:5f:d5:37:e2:0e:10:9b:3a:3e:03:31:33:e4:c2:b2:41:8e:
         6a:0f:84:66:61:7f:a0:85:a4:6b:1b:94:6d:5c:43:7a:e7:4e:
         87:ad:59:b2:5d:15:60:85:d0:3f:b6:a9:0b:d7:5d:29:7e:89:
         1f:43:ee:5d:8f:a8:1b:00:6c:37:db:c8:6d:50:0e:7f:fa:cc:
         c9:96:bb:5d:ce:0b:eb:03:bf:7f:f9:2e:ff:cf:37:09:da:27:
         5b:29:a1:e9:13:da:4e:af:eb:ea:be:21:23:60:36:61:54:72:
         7c:f1:30:87:ec:76:ae:14:ce:57:c1:a3:9c:43:21:43:e1:76:
         c8:b4:59:85:41:03:fc:9a:47:fd:6a:db:40:97:8a:36:6d:c3:
         63:6a:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org