Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133382e302f32342d3234203d3e20323632393839.roa
File:                     3138392e38342e3133382e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          xC0YmtjLCHNGlXymVuBkQv2Ey2ay92ssUw66sg680K0=
Subject key identifier:   0C:4F:E2:C7:4E:59:8A:A2:1D:7B:1C:A2:20:B0:D9:44:92:FC:F2:96
Certificate issuer:       /CN=207EB381959B83F7299D680B4544AE4668DCFE56
Certificate serial:       72C56AEA1AC636BFB487B7CA2E2631628D9BA9D0
Authority key identifier: 20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133382e302f32342d3234203d3e20323632393839.roa
Signing time:             Fri 25 Aug 2023 16:32:44 +0000
ROA not before:           Fri 25 Aug 2023 16:27:44 +0000
ROA not after:            Fri 23 Aug 2024 16:32:44 +0000
asID:                     262989
IP address blocks:        189.84.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c5:6a:ea:1a:c6:36:bf:b4:87:b7:ca:2e:26:31:62:8d:9b:a9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207EB381959B83F7299D680B4544AE4668DCFE56
        Validity
            Not Before: Aug 25 16:27:44 2023 GMT
            Not After : Aug 23 16:32:44 2024 GMT
        Subject: CN=0C4FE2C74E598AA21D7B1CA220B0D94492FCF296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7a:e2:2c:2c:1d:01:dc:a9:2a:9c:8a:5b:71:
                    7a:1c:f1:cb:d4:0b:15:45:8e:b0:08:4b:c1:19:0e:
                    ea:99:9e:04:75:0b:43:7c:bf:da:c1:92:54:3d:c6:
                    53:7e:88:30:ac:c2:9e:d9:0c:03:a1:38:53:c7:ce:
                    ac:6c:f4:a6:fc:10:7e:4d:c0:e9:34:f1:37:da:a9:
                    d1:05:0a:5d:1b:bc:5d:23:b3:bb:56:ef:21:03:b0:
                    16:9e:59:bc:b7:4e:2f:19:83:e6:f5:62:64:2c:9d:
                    50:aa:1a:5c:de:f0:6e:c6:56:21:ed:fb:17:3a:69:
                    21:8c:3d:d4:be:5a:e1:40:16:dd:0a:78:54:a1:39:
                    6c:a0:8d:8a:ed:fd:92:f2:a2:4f:17:af:42:de:cb:
                    4c:ca:bc:50:c7:74:2d:00:f7:04:4a:64:ca:02:bb:
                    c6:89:de:16:6b:3c:e4:b0:a7:b4:80:f2:30:ef:fd:
                    32:e5:af:f7:87:ad:9c:1a:ee:b7:d2:a2:d5:d4:c0:
                    ad:f0:b2:e1:25:75:63:2f:59:75:f6:62:95:bf:27:
                    dc:3a:31:ac:1e:d2:28:66:1e:2b:91:96:fa:16:9d:
                    9f:d6:ab:b4:82:a0:69:c5:c6:f5:0e:b5:ae:33:90:
                    62:f0:a0:14:f5:e7:f5:b7:8f:6e:d7:d3:90:34:d5:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:E2:C7:4E:59:8A:A2:1D:7B:1C:A2:20:B0:D9:44:92:FC:F2:96
            X509v3 Authority Key Identifier:
                keyid:20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/207EB381959B83F7299D680B4544AE4668DCFE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133382e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:52:15:79:71:e8:50:d6:a0:f2:7f:b6:93:3b:87:b1:3b:
         db:d4:c1:2f:f3:33:e6:ca:cd:6b:77:12:4d:45:4a:fe:b8:12:
         fd:10:13:db:4d:14:cb:4d:3f:31:bb:08:6d:26:33:21:d4:f8:
         26:1b:00:64:91:72:bd:ac:54:d2:03:5f:c8:93:fd:5f:2b:d7:
         ba:9d:98:34:5e:70:ef:3d:1d:74:ed:26:b9:45:b6:2b:0a:ec:
         14:6f:16:d4:4c:16:52:32:f6:41:ab:00:c7:57:86:fe:27:c4:
         24:f6:22:52:09:7c:80:ac:15:4a:40:8d:15:0f:6c:83:1d:a8:
         67:c2:64:50:e0:19:e9:87:6b:b4:7d:d5:fe:80:b8:ea:bc:18:
         fc:48:02:c1:4f:73:c5:ca:0c:7d:11:aa:e9:8b:82:be:17:cd:
         2c:2a:17:e6:d1:b7:80:77:d0:ba:42:b5:15:7a:91:8a:5f:63:
         cd:ac:bf:56:7c:d9:3d:ff:5f:13:81:a4:2e:5b:5e:f7:08:05:
         64:58:db:48:d0:92:6a:60:cb:73:76:d1:59:1e:66:c7:a3:48:
         cb:95:d5:35:65:fd:5e:2f:9e:04:18:07:c1:37:dd:b3:d6:a9:
         8f:f4:61:88:9f:d7:cf:6a:11:cf:31:06:bf:1a:8d:3c:72:b9:
         4a:9e:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org