Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/3138392e37362e37382e302f32342d3234203d3e203532373532.roa
File:                     3138392e37362e37382e302f32342d3234203d3e203532373532.roa (raw, json)
Hash identifier:          4r8O9b59ooWfObzCtDwQQuyNq89DIt2ft2hVTHaOW4g=
Subject key identifier:   FF:3D:1D:20:C1:64:D9:67:9C:82:C3:72:53:37:F0:A1:1B:99:7F:00
Certificate issuer:       /CN=49F08990C69AD6EA89454E7CF1EF5A283511DBA2
Certificate serial:       72FB4DEE15FAA3A62540D1A69ABD8BEBD206779E
Authority key identifier: 49:F0:89:90:C6:9A:D6:EA:89:45:4E:7C:F1:EF:5A:28:35:11:DB:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49F08990C69AD6EA89454E7CF1EF5A283511DBA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/3138392e37362e37382e302f32342d3234203d3e203532373532.roa
Signing time:             Tue 08 Aug 2023 12:36:31 +0000
ROA not before:           Tue 08 Aug 2023 12:31:31 +0000
ROA not after:            Tue 06 Aug 2024 12:36:31 +0000
asID:                     52752
IP address blocks:        189.76.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fb:4d:ee:15:fa:a3:a6:25:40:d1:a6:9a:bd:8b:eb:d2:06:77:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F08990C69AD6EA89454E7CF1EF5A283511DBA2
        Validity
            Not Before: Aug  8 12:31:31 2023 GMT
            Not After : Aug  6 12:36:31 2024 GMT
        Subject: CN=FF3D1D20C164D9679C82C3725337F0A11B997F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:f1:f7:34:2d:93:5d:2c:8d:12:e6:bc:87:
                    c7:82:bd:f1:66:c0:2e:9e:c5:54:52:a3:aa:44:bb:
                    db:97:95:27:3c:ee:0a:bc:4c:83:da:9c:91:22:74:
                    58:f5:f1:bb:ad:49:5d:a6:c0:82:3e:21:15:02:57:
                    9d:ab:14:37:42:da:28:cc:1d:64:98:29:e2:61:f8:
                    70:14:3f:c6:0d:35:51:6d:20:8a:5d:dd:e2:ab:e3:
                    65:fb:06:df:bb:bf:6a:07:06:67:31:70:f8:8b:97:
                    ae:2a:e6:67:d4:b0:11:c8:ef:a1:ba:03:89:5d:8d:
                    50:30:3c:23:df:26:40:40:e7:63:6e:dd:f1:83:df:
                    08:9c:71:dc:1a:88:75:61:f2:26:a6:1b:fe:b5:09:
                    a2:4f:46:65:24:7b:0c:a7:8b:ab:28:eb:19:af:66:
                    b4:6b:34:a1:73:54:b6:20:c1:01:18:67:ec:5e:dc:
                    d6:89:2e:0b:66:ae:3b:db:85:9b:e8:1f:ab:51:7a:
                    b5:42:6c:d1:08:1f:20:76:95:f3:a7:4d:49:7d:71:
                    20:2a:2f:bb:43:05:7b:a9:57:91:9c:08:11:cc:fc:
                    3d:e1:f2:ff:99:31:64:2a:5e:7b:de:a5:9e:3a:76:
                    28:c0:93:97:55:fc:fb:37:9a:79:73:75:10:a0:fb:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3D:1D:20:C1:64:D9:67:9C:82:C3:72:53:37:F0:A1:1B:99:7F:00
            X509v3 Authority Key Identifier:
                keyid:49:F0:89:90:C6:9A:D6:EA:89:45:4E:7C:F1:EF:5A:28:35:11:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/49F08990C69AD6EA89454E7CF1EF5A283511DBA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49F08990C69AD6EA89454E7CF1EF5A283511DBA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/3138392e37362e37382e302f32342d3234203d3e203532373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:60:4e:b0:63:6d:46:25:2f:21:fe:ea:1b:ad:52:db:d4:ba:
         cf:44:b1:57:32:65:ac:79:08:fb:97:5c:41:37:24:87:79:85:
         05:ae:91:1c:e5:90:76:aa:12:0b:ec:89:ae:49:11:00:45:49:
         0b:f9:13:ae:97:18:a0:e5:4e:3d:5c:0d:bc:a7:de:1b:ac:a1:
         f8:4b:cd:5b:dc:94:39:3b:62:ff:e1:db:ba:95:14:68:be:98:
         c6:2b:ba:f3:d9:55:a3:1b:3f:fb:cd:66:94:bc:24:70:5a:c8:
         da:0b:e7:f4:79:8c:c1:5f:15:62:45:fa:ae:df:6d:b3:d9:e9:
         be:c7:a1:57:f0:f1:95:09:ff:b2:fd:53:09:97:a9:9c:d7:b3:
         4f:5d:2d:82:40:5e:81:8b:e9:c9:04:87:01:5a:5d:53:83:f4:
         d3:62:36:20:e2:91:04:9a:ab:60:fc:32:5a:99:d7:c2:ca:1c:
         80:7b:81:6d:f8:ed:30:4e:83:26:b6:da:cf:03:f1:36:dc:c3:
         24:57:17:c7:2f:cc:dd:4e:bf:85:e5:65:f2:03:4a:d2:da:4d:
         27:1a:2f:3c:b1:8b:55:fe:37:8c:9f:54:51:1e:90:53:e7:1e:
         e8:85:20:44:cd:01:9d:76:d8:f4:76:0e:35:fa:1f:d9:09:08:
         54:3e:94:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org