Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e35302e3134342e302f32302d3234203d3e20323731373234.roa
File:                     3138392e35302e3134342e302f32302d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          64dmQYXXM2q0cLjUp11cEj3dNumfVEDKf4i2DglBBbo=
Subject key identifier:   4B:C5:AB:51:3E:ED:B1:F2:E3:16:85:42:2D:8F:5F:30:D5:61:7B:36
Certificate issuer:       /CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
Certificate serial:       0B66B305F78DEB450AB5535D731A6CD06C12F231
Authority key identifier: E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e35302e3134342e302f32302d3234203d3e20323731373234.roa
Signing time:             Tue 28 Feb 2023 12:43:24 +0000
ROA not before:           Tue 28 Feb 2023 12:38:24 +0000
ROA not after:            Tue 27 Feb 2024 12:43:24 +0000
asID:                     271724
IP address blocks:        189.50.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:66:b3:05:f7:8d:eb:45:0a:b5:53:5d:73:1a:6c:d0:6c:12:f2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
        Validity
            Not Before: Feb 28 12:38:24 2023 GMT
            Not After : Feb 27 12:43:24 2024 GMT
        Subject: CN=4BC5AB513EEDB1F2E31685422D8F5F30D5617B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5f:42:64:9c:8c:46:0b:72:f9:16:0c:d6:82:
                    db:85:94:dd:9d:62:84:ec:58:d1:98:e8:b0:34:2a:
                    5d:f7:cb:49:29:a8:a2:53:35:39:ca:04:77:e5:93:
                    af:84:4d:42:01:ea:b2:d0:28:ca:82:f0:78:2e:29:
                    c4:58:f9:61:f3:21:6f:14:88:53:5c:db:72:fa:1c:
                    03:52:08:b0:df:de:68:b4:65:be:1e:37:70:e5:ff:
                    b1:dd:46:70:e7:8f:ef:56:12:8a:a4:54:f3:d4:db:
                    fe:c0:35:10:ce:74:29:fd:f3:84:35:b6:1e:b8:97:
                    1a:3c:ac:29:22:38:44:f7:81:b6:43:16:5f:96:25:
                    c1:17:26:21:07:69:ee:07:36:4a:91:52:f7:8c:a8:
                    eb:bd:4a:92:74:47:1e:8c:25:4f:c0:95:23:83:a7:
                    c4:9a:dd:59:c2:3a:a5:01:d5:70:37:7a:a7:ae:63:
                    a5:63:20:aa:c7:2c:ba:6d:1e:ab:7f:54:8a:59:2a:
                    55:ee:bc:a5:6c:9a:95:bc:f2:b9:c9:1e:24:be:a4:
                    92:f4:f9:90:2f:98:6c:e6:9c:29:52:f5:12:f2:6e:
                    b7:73:63:b2:92:99:ed:ac:9a:9e:09:62:00:74:4b:
                    8f:d5:f1:8f:ed:6e:71:90:ee:8c:3a:19:27:e0:7a:
                    00:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C5:AB:51:3E:ED:B1:F2:E3:16:85:42:2D:8F:5F:30:D5:61:7B:36
            X509v3 Authority Key Identifier:
                keyid:E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e35302e3134342e302f32302d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:e1:21:1d:3d:2a:8c:7b:84:29:21:b7:45:8d:21:9b:ab:6a:
         47:34:40:8f:25:d0:a0:ea:77:de:76:c3:3c:43:79:e9:1c:90:
         57:74:fa:ff:03:56:f3:e5:ae:c8:85:ef:6d:39:5b:8e:e0:39:
         75:42:d5:af:15:a7:7f:ee:03:67:0c:d6:31:45:1b:81:5f:2e:
         15:3e:3e:c9:ce:75:8b:69:ff:08:d3:79:34:66:12:9f:5c:2c:
         d4:aa:73:8c:fe:0a:e4:de:54:e8:d4:e5:ed:24:5e:7e:13:02:
         cd:42:e8:b7:0d:19:ab:5e:ae:ca:c7:5a:1c:07:8b:6b:1d:d3:
         d4:3f:17:ab:d2:c3:39:1a:f7:e4:7e:dc:b3:b3:f9:8f:12:54:
         ac:27:8b:be:10:7c:89:11:72:c2:92:59:bf:93:ee:f9:00:03:
         e6:1f:ab:8f:b1:23:9e:a6:6e:11:cb:5e:93:35:75:39:66:ef:
         64:b1:6b:cf:73:98:a5:fa:0c:b1:eb:9e:90:f7:e8:7f:37:e2:
         d1:eb:f9:48:fe:3a:6c:ba:a5:2b:c8:dc:53:36:a0:52:38:f3:
         cd:b2:dd:dc:b4:96:e0:bb:a3:5a:af:dd:74:a3:38:01:2d:00:
         ba:c0:96:75:3b:c1:44:9e:1c:9b:d4:51:94:fc:c0:73:46:ab:
         75:d9:c8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org