Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa (raw, json)
Hash identifier:          Tr7wLwWEgvM3Q3TKoMsYdSSP4a5y/R0ApPKoJzSO568=
Subject key identifier:   7B:E9:7B:B9:1D:B4:BB:4C:34:F9:16:4A:DB:BD:50:43:FE:3B:7B:94
Certificate issuer:       /CN=3BEB08169B14107D9668F7CD71FD6569C8FA1613
Certificate serial:       68715C1A7F4541118267336FBE53DDED20C36AE3
Authority key identifier: 3B:EB:08:16:9B:14:10:7D:96:68:F7:CD:71:FD:65:69:C8:FA:16:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BEB08169B14107D9668F7CD71FD6569C8FA1613.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
Signing time:             Mon 04 Mar 2024 18:39:01 +0000
ROA not before:           Mon 04 Mar 2024 18:34:01 +0000
ROA not after:            Mon 03 Mar 2025 18:39:01 +0000
asID:                     270579
IP address blocks:        189.126.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:71:5c:1a:7f:45:41:11:82:67:33:6f:be:53:dd:ed:20:c3:6a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BEB08169B14107D9668F7CD71FD6569C8FA1613
        Validity
            Not Before: Mar  4 18:34:01 2024 GMT
            Not After : Mar  3 18:39:01 2025 GMT
        Subject: CN=7BE97BB91DB4BB4C34F9164ADBBD5043FE3B7B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c1:37:bb:92:b8:31:f5:c7:0e:a6:0b:f6:f8:
                    c1:14:51:24:74:5a:9f:d8:23:03:54:27:83:e4:4a:
                    82:08:55:95:6d:03:dc:bb:9a:69:c6:ec:5b:bd:8a:
                    50:a1:37:2b:a1:c1:cb:fc:3f:68:3e:6d:65:d8:c1:
                    1c:39:74:84:c3:41:20:05:ec:fd:99:7a:e1:e3:47:
                    97:72:9e:3c:85:a6:ce:06:7e:af:4d:52:4e:0e:55:
                    2e:4e:34:df:01:05:63:4f:39:f4:5b:45:22:e4:02:
                    c2:24:55:74:77:5f:25:cb:87:57:ff:fa:35:8a:98:
                    81:9f:a5:1d:c6:cb:6a:48:e2:90:f9:a5:ca:8a:c7:
                    38:37:20:66:03:e1:e4:d7:00:1d:05:27:22:a6:33:
                    4b:1d:f5:f2:f7:e4:62:d9:14:21:4c:de:d4:74:0e:
                    7f:4f:4e:20:f3:bd:39:28:25:08:c4:28:d1:a5:f3:
                    ac:0f:d1:8e:20:e8:60:33:7f:be:76:0e:18:f7:fd:
                    f0:9d:53:57:c6:e1:cd:62:3f:42:8b:da:f4:e7:a2:
                    e2:59:2b:de:84:fc:f2:c0:d2:b9:84:40:b8:93:95:
                    2d:90:8e:16:c2:8d:01:71:30:dd:b0:89:0b:45:ad:
                    3f:90:47:88:b8:31:74:46:d5:5b:34:b3:a4:55:1e:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E9:7B:B9:1D:B4:BB:4C:34:F9:16:4A:DB:BD:50:43:FE:3B:7B:94
            X509v3 Authority Key Identifier:
                keyid:3B:EB:08:16:9B:14:10:7D:96:68:F7:CD:71:FD:65:69:C8:FA:16:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3BEB08169B14107D9668F7CD71FD6569C8FA1613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BEB08169B14107D9668F7CD71FD6569C8FA1613.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:71:79:62:df:fc:98:40:7a:d0:c0:6f:dc:92:b7:94:8e:3b:
         94:7a:41:79:cc:69:be:9c:0a:39:f0:e5:ce:32:b4:76:59:dc:
         ae:88:af:99:93:da:d5:09:4f:bd:b6:90:ca:a2:18:3f:70:0b:
         99:7f:7f:5b:08:81:f7:52:c1:17:c5:1d:e8:27:80:1d:b9:ec:
         d7:20:f3:cf:7a:fb:2b:90:e0:4e:10:95:9e:4e:17:ca:c5:e0:
         a7:a0:ea:46:53:76:31:b5:5c:8b:0f:c8:90:e3:d6:7b:df:2f:
         f8:85:1f:4a:da:79:f1:f7:36:d4:6d:be:c9:07:d0:42:f6:cf:
         6f:67:6e:0f:3d:30:98:c8:0f:92:6a:9a:66:b3:54:bb:6f:63:
         f0:f1:e2:69:ed:0f:7c:5d:41:4b:ae:ce:16:f5:82:69:69:95:
         2f:dd:1a:fd:c6:e9:22:f3:9e:1a:3e:17:93:c9:3a:fd:ce:f0:
         dd:96:69:4a:0a:81:ed:dd:93:7e:12:c5:21:a2:22:cf:8c:23:
         78:5d:3f:c5:b7:ce:14:49:45:31:da:b6:44:ea:9e:03:ca:e0:
         3b:8f:d7:80:93:c8:28:4a:ec:9d:5b:ca:0c:6b:8a:71:6c:e7:
         ad:f6:df:dc:9a:88:d6:4a:31:23:d0:60:d7:12:2d:70:c2:80:
         34:49:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org