Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232322e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3232322e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          DBeI5eNBFlMI4WfoqXW/OaaN4Ochc7rcpLJ58bXIaO8=
Subject key identifier:   69:43:03:B4:29:89:D5:53:89:A5:4D:D3:ED:78:4C:44:C5:B5:29:88
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       2EE456FF460031A7D246DC2341583DF91B7AC610
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232322e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:52 +0000
ROA not before:           Sat 06 Apr 2024 02:40:52 +0000
ROA not after:            Sat 05 Apr 2025 02:45:52 +0000
asID:                     28360
IP address blocks:        189.76.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e4:56:ff:46:00:31:a7:d2:46:dc:23:41:58:3d:f9:1b:7a:c6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:52 2024 GMT
            Not After : Apr  5 02:45:52 2025 GMT
        Subject: CN=694303B42989D55389A54DD3ED784C44C5B52988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:62:44:97:70:6d:c3:bd:ef:62:c9:83:40:00:
                    a7:98:b0:5d:ae:66:c4:40:b9:74:cb:9e:26:83:f5:
                    01:5a:25:29:8b:52:fb:88:f7:fd:e2:53:ed:ad:bb:
                    60:d8:42:b5:05:18:fc:cf:d3:71:02:14:af:5e:41:
                    b3:26:76:7c:8a:00:de:55:6d:fb:8c:e6:9a:99:08:
                    ac:1d:81:15:97:be:a1:5d:56:58:78:57:c7:9b:e2:
                    be:8b:d0:15:9c:35:04:2e:f2:9a:1e:4f:0c:ac:cb:
                    26:fa:9d:84:d8:fe:2a:1c:08:02:2d:ba:0a:4e:fe:
                    52:5a:df:92:54:8b:bc:e9:09:54:ad:65:a8:65:49:
                    cf:44:ce:0c:77:cb:d9:42:60:a4:c3:8a:13:62:9a:
                    00:b0:63:74:ec:c3:c6:1c:67:8f:e0:7e:62:53:3a:
                    00:59:0d:b2:10:9d:b8:18:69:02:6b:0c:23:82:ce:
                    57:d4:60:29:f5:08:19:34:8d:8e:ff:97:46:3b:88:
                    cd:0e:5d:fc:d2:65:b4:8a:a9:3f:9d:41:c4:a5:df:
                    3d:99:d4:6c:f6:8f:d0:ce:0d:93:8b:d5:0b:da:77:
                    a0:98:c5:c9:af:ef:5e:eb:a1:e8:7b:53:ce:0b:ce:
                    2e:09:0d:e1:aa:c4:f8:1d:dc:cb:cf:d5:f5:37:04:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:43:03:B4:29:89:D5:53:89:A5:4D:D3:ED:78:4C:44:C5:B5:29:88
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232322e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:78:63:98:58:f4:47:0f:01:4c:2f:a6:cc:7d:46:fe:99:8c:
         23:2e:ee:11:df:89:31:84:e9:a0:19:8d:9e:e7:cf:c7:bc:05:
         42:8c:55:ae:d6:51:84:42:76:e5:c4:57:2f:24:a3:47:87:83:
         e4:ce:38:e1:8e:e7:a4:d5:26:2f:78:d2:3e:14:93:d6:81:42:
         25:44:9e:db:3b:b8:69:01:d1:37:02:77:0f:cd:a8:c4:46:3a:
         dd:27:8a:3e:6f:86:87:f9:34:74:47:e4:05:62:af:f3:a4:05:
         7c:0b:54:20:19:42:17:41:8e:37:20:c9:3b:85:5a:b1:da:17:
         f9:a7:0a:e6:8c:3b:27:b2:b5:1b:f8:f1:84:cc:3a:69:a1:12:
         ce:b5:6e:b6:42:79:9a:61:a4:92:26:11:4d:87:f2:f1:25:49:
         00:e9:50:2a:94:fa:90:b3:71:77:60:c4:5f:b9:ad:c4:de:da:
         bf:97:46:f6:02:ec:ec:a9:06:e2:09:30:5b:91:fb:03:f6:cc:
         f9:0f:56:38:f7:02:69:d6:dd:71:9e:18:e3:18:b4:d7:97:7a:
         8d:e4:1c:67:eb:95:ba:0b:15:19:ab:2b:4e:82:71:6f:85:24:
         43:2c:7a:e0:73:79:ee:50:b6:81:01:b8:ee:3b:e7:1c:71:73:
         45:79:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org