Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3332203d3e20323632393839.roa
File:                     3138392e38342e3133362e302f32312d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          bGZp7AnrV5SpsOu0NUvjhDNcdUViZ/QO7+h4Aui3l84=
Subject key identifier:   B5:C1:48:E2:C6:EB:B8:95:E0:40:44:4A:E2:7E:34:12:71:52:BE:93
Certificate issuer:       /CN=4605BCA6369CE100A4E6D0DFF8D0BF8C97550389
Certificate serial:       6A779301A482E6F5C656625483210AA60F2E3249
Authority key identifier: 46:05:BC:A6:36:9C:E1:00:A4:E6:D0:DF:F8:D0:BF:8C:97:55:03:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4605BCA6369CE100A4E6D0DFF8D0BF8C97550389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3332203d3e20323632393839.roa
Signing time:             Mon 26 Feb 2024 14:30:28 +0000
ROA not before:           Mon 26 Feb 2024 14:25:28 +0000
ROA not after:            Mon 24 Feb 2025 14:30:28 +0000
asID:                     262989
IP address blocks:        189.84.136.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:77:93:01:a4:82:e6:f5:c6:56:62:54:83:21:0a:a6:0f:2e:32:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4605BCA6369CE100A4E6D0DFF8D0BF8C97550389
        Validity
            Not Before: Feb 26 14:25:28 2024 GMT
            Not After : Feb 24 14:30:28 2025 GMT
        Subject: CN=B5C148E2C6EBB895E040444AE27E34127152BE93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:ad:b7:2c:98:84:0c:bf:bd:49:10:ce:72:
                    67:35:ed:58:e6:4d:7c:ae:80:e4:e6:42:a0:c3:4b:
                    1b:8e:44:fa:14:77:69:5f:52:a3:18:fb:90:62:8c:
                    b3:9c:bd:52:d9:e0:95:1d:e7:ef:b2:17:11:2d:f2:
                    19:65:77:06:ab:d3:0d:16:af:b9:60:ac:8c:98:41:
                    ea:f9:f7:41:22:3a:ac:e6:f9:46:0e:31:06:32:dc:
                    8e:b0:72:df:a0:ec:16:61:ca:5c:73:d0:33:35:75:
                    5c:56:5c:e5:5a:fa:67:01:b0:3a:0a:da:9b:78:8a:
                    4c:13:d3:7c:08:3b:cc:60:85:07:75:c0:02:49:12:
                    00:d5:04:81:de:c9:e0:79:0e:13:1c:22:dd:3d:91:
                    78:40:2a:86:65:04:e7:9c:3b:82:02:29:fa:9b:b8:
                    c1:a7:ff:0f:05:a5:e7:f3:0a:2d:b7:f1:47:c6:81:
                    8f:70:9d:ec:4b:42:a9:0d:31:33:1c:f9:d1:ce:6d:
                    60:19:c5:26:32:4c:51:1c:8f:77:36:d5:30:50:29:
                    e9:23:b2:ca:23:d9:8e:0b:44:3c:c1:fa:8b:d1:d7:
                    24:3a:25:f4:5b:28:29:5b:50:6e:2a:43:9a:95:47:
                    e6:80:03:b0:53:36:f1:9d:b1:62:ba:22:26:66:88:
                    c1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C1:48:E2:C6:EB:B8:95:E0:40:44:4A:E2:7E:34:12:71:52:BE:93
            X509v3 Authority Key Identifier:
                keyid:46:05:BC:A6:36:9C:E1:00:A4:E6:D0:DF:F8:D0:BF:8C:97:55:03:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/4605BCA6369CE100A4E6D0DFF8D0BF8C97550389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4605BCA6369CE100A4E6D0DFF8D0BF8C97550389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:31:88:a1:50:a7:1f:a7:54:61:04:21:72:f5:f8:b1:99:30:
         d9:59:ca:47:71:17:cb:1c:79:72:de:b9:64:bd:8e:42:af:3d:
         c4:4e:dd:49:c1:33:8a:ee:89:d4:90:79:d5:19:97:3a:db:8d:
         19:c6:ed:2e:33:f3:21:e9:41:a3:69:8a:30:55:f1:51:0e:e2:
         79:71:60:6c:e4:75:41:93:41:d3:fb:11:be:5c:e3:bc:87:28:
         d4:5f:44:ce:90:a9:ec:48:1c:dd:93:f4:5b:53:7f:3f:47:41:
         03:2b:a5:7e:48:9b:46:dd:bc:f0:29:7a:e8:ee:58:4a:74:4b:
         bc:9b:5d:f1:d1:00:df:d5:54:5c:cc:37:07:aa:bf:d2:4b:4f:
         6e:3a:40:04:ca:29:c2:73:cd:80:de:db:a3:e6:18:8d:26:1a:
         47:19:c9:e1:4a:17:fd:d4:9a:02:f5:26:1d:0b:23:e3:7e:b8:
         83:5e:77:62:3d:6a:b6:66:62:4f:1a:d8:90:d3:3d:72:53:33:
         2d:08:c5:5a:26:80:58:32:ac:e2:f1:c9:63:38:f2:32:a3:7c:
         09:73:eb:f0:72:c7:c5:ca:6c:7b:13:1a:f8:a1:4a:85:9e:ea:
         c6:01:dc:4b:da:5d:2d:f3:ac:6d:0d:f0:11:d6:6b:e0:05:84:
         7a:c3:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org