Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138392e35302e3134342e302f32302d3234203d3e20323731373234.roa
File:                     3138392e35302e3134342e302f32302d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          tG9sK+PdJ97TDzZR8Jv1Fnsg0LxUNpsj2PWGcCHGd3k=
Subject key identifier:   0E:D3:43:1E:96:AE:E4:4F:DB:25:7C:18:A9:DB:3A:15:1F:A5:24:C1
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       4F0CD38496352876DF682F3D8BA58EF2576FD969
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138392e35302e3134342e302f32302d3234203d3e20323731373234.roa
Signing time:             Wed 31 Jan 2024 14:31:16 +0000
ROA not before:           Wed 31 Jan 2024 14:26:16 +0000
ROA not after:            Wed 29 Jan 2025 14:31:16 +0000
asID:                     271724
IP address blocks:        189.50.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0c:d3:84:96:35:28:76:df:68:2f:3d:8b:a5:8e:f2:57:6f:d9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:16 2024 GMT
            Not After : Jan 29 14:31:16 2025 GMT
        Subject: CN=0ED3431E96AEE44FDB257C18A9DB3A151FA524C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:a2:54:3a:f1:3b:76:54:16:7c:56:10:14:
                    fd:15:9a:d1:e2:5d:8f:6b:4b:ff:ed:99:b5:e4:46:
                    d6:53:9b:37:f7:f7:29:a7:b2:79:45:f6:bc:ec:91:
                    df:a7:b6:6c:c9:37:05:b5:ac:f8:7b:d5:21:15:28:
                    f0:c3:9f:b2:99:14:f4:15:35:b7:82:35:c2:d5:52:
                    41:2b:64:2a:32:59:d9:63:ad:9e:6b:6f:11:66:77:
                    b0:24:8f:50:06:d6:f0:a8:a8:53:90:a8:cc:1c:54:
                    46:13:88:2d:1d:c4:6f:b1:24:f4:d5:e0:80:70:fc:
                    b3:36:06:8c:80:ee:29:d2:18:f2:87:66:64:38:71:
                    3a:d5:f5:16:10:47:5b:44:57:fc:39:ac:dd:83:d1:
                    ab:79:aa:c7:98:e1:af:c9:80:d5:2c:f7:43:b5:00:
                    74:48:fb:67:17:dc:5f:dd:54:1a:87:5e:bf:07:82:
                    d0:4a:62:72:52:49:78:55:d9:cf:04:29:ac:fa:5a:
                    24:2e:ce:fc:f5:f2:25:83:e4:f6:93:b7:e8:0c:5a:
                    41:3f:3d:45:39:53:24:ff:7a:14:2c:fe:eb:bf:51:
                    bf:68:8b:1a:8f:5b:82:99:38:ac:4c:11:92:72:8b:
                    7e:7b:e9:09:0e:cc:a5:d1:52:b7:c0:e8:dd:f1:b6:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D3:43:1E:96:AE:E4:4F:DB:25:7C:18:A9:DB:3A:15:1F:A5:24:C1
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138392e35302e3134342e302f32302d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:3a:51:6d:7b:be:a3:53:59:a2:bb:af:4a:09:63:e9:4e:79:
         30:37:45:dc:0a:7d:6a:df:e2:36:95:80:ec:a3:45:9a:e9:68:
         64:a9:b8:4d:9b:24:d0:ae:69:33:60:03:40:41:90:28:d1:a8:
         e9:6d:88:16:9d:07:8e:ff:52:05:60:fd:f3:85:1b:03:17:6c:
         80:1a:4d:70:8d:bf:58:d5:f3:28:d3:37:16:64:3b:ec:83:49:
         2c:a8:72:5e:63:b3:88:31:6d:c1:07:cc:88:48:32:cd:a0:d2:
         87:ac:3c:e2:c7:0c:13:c7:81:dc:74:43:d1:89:8a:1a:f6:56:
         39:18:76:12:25:a2:a8:57:01:65:a3:30:3b:ec:61:08:ed:93:
         a0:40:a5:dc:7e:ed:97:f6:86:ba:aa:dd:2c:ce:ba:5d:0a:78:
         73:49:cc:07:8f:62:05:3f:a6:85:99:24:82:f1:a2:01:4c:d7:
         a3:70:81:61:bf:ee:17:c8:af:37:9d:d0:26:7e:77:d6:ba:8a:
         26:86:d0:9f:0f:0a:8d:dc:f8:8b:a6:0a:0a:73:7a:3a:7d:9d:
         60:fd:04:9d:f5:68:72:c0:e3:f9:01:a3:0f:20:be:02:40:bb:
         54:02:60:ee:62:1d:f0:8d:36:b1:3e:9b:63:5b:96:19:78:e5:
         dc:66:39:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org