Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233342e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3233342e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          R0WiIAkfIpdCZZavefegHIar/rNpyr3lGB7AbXoErb0=
Subject key identifier:   78:56:52:F2:96:22:5F:20:36:FB:2E:BE:F1:44:33:B6:45:B5:6E:79
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       54CDA647C2149FB7E66060CF49FC844D2594EC34
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233342e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:36 +0000
ROA not before:           Sat 06 Apr 2024 02:40:36 +0000
ROA not after:            Sat 05 Apr 2025 02:45:36 +0000
asID:                     28360
IP address blocks:        189.76.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cd:a6:47:c2:14:9f:b7:e6:60:60:cf:49:fc:84:4d:25:94:ec:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:36 2024 GMT
            Not After : Apr  5 02:45:36 2025 GMT
        Subject: CN=785652F296225F2036FB2EBEF14433B645B56E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:ec:a1:d9:d8:82:c0:29:be:70:1d:3c:0a:
                    42:fd:8a:04:1f:a5:68:68:97:1a:a4:b8:47:51:b0:
                    86:24:82:75:01:60:f1:f6:b0:e0:91:11:0d:6c:fc:
                    c0:4f:a0:f9:d7:b8:32:0c:71:a9:3b:c1:74:c3:85:
                    ae:c6:30:14:23:d1:21:1b:19:93:f5:99:5f:8d:c0:
                    eb:a9:f4:66:5f:ed:40:cf:b1:06:a1:ff:8f:96:b8:
                    74:3e:e7:d0:b3:68:d9:56:a2:b9:0f:99:2b:0d:8b:
                    01:d8:23:34:82:df:ff:6b:3b:7d:52:cd:b2:08:01:
                    07:ae:3e:d2:5a:11:1d:f5:23:80:c0:d6:02:8c:57:
                    1d:99:1f:32:6a:ec:e3:ce:9e:90:2e:96:e9:18:4f:
                    78:76:c8:e1:22:3e:10:1e:75:11:3b:dc:a5:0a:ce:
                    e9:69:5f:ed:4c:cb:98:d2:42:4e:bb:6e:d7:05:8d:
                    c9:7c:32:df:5b:34:da:47:78:dd:17:97:08:43:73:
                    a2:38:ea:23:72:96:3c:68:92:8b:09:5b:b3:f1:cb:
                    88:d3:cf:18:ec:b6:8b:c5:99:c6:eb:27:61:3f:f1:
                    72:e4:34:26:b8:4f:3d:5e:4d:82:3a:5a:e8:b4:3c:
                    28:c4:0d:ae:09:14:15:67:39:6f:e0:cf:ab:d5:a2:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:56:52:F2:96:22:5F:20:36:FB:2E:BE:F1:44:33:B6:45:B5:6E:79
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233342e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:23:43:91:76:f5:97:08:ad:13:92:a6:e7:d2:22:d9:2d:
         aa:83:0a:28:c5:bf:2a:f2:55:fa:9b:6f:ea:61:9e:4a:96:81:
         a5:3d:f2:d4:d3:95:93:c0:5b:32:4d:d9:ca:2c:3c:b9:e6:ea:
         3d:f9:47:e2:14:48:75:42:01:c9:f9:4a:fd:ea:73:49:f5:98:
         6c:69:2b:f1:cb:b0:43:a0:fe:11:dc:c2:35:26:d7:62:e4:a1:
         5f:b9:bc:c3:67:47:9e:f8:a5:e5:c4:bb:6b:f0:2f:58:95:14:
         4c:7b:61:d8:05:77:34:61:f7:25:3f:06:67:c9:79:1d:36:a9:
         5c:69:52:12:b5:f6:6f:ee:37:0a:0b:91:3c:ff:92:df:5d:25:
         d0:b0:7f:e6:9e:1c:fe:5e:14:dd:71:67:3b:3d:25:7b:83:57:
         32:8f:95:98:44:47:a0:fc:d2:0a:d3:1b:c2:af:48:38:ca:20:
         21:89:60:20:ce:d7:ad:f9:e4:e6:ce:c9:a5:a6:9e:da:5a:1e:
         ee:0d:5a:5b:e2:ae:21:68:63:40:c1:a9:39:e7:34:07:b9:85:
         1b:38:11:a1:76:8e:fa:29:00:b3:ed:dc:6c:1b:16:9d:8a:bb:
         a2:97:9e:9e:1c:cd:1f:2c:b4:fd:d3:55:4e:1a:e3:1a:16:5c:
         ae:9a:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org