Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/1/3138392e38342e3230382e302f32302d3234203d3e203238313733.roa
File:                     3138392e38342e3230382e302f32302d3234203d3e203238313733.roa (raw, json)
Hash identifier:          m+AJ7gajSaXC5rwmAbSgBM5OiGraAcwTK4qacxfPYL0=
Subject key identifier:   9F:0F:EC:04:8D:3B:58:95:48:54:18:5E:C1:2E:2D:CF:CD:9F:19:70
Certificate issuer:       /CN=690ADC07A3E6DC5671C268C02A122B3164FEB382
Certificate serial:       6E50B339C95D208E280E92FF29EF28988D358381
Authority key identifier: 69:0A:DC:07:A3:E6:DC:56:71:C2:68:C0:2A:12:2B:31:64:FE:B3:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690ADC07A3E6DC5671C268C02A122B3164FEB382.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/1/3138392e38342e3230382e302f32302d3234203d3e203238313733.roa
Signing time:             Thu 04 Apr 2024 20:43:31 +0000
ROA not before:           Thu 04 Apr 2024 20:38:31 +0000
ROA not after:            Thu 03 Apr 2025 20:43:31 +0000
asID:                     28173
IP address blocks:        189.84.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:50:b3:39:c9:5d:20:8e:28:0e:92:ff:29:ef:28:98:8d:35:83:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690ADC07A3E6DC5671C268C02A122B3164FEB382
        Validity
            Not Before: Apr  4 20:38:31 2024 GMT
            Not After : Apr  3 20:43:31 2025 GMT
        Subject: CN=9F0FEC048D3B58954854185EC12E2DCFCD9F1970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:28:6d:42:69:e2:b5:34:da:c5:1e:e0:0c:
                    1d:25:d1:71:c6:a7:19:35:34:47:fe:27:1c:16:fd:
                    75:e1:62:a1:07:43:3a:cd:df:b1:fb:85:9a:e3:09:
                    ee:d0:96:6a:96:e5:6e:de:81:34:51:b2:fc:61:d9:
                    40:a3:78:c1:ab:fb:bb:43:8c:93:5f:a3:98:f1:a7:
                    4f:05:93:e6:78:c5:2f:77:d3:d1:df:cf:63:10:eb:
                    de:1c:30:9c:de:34:33:6e:8d:08:03:5a:57:a6:6d:
                    41:62:c6:ee:84:a4:98:bb:55:8b:22:bc:8a:76:3e:
                    4e:42:6d:66:dd:b0:5d:25:1b:23:6e:b2:ba:08:38:
                    37:3f:7b:96:aa:55:6e:0a:ce:06:85:ad:62:02:77:
                    ed:a3:24:74:fb:91:e7:59:b5:b2:b7:28:31:9f:b4:
                    18:b6:68:62:96:c9:53:23:41:16:dd:aa:7c:54:28:
                    94:e4:17:5c:5f:57:71:78:89:b3:ba:3c:4c:a1:41:
                    06:71:36:c3:cc:24:83:68:2a:9e:22:2e:8d:83:64:
                    6a:04:a0:94:91:54:97:38:cd:90:b8:74:8f:f0:17:
                    9a:0f:ab:c8:8d:ff:19:65:4f:35:45:c2:37:94:99:
                    34:b3:4c:21:c6:15:fe:1d:68:66:f9:a5:79:06:26:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0F:EC:04:8D:3B:58:95:48:54:18:5E:C1:2E:2D:CF:CD:9F:19:70
            X509v3 Authority Key Identifier:
                keyid:69:0A:DC:07:A3:E6:DC:56:71:C2:68:C0:2A:12:2B:31:64:FE:B3:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/1/690ADC07A3E6DC5671C268C02A122B3164FEB382.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690ADC07A3E6DC5671C268C02A122B3164FEB382.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/1/3138392e38342e3230382e302f32302d3234203d3e203238313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:15:66:6b:0b:8c:c2:1c:d1:6c:03:37:2b:f3:67:da:31:
         d6:4c:50:4f:bc:8f:34:57:6f:db:39:6f:52:9c:8d:46:0d:dc:
         ee:c7:3f:1e:ff:86:b9:54:12:f6:b2:64:53:6b:2e:3b:4c:da:
         13:e0:6d:97:1b:20:1c:f9:63:bf:48:c7:e4:90:70:97:22:57:
         28:31:77:42:e5:fc:86:ab:1c:55:09:a7:8b:fc:02:9a:b6:da:
         a6:cd:d4:3a:ba:da:f8:bd:1c:23:b3:32:e6:bd:77:66:d7:36:
         a7:ab:59:8c:84:46:14:18:2e:77:86:32:25:c7:ca:f5:47:7e:
         f8:76:a2:7d:0f:bf:cc:da:fe:28:69:3a:05:f2:5a:ec:a8:1a:
         14:bf:c0:b1:16:6d:ed:0a:21:9a:1f:2b:d2:be:a8:fd:ce:58:
         ac:99:f1:c6:a9:53:f9:83:9a:4a:36:8d:8d:ae:f2:36:fa:3e:
         3e:d9:1a:81:52:9d:22:37:c0:b0:7f:be:d7:7d:36:1a:04:63:
         83:d0:00:b8:1b:fa:90:c6:aa:1d:e2:77:75:51:46:60:54:58:
         24:45:88:d3:0f:bc:3b:ef:5a:cb:d5:f3:81:b8:e7:9b:63:66:
         77:35:d3:64:00:50:90:46:75:e0:15:24:1e:85:04:13:42:49:
         fb:78:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org