Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233302e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3233302e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          dV1ObhS7BssiCbqc82ZOjsr0POMwzeJgwi2/Eq1degI=
Subject key identifier:   F5:1D:A5:C8:64:E6:2C:25:20:58:2D:09:2A:13:15:A5:85:1C:60:BE
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       6D2661C2A787E9632C1DA81D67133CB4C7F037FA
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233302e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:28 +0000
ROA not before:           Sat 06 Apr 2024 02:40:28 +0000
ROA not after:            Sat 05 Apr 2025 02:45:28 +0000
asID:                     28360
IP address blocks:        189.76.230.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:26:61:c2:a7:87:e9:63:2c:1d:a8:1d:67:13:3c:b4:c7:f0:37:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:28 2024 GMT
            Not After : Apr  5 02:45:28 2025 GMT
        Subject: CN=F51DA5C864E62C2520582D092A1315A5851C60BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:3b:a1:e4:c8:d0:cc:b5:e3:be:11:41:02:
                    c3:4d:b9:bc:ae:f6:1f:8a:ef:13:b0:70:59:35:f6:
                    ed:c0:7d:36:92:11:ed:31:b8:25:46:63:f7:93:24:
                    51:b8:76:ea:d7:9c:86:eb:da:85:2f:f9:81:f3:dc:
                    aa:7d:77:5a:74:b4:ac:8f:c2:39:ce:28:bb:72:1c:
                    39:b3:b8:f0:29:f9:9b:4f:ff:3f:08:0b:85:9b:3b:
                    c1:f5:be:b0:c7:ec:a7:72:50:5d:32:7c:a3:b1:9c:
                    a6:c7:22:f0:6e:fe:a8:0f:76:c5:fa:06:69:78:ec:
                    9a:c4:58:8b:e7:9a:53:4b:87:48:c6:1b:84:39:74:
                    41:5a:3c:07:97:2e:9c:fb:57:e0:ce:d0:80:af:53:
                    92:a7:cf:49:89:87:1d:3b:66:a0:23:80:8c:e3:52:
                    2b:a4:ee:1e:33:f3:10:ba:08:5d:b7:08:dc:e8:5e:
                    af:37:fd:d4:7e:1d:99:f0:5e:8a:7b:e2:9f:b4:4a:
                    fd:8f:e3:70:24:3d:48:29:f2:73:84:31:fb:91:e1:
                    9e:3d:21:67:35:ef:ac:e3:22:a3:dc:88:6d:ac:20:
                    e5:99:9b:ff:91:88:28:0f:03:17:a6:cf:00:59:46:
                    91:d0:9a:c3:20:3e:52:a7:d1:b1:88:26:1f:7b:e7:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1D:A5:C8:64:E6:2C:25:20:58:2D:09:2A:13:15:A5:85:1C:60:BE
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233302e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:91:87:4d:f7:3a:5a:23:95:04:8e:22:7c:9b:b9:c1:2e:e7:
         69:a4:3b:2a:5b:fb:20:53:a8:af:b5:e9:76:be:86:59:81:b4:
         36:33:52:3f:9d:d5:a3:e4:6f:fa:f5:2b:3f:5c:d6:0e:bc:cb:
         91:1b:bd:e6:fd:de:01:b9:0b:bb:51:dc:75:d0:4d:11:c5:58:
         2f:ac:39:03:81:a2:8c:0a:ef:81:0e:d9:5c:be:6a:0e:8b:f9:
         0a:e0:0e:3a:c5:a7:b1:c1:1b:19:f9:c1:9b:76:93:9b:87:1d:
         82:3a:80:f4:81:11:3b:98:93:8f:c0:a4:41:d6:e9:6e:a4:a2:
         a7:79:77:c9:03:4e:f2:95:76:b8:cc:21:37:83:bf:c2:48:2d:
         02:c9:8c:f5:12:67:0a:63:6a:9f:ae:fa:80:55:a3:8f:7c:3c:
         e6:31:20:42:83:a7:6e:53:d9:b1:0a:c2:c3:b4:3a:1f:ec:c1:
         40:be:26:0a:c9:9a:59:8f:56:ee:67:d8:bc:17:e3:4f:dc:88:
         b9:66:2d:4b:5a:ef:67:7a:46:1e:4c:6f:25:d1:54:1f:81:7c:
         04:d8:15:23:90:b5:34:b1:52:51:84:b8:65:45:b3:08:f4:61:
         f8:28:66:58:26:29:43:86:f7:89:e1:b6:c8:37:70:df:4f:f7:
         bc:02:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org