Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3134312e302f32342d3234203d3e20323632393839.roa
File:                     3138392e38342e3134312e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          KJZqFsIAxKC4r2vRO3FRWxkRhnljQBnkndji1X1q8jU=
Subject key identifier:   11:E7:BB:04:37:5D:52:8F:10:84:74:B9:37:86:B4:2B:E3:DA:44:B9
Certificate issuer:       /CN=30EC14818870F287A0496328742C6ECE8AD0FA82
Certificate serial:       1EE4E69F02115DCF649D53325B2AAB1E706F67D8
Authority key identifier: 30:EC:14:81:88:70:F2:87:A0:49:63:28:74:2C:6E:CE:8A:D0:FA:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30EC14818870F287A0496328742C6ECE8AD0FA82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3134312e302f32342d3234203d3e20323632393839.roa
Signing time:             Thu 26 Oct 2023 20:34:20 +0000
ROA not before:           Thu 26 Oct 2023 20:29:20 +0000
ROA not after:            Thu 24 Oct 2024 20:34:20 +0000
asID:                     262989
IP address blocks:        189.84.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e4:e6:9f:02:11:5d:cf:64:9d:53:32:5b:2a:ab:1e:70:6f:67:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC14818870F287A0496328742C6ECE8AD0FA82
        Validity
            Not Before: Oct 26 20:29:20 2023 GMT
            Not After : Oct 24 20:34:20 2024 GMT
        Subject: CN=11E7BB04375D528F108474B93786B42BE3DA44B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:94:a9:87:4a:38:d8:52:de:a3:09:20:77:
                    9d:d9:bf:28:ae:47:1e:73:c1:97:01:19:ed:64:fe:
                    2c:ae:48:98:a7:0e:d4:dc:de:7e:55:0d:9b:7c:c6:
                    d0:0f:d8:cb:11:54:c4:e2:6c:88:03:31:43:24:3c:
                    cf:9c:c7:c9:c0:5c:33:79:85:6c:a8:f7:b0:e0:18:
                    a1:96:ea:7c:bd:4b:c8:8b:2f:a9:61:68:35:dd:fd:
                    dd:d2:ca:dd:53:3a:70:50:11:cb:18:d6:55:19:3e:
                    5f:2b:85:36:64:e0:4f:81:0e:f7:25:f4:3e:7a:44:
                    e5:4f:57:06:03:a7:91:b5:62:d7:ee:c5:f3:35:1a:
                    2c:2d:9f:b2:e2:f7:80:0d:13:54:6e:8e:32:7b:c1:
                    7e:3d:22:ae:d4:6b:66:88:bb:3b:ad:9f:66:e7:d2:
                    fc:db:16:67:6a:ca:17:80:e3:13:fb:cf:eb:90:d1:
                    00:ab:12:17:aa:16:3c:44:56:37:01:2b:fa:6b:b3:
                    3b:26:28:99:42:70:ed:5c:df:f9:2f:df:7c:4a:8f:
                    30:31:25:17:22:c0:14:2a:46:f4:a5:d4:ed:f5:62:
                    3b:ad:7e:fc:ee:c0:2e:31:31:fb:bb:1d:46:0a:dd:
                    75:d9:0b:01:6a:c4:65:f6:eb:c8:a7:02:c0:d1:25:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E7:BB:04:37:5D:52:8F:10:84:74:B9:37:86:B4:2B:E3:DA:44:B9
            X509v3 Authority Key Identifier:
                keyid:30:EC:14:81:88:70:F2:87:A0:49:63:28:74:2C:6E:CE:8A:D0:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/30EC14818870F287A0496328742C6ECE8AD0FA82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30EC14818870F287A0496328742C6ECE8AD0FA82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3134312e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:7a:a7:d8:e0:ff:3f:d8:d3:c9:c8:7e:44:50:02:1e:7f:
         cb:35:d2:83:2a:8a:f3:03:8a:b6:1b:23:0b:2a:33:c8:49:cf:
         cd:b5:46:5f:34:e6:7b:80:5a:dd:92:26:ef:ef:cc:a8:af:90:
         4e:40:38:55:78:ec:a3:2b:c0:43:65:e0:48:a2:eb:3c:46:52:
         7c:96:e6:c8:84:4b:7b:ee:77:35:1b:af:93:d2:90:9e:44:1d:
         dd:fe:43:05:1e:60:9d:b7:b8:6b:98:8b:f7:70:95:8b:7c:59:
         c9:b6:b7:03:df:08:7c:c3:10:02:ab:ff:53:c4:27:03:32:97:
         46:43:13:de:63:c2:44:4d:b0:87:5c:95:4c:47:26:fe:65:98:
         cc:b3:17:e0:5b:d9:ca:d1:03:66:2d:5e:c5:2f:b8:83:bb:fc:
         c1:3a:9d:96:5c:a6:75:82:4e:d2:01:5f:20:93:fe:d7:62:d7:
         1d:ba:6a:76:59:5f:bf:3d:15:93:e2:fa:58:84:60:6f:e6:b2:
         92:20:ba:38:fa:fa:63:b2:4b:31:3d:66:16:6c:44:1f:64:22:
         10:3e:e7:81:17:1c:f2:3b:80:e4:51:cd:06:c6:30:f0:47:3c:
         07:4c:23:57:7a:bb:d8:6d:2c:c1:44:b4:5e:8a:3f:59:6a:54:
         46:38:5d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org