Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3230382e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          bIxNizC/XXBYw4P5dJ+oXuEbZ6mFuhugflnZ7dw3ST8=
Subject key identifier:   8B:1A:4C:8F:24:18:C7:29:89:6B:A1:70:2C:C7:B4:73:69:B7:BB:D6
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       666BCED9C71394500C825FA76480812405738061
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:46 +0000
ROA not before:           Sat 06 Apr 2024 02:40:46 +0000
ROA not after:            Sat 05 Apr 2025 02:45:46 +0000
asID:                     28360
IP address blocks:        189.76.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6b:ce:d9:c7:13:94:50:0c:82:5f:a7:64:80:81:24:05:73:80:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:46 2024 GMT
            Not After : Apr  5 02:45:46 2025 GMT
        Subject: CN=8B1A4C8F2418C729896BA1702CC7B47369B7BBD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:50:d6:1d:8b:95:c6:17:0a:cd:b4:8b:ab:
                    34:e3:53:d6:46:09:5a:b5:85:d0:32:78:92:37:c4:
                    6d:65:3f:7e:8d:74:92:45:90:b5:d7:8c:a5:dd:12:
                    39:f9:3c:78:37:12:e9:e8:20:ec:35:7f:fb:04:bb:
                    af:a7:c5:e2:0d:f4:50:38:4f:aa:0d:1e:21:4f:7a:
                    52:69:e8:78:f9:8d:95:b4:61:50:99:c2:46:86:10:
                    f1:84:06:34:03:ce:c8:01:f9:07:e9:f8:b4:28:71:
                    e4:73:4e:9b:ae:96:96:db:1c:31:f2:a5:ed:16:e8:
                    04:9d:ec:56:a2:c4:9d:2f:30:e1:b8:22:87:11:ca:
                    cf:ca:03:0d:3d:94:d4:5c:af:d4:65:f9:42:a8:04:
                    aa:69:e6:d2:9d:3e:38:22:1e:a3:8e:94:6b:3f:d3:
                    f3:96:4a:69:13:1e:8a:ae:69:1c:05:ef:a5:f9:c9:
                    ba:b5:21:06:ed:ad:d0:62:f8:d0:75:9f:b3:66:b9:
                    6d:07:6c:c2:6d:c4:ff:c9:85:5f:a5:6c:f3:9e:ad:
                    38:57:6e:65:d5:d7:c3:32:fb:1c:c7:77:6a:9f:ef:
                    a7:ba:5e:00:69:a5:e2:2e:d4:fc:98:37:81:fd:25:
                    c7:27:15:9e:4f:81:64:c2:3d:53:ca:dd:9d:fc:41:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1A:4C:8F:24:18:C7:29:89:6B:A1:70:2C:C7:B4:73:69:B7:BB:D6
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:a5:97:7c:15:e2:70:35:16:25:da:11:3b:36:f1:ca:fc:
         58:0e:36:3a:69:b3:79:47:cf:a3:2c:14:21:80:76:6a:c5:02:
         0d:9a:ef:48:47:58:48:62:81:24:98:83:25:a8:06:01:cd:d0:
         cf:3d:71:59:10:e4:14:59:75:38:3f:70:76:1f:83:ac:29:01:
         fa:f9:54:09:77:b8:40:f0:f7:f0:c1:17:2b:ee:6a:6b:c3:53:
         15:ef:39:8a:b1:d2:c7:58:45:46:a8:74:3f:c9:87:83:8b:39:
         fb:c2:91:fe:ca:43:1f:26:c5:2e:39:b6:6d:1f:73:77:ce:fc:
         89:49:d0:cf:1e:71:c2:97:59:f4:b7:82:aa:68:33:59:ea:01:
         48:5d:19:d4:77:18:61:32:3b:9c:bd:29:e7:4a:c9:f4:ad:ea:
         8a:88:0b:1e:59:55:38:0c:a7:d2:51:62:c6:b6:d0:e9:29:de:
         97:42:c2:11:f2:67:bf:d7:c7:9f:21:44:24:4b:c0:ed:1f:38:
         57:7c:2a:bc:28:7e:b6:a7:0a:8c:cc:25:44:64:eb:21:ea:d0:
         20:9f:f3:63:8e:cc:e5:d7:3a:e0:86:74:53:ef:c4:c3:34:58:
         84:65:0c:b8:8b:55:28:77:e1:44:ea:30:89:97:f8:bb:f4:c1:
         19:af:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org