Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232302e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3232302e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          ruk+X2S2A9WQ8h2NZQo97p9hlSX0mxpB93sCHNRt/wQ=
Subject key identifier:   A1:E6:6C:96:D4:2C:74:E3:AF:41:BA:0A:F7:62:E8:FD:88:AF:DD:3B
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       6CEFC36DA3E8EF69FE10DF161E17E72395C274C7
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232302e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:53 +0000
ROA not before:           Sat 06 Apr 2024 02:40:53 +0000
ROA not after:            Sat 05 Apr 2025 02:45:53 +0000
asID:                     28360
IP address blocks:        189.76.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ef:c3:6d:a3:e8:ef:69:fe:10:df:16:1e:17:e7:23:95:c2:74:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:53 2024 GMT
            Not After : Apr  5 02:45:53 2025 GMT
        Subject: CN=A1E66C96D42C74E3AF41BA0AF762E8FD88AFDD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:10:44:2b:28:01:6b:c3:b7:17:6e:11:fb:
                    3c:2f:fb:7b:cc:eb:54:b4:dc:86:91:c8:17:a4:2c:
                    c2:0e:61:2b:a0:0c:36:55:d2:cd:c6:91:eb:e3:f1:
                    c8:dc:88:05:27:f6:df:9a:22:a6:b2:ce:5d:c4:e0:
                    9a:a4:43:df:a0:fd:3c:49:e9:7c:6c:91:0a:9a:ba:
                    85:fa:a2:d8:2e:99:5c:9c:1b:1f:1a:6d:ed:60:a2:
                    b0:c9:da:6a:79:27:90:7a:21:db:5d:ad:29:c7:b1:
                    a1:9c:22:05:60:3d:a7:1f:0d:c1:1f:e3:d2:4f:01:
                    78:cb:15:36:3f:24:a3:4b:fb:47:20:16:70:78:22:
                    31:ad:db:95:b6:6c:d4:56:0e:9e:aa:00:16:39:df:
                    f7:15:bd:5e:91:65:35:b0:46:80:d0:a6:48:a9:6c:
                    0d:52:26:84:df:a3:dd:21:ee:cf:47:7a:6a:6c:9d:
                    8a:a3:a3:7a:00:a7:03:3c:ad:f8:59:54:0d:b4:77:
                    08:29:6d:bb:0e:b8:9a:70:05:af:3c:85:e7:e7:15:
                    03:f1:a3:99:46:24:de:e1:2e:2a:67:db:54:03:a4:
                    0b:1e:fe:67:b2:f2:ec:25:5b:b9:e7:9a:97:00:c7:
                    41:8e:43:2c:5c:d0:14:88:80:eb:27:b0:55:f6:e9:
                    ec:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:6C:96:D4:2C:74:E3:AF:41:BA:0A:F7:62:E8:FD:88:AF:DD:3B
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232302e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:cb:98:18:41:6f:e6:19:99:34:13:1f:6f:b5:3f:e5:f3:ec:
         6f:54:2f:c9:32:f3:48:80:8f:a1:e0:18:20:b7:1b:46:c4:4d:
         d7:ba:33:57:6d:ba:9e:08:6f:b7:d4:09:93:25:5b:12:74:ea:
         33:12:8b:c3:e4:a6:31:e4:6c:36:b2:f1:8f:72:9e:a9:a4:77:
         d4:51:3d:c8:7e:fc:b2:ba:07:4b:2c:3f:e9:79:68:be:f9:39:
         5a:41:cc:5f:53:4c:5e:1f:af:d6:be:dc:76:2b:43:ae:fc:ad:
         11:c9:a0:20:bc:75:84:87:86:cd:41:2a:28:75:b3:45:ef:d8:
         53:38:d3:11:07:4e:5a:91:75:f9:5c:25:d4:02:2a:ed:e3:0e:
         7e:0f:ad:00:86:e2:59:97:6f:27:a9:33:b1:9a:2f:0f:40:d4:
         8f:42:80:20:c1:2c:7f:7d:b4:86:6d:2b:54:c5:e7:6c:b9:a4:
         b0:1f:53:99:cd:28:e5:45:99:d7:45:43:b8:22:5c:77:b2:57:
         72:4a:f7:3d:4e:56:30:52:92:fb:9e:c6:6a:cd:69:df:17:16:
         00:b5:3b:6e:98:84:47:9f:8b:5f:ae:34:c8:7d:72:c2:f5:ca:
         03:28:7a:e1:36:c1:11:59:e0:8f:77:68:14:23:60:5d:55:f7:
         a9:99:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org