Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e38392e302f32342d3234203d3e203238363130.roa
File:                     3138362e3230392e38392e302f32342d3234203d3e203238363130.roa (raw, json)
Hash identifier:          EWwexTCbEhOyKRgg1rpXyNWV8HK/0kitCWuJ9LxMiLE=
Subject key identifier:   3A:B3:BB:C7:90:DE:5D:5A:F8:52:2A:0F:37:EF:36:DD:09:A7:0B:E5
Certificate issuer:       /CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
Certificate serial:       317B327DE5915191550FBD7F4F18C3A2496E2312
Authority key identifier: 4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e38392e302f32342d3234203d3e203238363130.roa
Signing time:             Thu 04 Apr 2024 20:03:04 +0000
ROA not before:           Thu 04 Apr 2024 19:58:04 +0000
ROA not after:            Thu 03 Apr 2025 20:03:04 +0000
asID:                     28610
IP address blocks:        186.209.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7b:32:7d:e5:91:51:91:55:0f:bd:7f:4f:18:c3:a2:49:6e:23:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
        Validity
            Not Before: Apr  4 19:58:04 2024 GMT
            Not After : Apr  3 20:03:04 2025 GMT
        Subject: CN=3AB3BBC790DE5D5AF8522A0F37EF36DD09A70BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:70:5b:f7:6c:72:35:eb:5b:0b:d9:49:30:
                    01:06:c6:65:33:25:42:a4:a1:8c:a2:a2:4a:2f:7d:
                    ff:59:64:3c:69:38:89:08:48:67:2b:c8:fe:9a:e6:
                    59:a7:79:ad:68:91:3d:7e:25:51:27:a6:39:f3:de:
                    d9:50:af:b2:69:28:aa:a4:4c:6c:49:06:a2:88:6a:
                    99:cd:71:9e:91:30:01:bf:4a:25:55:7e:66:8b:a7:
                    43:84:8b:fd:8f:b3:d2:ca:4f:8f:1b:9b:d5:ca:78:
                    ca:c4:b3:7e:42:fc:db:33:74:39:9d:7d:30:b6:97:
                    f9:40:09:a3:bf:04:14:aa:5c:63:a4:f0:e5:1f:1b:
                    e4:fb:ac:3a:d6:1a:4a:55:1a:a6:fc:81:f3:00:17:
                    d4:f6:06:4c:25:87:37:37:86:16:20:fb:0d:69:ce:
                    31:50:2b:01:2b:20:4c:e1:7f:33:d9:a4:37:17:af:
                    1d:2b:b7:0c:be:bf:64:5d:f9:72:72:fb:da:3a:e7:
                    da:9f:d4:7c:16:ac:0a:64:bb:0c:62:b0:b7:f8:a7:
                    d0:cb:1d:6e:4e:44:98:9a:c3:b6:3a:53:4e:80:84:
                    9d:24:4a:fc:cf:39:b0:d0:13:81:b8:d3:c0:8d:ed:
                    d3:15:48:16:c3:3d:13:95:31:c0:5c:fc:15:84:c6:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B3:BB:C7:90:DE:5D:5A:F8:52:2A:0F:37:EF:36:DD:09:A7:0B:E5
            X509v3 Authority Key Identifier:
                keyid:4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e38392e302f32342d3234203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:a0:80:58:a5:6d:38:05:ba:32:9d:e8:99:77:50:a7:28:
         fc:36:38:df:e4:c3:64:8a:a2:fe:26:9f:09:81:bf:fa:d0:da:
         0e:2d:1b:b5:64:aa:b7:bf:e5:ee:64:e0:7a:44:2e:bb:f2:9f:
         2b:47:32:c4:bf:a7:d1:f8:9a:f0:de:f5:79:ed:e5:3e:23:3a:
         a3:d7:18:ea:16:e9:5e:fd:16:c8:d6:2a:fa:f1:54:e3:b7:40:
         e6:0d:f2:a2:1f:28:74:ca:b6:b8:b8:79:1f:70:a2:1b:ca:4b:
         91:2e:82:24:64:8e:34:aa:e8:e4:71:12:b1:3b:37:bd:6e:1c:
         38:3d:52:ce:4e:9f:7d:f1:f4:71:06:4a:a1:44:52:5c:94:49:
         39:ab:56:b0:e2:a1:df:8d:09:85:00:ff:7d:cf:f0:16:42:fc:
         d9:58:65:1e:c4:dd:2c:76:45:27:20:1f:7c:ea:86:b9:5a:9b:
         fb:cd:1c:98:9b:b1:6f:f0:b2:39:46:cc:cd:81:e7:50:85:21:
         ce:a7:8c:8a:13:7b:cd:64:bd:9c:97:15:10:5f:d4:68:52:ca:
         07:69:36:22:08:4f:82:51:71:c2:69:2e:ae:c0:cf:bb:53:b2:
         fa:35:cb:c5:bd:bd:31:f6:f8:8b:6c:24:b6:f9:7b:2e:06:44:
         61:e5:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:46 2024 by rpki-client on console-fra.rpki-client.org