Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3232342e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          GDxqxq7YzU9KW2+/GH+XlBQrm6TlucNbT8VusdFdAEM=
Subject key identifier:   E4:B6:F6:B4:B3:2A:CC:DA:9D:28:FF:3B:46:F2:B6:5B:FB:85:98:4E
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       495276DF8B5A8F44FCECB22E48974D3924A48AA6
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:11 +0000
ROA not before:           Sat 06 Apr 2024 02:41:11 +0000
ROA not after:            Sat 05 Apr 2025 02:46:11 +0000
asID:                     28360
IP address blocks:        189.76.224.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:52:76:df:8b:5a:8f:44:fc:ec:b2:2e:48:97:4d:39:24:a4:8a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:41:11 2024 GMT
            Not After : Apr  5 02:46:11 2025 GMT
        Subject: CN=E4B6F6B4B32ACCDA9D28FF3B46F2B65BFB85984E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:79:3a:db:da:b2:4f:fc:6c:d2:29:3e:1b:
                    48:40:dc:c4:e4:c1:2f:9a:fe:98:10:82:74:0c:52:
                    6f:55:89:66:7b:16:fd:b8:85:d6:58:7b:f1:a5:2c:
                    02:41:7f:ac:0d:90:36:38:70:cc:12:54:bf:64:b7:
                    23:53:e6:d9:4a:16:e9:9e:ad:75:31:18:02:28:1f:
                    a7:69:8c:d0:d8:92:15:65:54:00:04:b9:fa:9a:d0:
                    0e:18:f1:df:8f:c2:2e:0a:35:e6:51:7a:3b:b1:73:
                    6a:4c:62:19:b1:b5:eb:33:46:30:55:20:5e:ad:21:
                    10:0c:e9:82:6a:8e:05:a9:df:a3:85:92:ef:dc:a1:
                    86:13:6e:a1:7b:c0:0e:25:b6:de:b3:ae:c6:ab:71:
                    0a:b4:fb:d9:0d:4c:b7:8a:c8:a9:1f:64:f9:28:1a:
                    2b:2a:cc:9a:90:4f:2b:c7:27:df:ba:49:5a:1f:73:
                    24:ff:3e:6b:57:d5:1c:47:7e:e5:89:2f:16:9a:94:
                    36:d8:ba:e7:01:89:74:85:a0:0c:eb:b6:ff:1a:a3:
                    81:e0:0e:fd:d4:79:28:27:15:ed:0e:2c:e3:b2:c1:
                    4e:51:15:45:c2:ec:31:b2:69:a7:44:05:b4:91:25:
                    4c:ac:19:ff:e7:84:b6:d7:42:4c:34:e6:3c:bd:f1:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:F6:B4:B3:2A:CC:DA:9D:28:FF:3B:46:F2:B6:5B:FB:85:98:4E
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:70:84:40:6a:d8:b5:31:f4:58:b5:bb:eb:48:e5:48:3e:ce:
         30:80:c9:6d:a0:6e:3b:e5:a9:cb:ae:f0:64:f3:22:16:e5:ca:
         bb:6f:da:51:94:10:9e:78:6c:48:f4:f0:57:d2:77:8d:08:d2:
         7f:35:fa:d1:f6:8c:8a:a5:27:91:ce:62:0b:47:2a:69:46:61:
         aa:e9:9b:b8:14:a1:83:8d:13:d9:65:e4:81:14:ec:8f:7e:01:
         f6:fc:59:fd:5c:14:b1:97:bd:6d:27:9b:34:08:62:7a:9b:87:
         ad:16:d3:f4:11:1a:41:db:84:8e:a0:c3:87:2d:95:62:e9:c7:
         cf:99:e5:7c:47:87:6d:f1:f8:34:f1:e4:45:9f:d7:a5:9c:3f:
         bf:01:bd:9b:35:d1:e8:d3:da:c1:63:5d:9a:f9:ff:99:58:8c:
         72:09:70:b6:51:d2:ef:c6:09:a6:de:f6:2a:80:a9:6b:18:ec:
         4b:21:39:55:7a:99:0a:20:dc:e7:e7:95:9c:69:48:84:59:5b:
         d8:98:ea:dd:d0:bd:fc:86:62:35:4e:66:30:9f:b5:3c:0b:82:
         70:34:19:3d:e6:a3:95:48:b6:84:ca:c5:ac:55:c1:ea:78:e6:
         51:01:d5:56:18:6b:03:11:0d:2e:c1:ca:f5:c6:a0:f2:b9:0a:
         03:f8:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org