Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231322e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3231322e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          N79rV2tqd4EhMIWbXNruxwLEX2sEhdE4wJvkuhqV4jk=
Subject key identifier:   9F:F2:F6:99:51:9B:16:50:0C:E8:32:A3:3C:AD:C5:C7:05:52:9E:72
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       7502E7C3D241FDD18A51CA08548B3D7463B47E58
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231322e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:11 +0000
ROA not before:           Sat 06 Apr 2024 02:41:11 +0000
ROA not after:            Sat 05 Apr 2025 02:46:11 +0000
asID:                     28360
IP address blocks:        189.76.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:02:e7:c3:d2:41:fd:d1:8a:51:ca:08:54:8b:3d:74:63:b4:7e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:41:11 2024 GMT
            Not After : Apr  5 02:46:11 2025 GMT
        Subject: CN=9FF2F699519B16500CE832A33CADC5C705529E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:37:26:72:75:a0:c1:7f:d4:a0:9d:d1:95:
                    24:4b:6b:52:de:3f:10:50:38:52:2d:9c:80:ec:56:
                    b4:74:d2:03:81:a3:09:d3:2a:1c:51:7f:57:fc:55:
                    23:16:e9:79:4d:12:6f:35:35:01:96:b0:3e:c5:92:
                    e4:99:05:75:a2:18:64:5d:3c:c0:74:6c:0a:14:94:
                    8e:91:6f:55:ee:e8:43:ee:43:25:f4:dd:cd:d7:bc:
                    f5:5c:a5:43:d7:76:20:f0:9f:9c:9b:f4:07:2e:d1:
                    ce:f6:ca:07:af:d6:70:db:57:40:c0:ee:7e:d4:71:
                    f5:b6:7f:4d:13:15:18:18:8c:c8:d4:b4:4e:57:45:
                    87:09:e8:f7:e6:a2:54:80:11:0d:d2:d5:22:e1:69:
                    d9:1f:02:55:81:f0:60:8e:30:02:50:aa:39:b8:16:
                    c8:d2:e8:d5:b3:58:1b:5b:a4:c9:5f:61:de:a6:4f:
                    0f:95:ca:02:f7:45:57:98:5e:6d:3d:09:b6:86:74:
                    64:e2:4d:d7:68:10:e5:7e:a4:c7:dd:3d:58:d3:a9:
                    77:6d:37:6c:bd:c9:6c:bf:93:ad:b1:d4:c5:6f:b4:
                    16:d1:4c:6d:3b:ce:ee:2c:86:92:e7:88:72:d9:f9:
                    6f:fb:45:47:aa:cf:07:e9:17:ef:1d:1d:37:36:dc:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:F6:99:51:9B:16:50:0C:E8:32:A3:3C:AD:C5:C7:05:52:9E:72
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231322e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:51:d6:50:a0:ee:cd:86:05:5c:8f:5a:46:6a:f6:f9:8f:33:
         cc:09:41:84:18:3f:03:71:06:82:de:73:ee:82:d2:6c:5a:41:
         80:c3:52:84:86:5b:58:af:17:3e:f7:92:5e:91:a0:58:a7:d8:
         fb:9d:12:ec:78:d4:6a:5e:3d:2f:f4:9d:38:41:b4:3b:b2:1d:
         32:cd:4d:2d:37:57:53:9f:b1:64:26:d3:db:86:88:ad:3e:72:
         e1:2e:5a:72:bc:0b:ba:55:12:d1:1f:76:0b:43:f0:69:8c:ca:
         d2:86:a2:f8:cc:e9:8b:86:a8:d2:6e:72:67:af:76:0c:ff:68:
         69:4f:ca:72:90:c7:c0:47:c7:c3:5a:41:15:2e:d7:c5:3b:9e:
         26:83:0a:1c:ea:89:87:33:5e:81:df:dc:80:eb:ed:6e:6c:8c:
         ae:8a:90:db:9d:90:53:29:68:b2:5d:01:2d:11:0f:32:9c:d0:
         f3:6b:02:83:9a:b1:6c:08:cb:c7:5d:2b:d4:31:84:22:28:df:
         52:16:d9:64:e4:1b:bb:c1:e6:17:fe:2e:e1:e6:a1:1c:22:ed:
         6d:4e:00:41:44:9b:b4:dc:86:2f:1e:c2:0b:01:78:4f:7c:e8:
         76:32:3a:a9:d0:6d:a5:2e:27:6a:28:fe:6e:16:71:43:d3:ec:
         a8:c2:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org