Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138392e37362e302e302f31382d3234203d3e203232363839.roa
File:                     3138392e37362e302e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          awR5aThhfZq2cfUxK34LcWuWdmOdzdXDxCyBW0DuQe0=
Subject key identifier:   2D:FC:0F:F4:B5:6D:C1:E0:4F:BB:E1:31:3D:75:91:E7:C5:D4:3D:9B
Certificate issuer:       /CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
Certificate serial:       7513E6207EBFBF5377ED24119B34DCDC08EF57E2
Authority key identifier: FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138392e37362e302e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 27 Aug 2021 14:18:01 +0000
ROA not before:           Fri 27 Aug 2021 14:13:01 +0000
ROA not after:            Fri 26 Aug 2022 14:18:01 +0000
asID:                     22689
IP address blocks:        189.76.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:13:e6:20:7e:bf:bf:53:77:ed:24:11:9b:34:dc:dc:08:ef:57:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
        Validity
            Not Before: Aug 27 14:13:01 2021 GMT
            Not After : Aug 26 14:18:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:38:e8:d4:f8:61:b6:43:d5:af:f4:b7:20:
                    9a:6f:2c:ac:31:69:da:32:71:ac:0c:a7:d6:70:6d:
                    c6:08:44:33:35:ac:56:c3:73:da:ff:85:9f:15:00:
                    e2:d8:35:cb:26:58:59:44:52:2f:eb:5b:7c:82:e1:
                    ad:41:35:f5:a2:6d:3d:db:7e:e2:82:57:bd:ad:2a:
                    89:dc:93:0a:6c:52:4a:0e:64:b4:58:6b:95:72:5c:
                    6d:0d:da:28:75:60:ac:b2:24:b3:af:e1:01:07:f1:
                    94:9b:7a:11:40:64:71:7c:06:6f:31:18:69:b1:0a:
                    ca:4a:5a:fa:8a:95:6c:3c:1e:48:8b:f5:ba:36:13:
                    21:28:9e:2c:c2:70:fa:e5:33:d6:44:a5:37:47:c7:
                    4d:06:08:25:b2:04:90:15:73:5a:6a:51:32:1a:38:
                    85:57:45:42:5a:36:98:0b:1a:8f:58:67:dd:22:9e:
                    09:da:3c:bb:0d:0f:29:5a:41:f6:96:96:57:81:5e:
                    cd:f4:26:9c:76:b6:11:1a:c0:3d:ac:0c:16:80:91:
                    51:66:e1:77:2c:8e:da:75:db:eb:4f:ca:0d:82:63:
                    00:af:78:b8:08:11:17:8b:b8:1d:80:05:25:84:da:
                    b9:e8:b3:31:59:a0:cf:cf:29:32:93:6f:9d:8c:c6:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FC:0F:F4:B5:6D:C1:E0:4F:BB:E1:31:3D:75:91:E7:C5:D4:3D:9B
            X509v3 Authority Key Identifier:
                keyid:FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138392e37362e302e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         62:62:9e:65:fe:f8:5a:4d:d6:c0:14:a4:44:cb:7c:51:b8:0c:
         34:77:d3:5a:24:71:cd:4a:af:65:d6:2c:03:3e:f4:f9:78:cf:
         68:d7:1d:af:ce:c1:7a:80:6b:c0:95:eb:9f:94:98:b0:d0:a0:
         e1:4f:e8:98:55:cb:f0:ab:cb:23:3d:34:e2:42:2a:28:75:23:
         c0:f3:0f:18:0c:f0:92:6d:30:86:b6:83:c6:94:dc:a6:82:fd:
         32:bd:b9:a5:ee:6b:83:77:55:07:3f:87:c3:b7:b8:c1:5b:97:
         66:d0:4b:24:7e:d7:f5:e1:77:3e:e3:4c:8e:58:1e:d5:67:84:
         f3:b7:a1:6d:85:48:a0:a9:45:22:cd:d3:39:96:b0:4e:38:5b:
         36:62:11:6b:f3:a0:aa:98:b5:39:64:63:01:c9:30:8b:5a:57:
         32:d1:0e:f4:4a:e5:f7:ee:63:fe:85:97:1c:4f:71:da:8a:9e:
         5b:f4:4d:d9:23:8b:52:4c:e9:26:18:32:e2:ac:90:c2:9e:58:
         37:2a:bf:ac:7d:1c:64:4e:f9:2f:74:b7:89:99:d8:e3:3a:31:
         a7:df:8b:f2:34:66:83:4d:88:ee:74:0c:7d:ac:07:9e:c2:a6:
         7d:48:08:c6:47:9c:2f:b6:a5:77:55:47:f6:ab:99:3e:0e:a0:
         2a:60:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org