Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa
File:                     3138392e37362e3230382e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier:          s9/DdNL1MJCNJo8zAbBqG8t7uHgxFgzKQPJFhlFCGLg=
Subject key identifier:   4D:3A:B4:F0:D8:01:27:A8:B9:06:94:83:B0:D2:9D:D5:E7:2C:4A:E1
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       2F108FBE6C117CC439C4725CDA42665A905D534F
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:05:56 +0000
ROA not before:           Sat 06 Apr 2024 03:00:56 +0000
ROA not after:            Sat 05 Apr 2025 03:05:56 +0000
asID:                     28360
IP address blocks:        189.76.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:10:8f:be:6c:11:7c:c4:39:c4:72:5c:da:42:66:5a:90:5d:53:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:00:56 2024 GMT
            Not After : Apr  5 03:05:56 2025 GMT
        Subject: CN=4D3AB4F0D80127A8B9069483B0D29DD5E72C4AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:db:41:7b:78:16:24:d3:3e:97:0c:4e:e9:
                    dc:5a:6b:4f:09:4c:f3:65:85:e4:a2:b5:3b:08:23:
                    46:b2:76:ba:50:17:1a:37:fb:c8:71:40:ba:17:3e:
                    ca:e3:ad:43:ef:c4:f2:7a:82:2b:32:0c:09:1b:d5:
                    35:9f:de:f4:82:c6:63:a4:1b:b6:e0:27:d7:da:b1:
                    ec:05:f9:fe:63:60:83:a1:42:4b:e5:92:59:08:48:
                    1f:ca:36:a1:96:de:67:e9:98:76:ee:cd:c9:0b:56:
                    07:95:43:fb:3f:fc:a1:07:af:db:f0:35:a7:b6:89:
                    a6:d3:01:42:cf:f9:23:d8:22:c2:1a:a8:fa:07:55:
                    5f:e4:68:5f:f0:e5:8d:21:f4:58:ec:1e:ed:57:aa:
                    51:4f:ce:ea:f2:0b:7c:62:2b:7b:96:ab:ac:ac:79:
                    58:c7:94:2a:92:f5:ae:de:91:cb:90:51:6c:f3:b9:
                    b6:73:d5:7b:1a:94:67:02:62:ba:19:88:57:8f:38:
                    96:b8:41:31:38:6f:26:42:fc:f8:6e:29:73:01:cf:
                    46:ee:52:11:40:15:de:9d:8c:f7:d8:2c:76:1f:6f:
                    8f:05:4f:d2:ec:33:07:ab:9a:62:25:13:46:e3:5d:
                    53:ab:6c:9a:0d:b4:3f:d3:3e:a0:60:6e:1d:03:76:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3A:B4:F0:D8:01:27:A8:B9:06:94:83:B0:D2:9D:D5:E7:2C:4A:E1
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:6b:78:74:8b:8e:f6:c9:86:76:7f:db:92:1f:85:7c:99:bf:
         0f:c3:b5:0f:a1:e7:35:23:19:d9:25:36:62:10:98:13:0a:05:
         cf:a9:94:47:50:f3:06:be:ae:71:d0:34:61:d0:18:2e:8f:f3:
         81:54:8a:cb:78:61:93:db:24:e0:97:90:9e:ef:e3:c1:c2:b1:
         e2:0c:7a:f7:7a:98:a6:3e:6e:ec:f5:01:10:4d:58:96:ab:b6:
         34:d5:5a:92:5c:4b:fd:f8:d1:2b:9f:7c:5c:52:08:34:58:25:
         79:96:b1:55:78:3c:8e:13:9d:f5:8e:7b:f7:3c:cf:89:ee:41:
         20:ad:59:69:e3:54:32:ab:5b:36:5f:21:b4:dd:c1:cc:61:37:
         ef:c5:6c:19:80:95:37:a8:e1:df:85:d0:38:a1:48:65:77:3c:
         cb:5b:f0:e7:c2:d1:9b:75:d6:5d:5c:d0:e9:d9:28:c9:0d:89:
         7a:d7:23:85:dc:43:e8:28:0d:9e:82:b4:3c:39:40:82:a4:5c:
         1e:e9:28:71:5e:0f:fd:c8:89:60:d2:17:ea:e3:4c:57:da:10:
         6d:cc:f6:88:81:c9:34:06:a0:3b:59:e2:86:10:09:a3:93:5b:
         6a:95:2d:23:f6:2f:d9:a3:02:87:de:66:4e:d4:86:e2:09:9d:
         6c:4b:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org