Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3231362e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          KE0nGmoEcRc1TWodEKSi4et8SPZqHb5WAktun2sz5qY=
Subject key identifier:   53:B3:7E:F8:3E:28:97:4D:B7:34:75:35:C3:44:34:85:D2:45:2B:27
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       08C807880FCF137E970162F440AAB76D706B497B
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:53 +0000
ROA not before:           Sat 06 Apr 2024 02:40:53 +0000
ROA not after:            Sat 05 Apr 2025 02:45:53 +0000
asID:                     28360
IP address blocks:        189.76.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c8:07:88:0f:cf:13:7e:97:01:62:f4:40:aa:b7:6d:70:6b:49:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:53 2024 GMT
            Not After : Apr  5 02:45:53 2025 GMT
        Subject: CN=53B37EF83E28974DB7347535C3443485D2452B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:c1:ee:74:49:38:92:25:47:ea:1d:67:db:
                    76:15:0d:81:f1:4e:5f:bf:0e:fe:bf:49:ff:46:7f:
                    bf:eb:6b:a8:e3:08:4f:f4:81:1c:44:0b:5d:87:f1:
                    36:2d:1b:82:83:49:62:3b:be:94:93:9f:b0:eb:d9:
                    43:1d:3c:e9:04:2e:33:f7:e1:fe:1b:4c:d5:89:9d:
                    8e:34:7a:92:29:1c:fe:db:01:21:56:bd:07:14:bb:
                    3d:e9:37:45:ba:08:4e:a3:43:c4:f7:03:9c:12:64:
                    5c:98:71:4b:5c:18:15:3b:30:b7:8c:73:d8:2d:42:
                    c0:b4:f1:e7:0e:92:c1:9a:c3:6d:3c:9f:e3:ae:19:
                    03:1d:c8:3f:ba:e9:fe:1b:bc:7b:db:a7:08:56:fd:
                    e9:57:df:e0:cf:60:ff:e4:b7:37:98:44:be:34:47:
                    4f:90:fe:46:ae:6a:fd:f4:f6:87:fb:23:2d:7f:11:
                    8c:3f:1a:16:da:d5:ac:b6:c9:dd:55:ac:51:b8:4b:
                    a2:fc:75:33:fe:fe:19:df:ec:11:d1:4e:17:92:46:
                    e2:e8:93:45:cf:ca:66:c0:89:d4:64:2d:b4:50:f7:
                    4a:8a:65:81:9c:5d:2d:02:8b:c5:42:86:db:fe:47:
                    53:7d:d2:34:98:57:32:7c:5c:44:5f:5e:17:d4:f8:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B3:7E:F8:3E:28:97:4D:B7:34:75:35:C3:44:34:85:D2:45:2B:27
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:24:8e:78:28:31:c1:2b:97:a6:30:82:ab:66:f2:d9:28:aa:
         8f:4a:77:f8:68:76:19:68:b3:87:e5:e8:d6:c6:de:f7:04:96:
         28:1e:78:22:f1:c4:57:e4:df:47:62:c5:a5:16:63:5f:6d:0c:
         ce:30:84:b3:38:a2:1b:58:03:1f:1e:49:13:1f:51:55:e4:cf:
         f5:98:14:e7:42:47:5a:fc:a4:ad:ba:08:88:ab:a5:1c:4f:47:
         30:90:0f:34:a2:06:8c:ff:76:c6:51:b9:ba:70:17:37:06:9b:
         28:36:2e:21:46:63:f0:d0:df:f8:40:b4:86:74:42:db:d5:8a:
         a4:44:9c:55:f7:a5:66:42:47:fc:2d:ad:80:90:df:d6:08:04:
         9a:b4:38:46:e9:dd:8d:eb:83:5b:83:69:33:be:2a:44:42:8e:
         58:8b:3c:18:c6:74:44:e3:f3:34:2a:f1:6b:19:dc:ba:ca:f7:
         22:dd:08:a8:4b:e8:fe:19:97:78:3a:17:d4:8d:b7:7f:53:0c:
         c0:df:56:07:2c:61:a3:59:e7:8a:0d:33:eb:19:8d:3e:21:0a:
         ca:40:84:5b:59:a2:f1:d3:06:16:9a:d3:3c:e7:ac:f9:1b:8c:
         3b:a4:c6:00:ea:e0:48:5e:0d:b4:89:04:b0:a7:10:bc:e5:e4:
         59:ec:0e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org