Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132342e302f32322d3232203d3e20323730373333.roa
File:                     3138392e382e3132342e302f32322d3232203d3e20323730373333.roa (raw, json)
Hash identifier:          Jb2osL9INHrZ6MMPD7taEpPwlTJ8Sp03493VCmt6p9I=
Subject key identifier:   B8:3F:C2:B0:21:33:3F:B0:61:54:90:4F:D0:A0:80:09:2A:94:23:B4
Certificate issuer:       /CN=ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813
Certificate serial:       64A741C4BB57969AD995B9D5A7EA9FB71BF761CA
Authority key identifier: AD:F5:53:E5:23:6A:9C:98:DF:FC:8F:1E:63:26:1D:8C:4E:DF:58:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132342e302f32322d3232203d3e20323730373333.roa
Signing time:             Mon 13 Jun 2022 14:00:00 +0000
ROA not before:           Mon 13 Jun 2022 13:55:00 +0000
ROA not after:            Mon 12 Jun 2023 14:00:00 +0000
asID:                     270733
IP address blocks:        189.8.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a7:41:c4:bb:57:96:9a:d9:95:b9:d5:a7:ea:9f:b7:1b:f7:61:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813
        Validity
            Not Before: Jun 13 13:55:00 2022 GMT
            Not After : Jun 12 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:19:8f:fd:b3:a2:73:2a:88:a1:9a:04:a2:
                    3d:8f:2d:1f:a5:2b:50:8c:62:78:c1:1d:2a:2c:75:
                    e1:89:2c:0d:41:51:d0:40:aa:e0:2c:9e:0b:fd:eb:
                    c7:b9:f9:4c:3b:15:47:2c:89:0f:d2:30:a3:21:d9:
                    e9:34:48:d5:09:fd:41:bf:32:8f:73:5a:7a:9e:a0:
                    2d:a1:54:76:15:80:25:2c:cd:2d:3d:3b:cb:7b:40:
                    f0:46:b2:28:06:70:e6:7c:4b:a8:0d:19:11:cf:d2:
                    7f:6e:93:5c:c8:b3:97:67:60:04:31:54:da:dd:03:
                    3a:72:60:f4:5a:d7:41:67:99:88:6d:b3:f5:8e:d1:
                    f3:27:04:1c:bb:95:9f:d7:95:71:95:42:03:19:1c:
                    5e:c2:ea:0c:4f:49:7d:eb:94:93:98:cb:67:c1:7c:
                    bf:3b:42:a7:16:63:31:96:66:c5:db:dd:85:88:26:
                    b1:53:bc:83:f6:43:3b:1e:e7:45:5a:7b:65:37:59:
                    fa:66:bb:18:07:3a:07:79:92:67:05:4a:00:79:9f:
                    5e:6d:08:9f:50:f1:ab:9e:d9:4e:6f:fc:91:4c:f7:
                    cf:69:ba:34:86:62:d3:4e:cd:e9:62:31:79:c4:b8:
                    d5:d1:3a:46:66:c6:cf:f6:18:7c:e5:4c:fd:c1:c1:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3F:C2:B0:21:33:3F:B0:61:54:90:4F:D0:A0:80:09:2A:94:23:B4
            X509v3 Authority Key Identifier:
                keyid:AD:F5:53:E5:23:6A:9C:98:DF:FC:8F:1E:63:26:1D:8C:4E:DF:58:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132342e302f32322d3232203d3e20323730373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:a9:00:ef:fd:8e:7a:d1:20:6b:e3:ef:ff:40:d9:a2:c6:
         61:cc:df:5b:ab:e9:da:5d:a2:c4:94:4d:48:85:ac:1c:0b:c2:
         21:32:27:2b:6f:fd:61:7a:72:9a:57:b9:d6:1d:ff:26:a8:c2:
         22:8e:52:1b:82:57:ae:cc:64:b8:79:c8:f8:74:9a:51:77:84:
         a6:d9:ac:67:b6:56:b0:82:05:c2:22:00:dd:68:44:c2:e1:53:
         c0:ad:c5:f9:de:ff:5b:27:46:2d:34:78:2c:1a:47:93:6a:36:
         9d:4a:01:cc:f3:b1:59:88:3a:f6:0e:a4:6b:47:c3:74:0c:10:
         36:31:9c:f5:75:2e:e2:6e:78:94:f7:d3:bf:b5:2f:8d:78:46:
         2a:5c:9e:be:cb:99:16:bf:d5:d5:e5:1f:a9:bc:18:5c:77:c8:
         d2:25:73:ce:28:77:3a:0d:5a:21:cd:ec:35:bc:35:01:80:5d:
         ab:ce:a6:85:62:f8:89:0a:c3:3a:80:b7:90:64:78:44:df:23:
         39:57:e8:6f:8b:3b:02:63:fb:51:b2:e5:7a:b7:ee:6b:69:c7:
         0c:b4:c9:69:bd:82:c4:06:d9:41:74:a5:c8:fd:21:6b:3c:3c:
         14:a6:73:a9:6d:6d:ec:e5:0c:7c:c8:55:bd:87:f5:7e:bf:92:
         4a:a9:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org