Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232382e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3232382e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          OWu0ZqApeJUJ6YGI/AJDwDWKcW0ePRzC6Xq7KuIcg+0=
Subject key identifier:   AE:4A:61:BE:4D:D8:6C:D2:E0:C3:46:83:44:23:A5:7F:60:B3:7C:15
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       42C48C2397B7F5047C3A9AF157FC9BD0E5CF5665
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232382e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:45 +0000
ROA not before:           Sat 06 Apr 2024 02:40:45 +0000
ROA not after:            Sat 05 Apr 2025 02:45:45 +0000
asID:                     28360
IP address blocks:        189.76.228.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c4:8c:23:97:b7:f5:04:7c:3a:9a:f1:57:fc:9b:d0:e5:cf:56:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:45 2024 GMT
            Not After : Apr  5 02:45:45 2025 GMT
        Subject: CN=AE4A61BE4DD86CD2E0C346834423A57F60B37C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:bd:e1:55:3b:6c:24:47:fa:dc:f3:03:ac:
                    c8:f8:05:75:78:fc:62:00:ff:1e:ad:20:ae:a7:f8:
                    bb:35:83:64:06:28:7f:20:c2:db:d3:46:d5:52:79:
                    9c:5c:8b:80:76:89:31:bb:b7:ab:f1:9d:e4:28:5d:
                    6e:1c:16:5b:61:df:e9:76:39:36:c3:62:23:9f:9f:
                    c3:86:d0:30:de:74:ec:27:fd:b3:52:55:0d:02:58:
                    26:04:d2:e0:e4:6d:61:be:44:33:06:90:37:cb:df:
                    42:db:4f:19:b5:85:a4:05:1a:3b:b4:c9:de:8f:5c:
                    43:b7:16:cd:d1:55:4e:0d:ba:a6:3d:e2:fe:de:a4:
                    62:f9:71:1e:1b:0a:56:b6:e6:2f:1d:97:fc:4e:f8:
                    8c:61:09:1d:e5:d8:3e:94:cd:3c:b6:4d:b4:c9:43:
                    40:52:76:33:ac:0f:f1:7c:c6:f5:44:83:b1:6e:1b:
                    67:a6:25:53:3e:45:dd:40:90:ba:63:d5:b9:e2:9f:
                    e2:46:5b:17:55:55:c6:90:22:f3:1e:f5:fa:5e:d5:
                    0b:8f:3a:54:6c:d3:06:42:d2:4b:38:43:04:f7:40:
                    5b:99:89:18:d3:7a:4b:d8:e2:c7:6f:d2:da:2a:ed:
                    ea:90:76:78:25:80:df:ad:bc:84:f7:a1:cd:2f:72:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:61:BE:4D:D8:6C:D2:E0:C3:46:83:44:23:A5:7F:60:B3:7C:15
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232382e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:56:c2:5b:7a:d5:d1:ee:c2:31:fe:ed:35:8b:fc:0b:50:
         e7:4f:2b:86:29:64:9e:84:cb:1e:c3:90:e5:f8:21:7d:de:b2:
         59:37:84:d0:16:72:79:fd:d2:11:1d:8e:cb:6c:2c:97:91:71:
         ed:74:ad:5b:44:a6:85:b5:40:0d:95:8f:55:ec:d3:80:c5:53:
         11:aa:74:05:f1:46:be:27:62:9e:9c:61:2c:a0:38:8d:8d:e7:
         1f:5b:46:8b:23:a1:6d:f8:94:07:65:eb:7b:b0:16:85:0f:b1:
         c8:f3:ab:a3:1b:3b:5c:74:65:5f:db:07:1a:0b:36:5e:07:bf:
         95:12:e7:d6:6d:69:bc:b0:25:ce:f8:7d:b7:96:ee:41:f0:1e:
         85:f2:ee:6c:9d:03:fc:fd:0f:53:c1:05:c1:83:a9:cd:90:c0:
         ca:32:8d:de:35:7e:55:d4:13:2c:6e:e5:66:3f:e4:73:92:00:
         47:1f:07:6e:a1:8a:20:80:11:44:8e:f1:12:a7:dd:6b:30:f7:
         33:36:36:eb:16:fd:27:95:d3:87:d6:1e:1a:c9:e1:c6:95:98:
         13:42:68:49:03:d7:aa:84:d3:b8:7c:12:a7:e9:c4:3d:cf:11:
         2b:fb:53:97:9c:a2:64:5e:8d:03:c1:6b:8e:09:47:f6:07:92:
         51:96:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org