Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          DBVRghsy9Fj0wSj3P+8azmSIXlUL4YBIJ011Wo+JbQw=
Subject key identifier:   45:A1:19:CD:00:C3:F1:6E:4F:66:ED:32:C8:F5:C0:8F:9A:E7:36:FB
Certificate issuer:       /CN=2484B14E03EFF793036E555AD18ED34F764A758B
Certificate serial:       20531D5DBC8B525F5D7F430C3986D6CB2FE32C39
Authority key identifier: 24:84:B1:4E:03:EF:F7:93:03:6E:55:5A:D1:8E:D3:4F:76:4A:75:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2484B14E03EFF793036E555AD18ED34F764A758B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
Signing time:             Tue 02 Apr 2024 15:06:08 +0000
ROA not before:           Tue 02 Apr 2024 15:01:08 +0000
ROA not after:            Tue 01 Apr 2025 15:06:08 +0000
asID:                     270579
IP address blocks:        189.126.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:53:1d:5d:bc:8b:52:5f:5d:7f:43:0c:39:86:d6:cb:2f:e3:2c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2484B14E03EFF793036E555AD18ED34F764A758B
        Validity
            Not Before: Apr  2 15:01:08 2024 GMT
            Not After : Apr  1 15:06:08 2025 GMT
        Subject: CN=45A119CD00C3F16E4F66ED32C8F5C08F9AE736FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:11:1d:ac:52:dd:40:b6:65:41:ff:d8:8f:
                    9c:a7:2e:86:7a:44:8f:63:b3:c9:d6:66:ed:72:81:
                    4b:f0:df:24:dc:a0:a3:83:60:e9:a7:00:3f:65:59:
                    33:86:13:30:30:23:8e:e2:1e:e5:cc:e5:bd:41:16:
                    df:6a:fd:70:b1:de:4e:9f:2a:b4:5b:d8:4b:cc:ba:
                    9d:8b:5c:ce:72:39:27:84:7e:f6:b7:09:e6:e8:9c:
                    78:7a:7d:85:5a:35:0b:0d:98:b8:f8:e7:60:58:86:
                    18:05:27:e9:5f:e3:ce:5c:84:10:bc:4f:e2:c9:b3:
                    10:5c:be:60:87:74:64:2b:11:9b:3e:1a:38:42:4b:
                    9e:8c:10:b4:d9:01:2e:07:7c:e1:fc:ef:90:10:db:
                    3e:d7:86:21:cd:dd:e1:6c:ab:b8:5f:d5:43:05:00:
                    2d:64:ef:de:ef:c7:a6:20:eb:67:fe:2a:1e:a7:38:
                    98:15:7e:30:18:0a:94:33:80:45:25:9a:a3:2e:d2:
                    0c:2d:af:db:80:a4:f2:0e:71:ff:f9:91:1e:88:79:
                    49:7c:8f:48:95:e5:16:f2:67:e5:53:b7:19:e2:74:
                    1d:51:93:8c:c8:ed:8f:66:12:38:be:8f:2f:af:42:
                    1b:61:98:60:36:88:c2:73:7c:d7:5d:09:7b:29:31:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:19:CD:00:C3:F1:6E:4F:66:ED:32:C8:F5:C0:8F:9A:E7:36:FB
            X509v3 Authority Key Identifier:
                keyid:24:84:B1:4E:03:EF:F7:93:03:6E:55:5A:D1:8E:D3:4F:76:4A:75:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/2484B14E03EFF793036E555AD18ED34F764A758B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2484B14E03EFF793036E555AD18ED34F764A758B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:96:b3:37:c2:de:e0:93:aa:63:c2:82:47:f2:af:f3:34:
         f4:1b:60:d5:2b:cb:20:af:e4:8b:cf:50:2e:f9:9a:fc:4b:c4:
         49:31:eb:30:fb:a0:94:28:8e:1b:29:5e:5a:7a:97:5a:98:d0:
         7e:99:65:04:a7:cb:1a:55:67:22:c1:54:e8:1f:b9:f1:50:80:
         0c:27:5a:c1:eb:4b:65:5f:7d:15:ce:3b:14:58:4a:4f:79:5e:
         8c:83:7e:fb:ac:09:96:04:ef:c6:d1:d8:85:5b:61:b5:a0:3b:
         e7:76:fa:d8:99:79:5e:ba:6c:24:4b:1b:f8:b1:c5:3b:e4:1b:
         7b:e5:6f:7a:48:9f:7f:72:15:d8:5f:45:ad:73:8e:21:b5:69:
         a5:4d:66:0f:c8:59:9c:a5:b2:81:30:2b:3f:1c:fb:fb:14:d9:
         33:3d:ee:10:84:d4:50:5f:7a:f3:87:be:83:76:b0:15:c3:dc:
         82:d5:b9:73:bc:9f:07:1d:ea:11:b9:b4:34:25:3a:ba:ae:04:
         a2:33:66:3b:2d:70:1d:8a:67:1f:55:dc:97:2e:04:d4:a7:f5:
         bf:e5:b5:51:25:59:7d:25:9c:65:df:6d:2c:db:93:51:b4:18:
         3b:55:d4:67:69:90:79:85:51:1b:0a:b4:e0:6f:aa:94:49:a9:
         d4:25:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org