Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232302e302f32322d3232203d3e203238333630.roa
File:                     3138392e37362e3232302e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier:          wkkyrYJgiRHp3huRzRUvTOG1i98a6E/tcnh5DDFxHwU=
Subject key identifier:   3B:85:58:00:D2:35:B0:94:96:90:81:32:55:B5:0F:33:FD:15:F7:12
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       3F556CA81E9F674CBD9F89E965DE7030DBDAE8B4
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232302e302f32322d3232203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:00 +0000
ROA not before:           Sat 06 Apr 2024 02:41:00 +0000
ROA not after:            Sat 05 Apr 2025 02:46:00 +0000
asID:                     28360
IP address blocks:        189.76.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:55:6c:a8:1e:9f:67:4c:bd:9f:89:e9:65:de:70:30:db:da:e8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:41:00 2024 GMT
            Not After : Apr  5 02:46:00 2025 GMT
        Subject: CN=3B855800D235B0949690813255B50F33FD15F712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:50:45:cd:2b:9a:a5:84:cc:cb:11:cf:ee:
                    28:2a:75:04:43:3d:90:7a:9e:1d:54:5e:de:d5:4e:
                    03:9b:5a:bb:08:e5:30:5a:fc:57:08:3a:78:32:ed:
                    2a:4a:67:88:f4:bb:04:31:a1:cc:79:10:5a:25:8c:
                    2a:7d:dc:c9:a1:31:af:9f:fd:c7:78:9d:6d:dc:15:
                    3b:8c:46:84:23:93:e1:f6:81:9a:fd:e2:7c:3f:95:
                    5d:87:bd:34:3b:1b:94:c3:7a:b5:4b:c3:8d:51:c6:
                    24:25:e4:60:7a:32:84:eb:63:d3:65:3d:bc:a2:3e:
                    f0:4c:2f:de:88:18:ed:1a:0f:41:7f:f5:fd:d4:aa:
                    3d:9b:50:30:84:f5:55:56:b4:2e:ed:f5:49:d0:6f:
                    03:d5:c4:e2:96:97:72:c0:38:82:4a:42:76:0a:8a:
                    4c:d4:c9:c2:ca:bd:70:ef:03:0d:5b:26:0a:e6:e7:
                    4d:d4:b0:ba:bf:92:e3:7f:98:f0:23:b6:d5:d7:6e:
                    76:a6:fa:15:4d:a8:2c:c9:c2:6a:48:ac:d4:8c:f2:
                    d4:dd:94:cb:45:20:fa:2c:d3:db:bf:2c:a0:9f:ff:
                    d7:72:2c:29:83:0c:43:e1:0d:71:59:4f:e4:67:14:
                    65:2c:d9:54:1d:15:f6:e1:81:c3:97:94:8b:5f:b8:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:85:58:00:D2:35:B0:94:96:90:81:32:55:B5:0F:33:FD:15:F7:12
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232302e302f32322d3232203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:30:35:e0:22:f6:dd:3f:40:db:47:83:cb:a3:44:84:c0:
         16:ee:98:6d:bb:c4:6f:89:a8:c6:b5:7d:e4:9e:00:c6:49:b0:
         e6:9d:c8:c9:e7:0c:9a:2b:f3:97:33:8d:26:c5:a6:6d:13:67:
         4c:cf:42:49:26:4f:a7:8b:b4:9d:e5:88:f1:e1:b1:70:c8:16:
         1e:97:fe:88:b5:f1:3b:47:41:37:7b:a8:f7:ea:d5:3a:e3:1d:
         11:46:d1:c9:45:cf:06:6c:b4:5f:8c:c1:27:7d:ec:f0:39:63:
         38:f4:3a:69:aa:a5:0b:86:4f:03:ba:60:13:ef:a3:5e:a8:3d:
         2c:70:ad:6d:9a:d8:57:ea:65:16:1b:a4:90:69:23:ba:93:8c:
         b5:c3:df:ce:4c:56:04:1d:ea:b1:86:43:17:18:03:7a:66:72:
         37:5b:34:60:5c:bc:74:ce:c9:d6:46:a8:5f:68:f8:b9:6a:86:
         fa:03:49:1b:25:78:68:89:a5:76:cd:f6:24:21:fd:c2:1b:be:
         22:7d:cb:82:ec:d7:e0:cc:b9:6e:08:b3:65:1e:88:49:c6:9c:
         21:44:a8:08:12:3c:e6:00:cb:c2:9c:7c:e1:3f:aa:62:86:1f:
         68:e9:f7:b1:9e:ed:2e:8c:65:c7:6b:4d:0a:96:3e:fa:5d:30:
         60:0d:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org