Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS28664.roa
File:                     AS28664.roa (raw, json)
Hash identifier:          xQvsAxm3E6gNhvhGqxnqOMg1cQdH4uJ/eOFB3DeZwHQ=
Subject key identifier:   BB:36:95:82:0C:CA:C2:6F:5E:D0:F8:EF:1D:95:B1:1B:66:31:34:8E
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       4AF814B8FBDB5E3ABE13483C7FBB3B554F1D2D73
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS28664.roa
Signing time:             Wed 10 Apr 2024 22:01:14 +0000
ROA not before:           Wed 10 Apr 2024 21:56:14 +0000
ROA not after:            Wed 09 Apr 2025 22:01:14 +0000
asID:                     28664
IP address blocks:        189.1.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f8:14:b8:fb:db:5e:3a:be:13:48:3c:7f:bb:3b:55:4f:1d:2d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr 10 21:56:14 2024 GMT
            Not After : Apr  9 22:01:14 2025 GMT
        Subject: CN=BB3695820CCAC26F5ED0F8EF1D95B11B6631348E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:28:c7:c3:4d:eb:6a:7b:b0:9b:ef:ad:68:
                    c8:f8:ab:20:2a:34:84:69:7d:59:0b:9b:9d:54:9b:
                    bd:7d:21:b8:3a:05:a2:cc:c3:b0:a5:a0:8c:33:09:
                    4d:9b:dd:f9:41:b8:ef:7b:3c:b6:81:18:82:b7:6e:
                    eb:12:70:bb:11:25:44:96:df:b7:ff:d7:fc:98:0e:
                    19:cc:d3:64:e9:d6:e5:48:86:a9:99:94:8f:f3:5a:
                    50:12:10:25:ce:b1:88:87:81:8f:1e:5e:e1:e7:3a:
                    2e:0e:b1:e4:8e:9a:b4:13:55:22:55:16:6f:15:b0:
                    ef:d5:6f:a0:3b:dc:00:f3:83:b0:c2:86:41:b8:38:
                    7e:09:32:57:a1:0a:cc:ea:c5:1a:31:47:1c:f2:26:
                    ec:45:fe:d1:82:b2:9d:88:6b:2e:3c:8e:2e:5b:74:
                    48:b7:d1:37:34:e2:0e:f9:41:0a:4f:b5:02:1a:74:
                    fd:b0:95:af:40:65:b6:0d:25:ad:8e:3e:76:8c:81:
                    4a:1f:f1:4d:22:d6:6c:a0:87:7b:47:61:0c:c7:a3:
                    7a:54:ea:3a:e8:79:79:e4:a5:17:84:ff:a4:9a:08:
                    06:6e:fd:88:a1:2d:ff:a6:76:ed:1b:5d:07:ba:84:
                    35:94:38:3f:ee:21:f3:f8:b1:91:d3:ee:59:60:a1:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:36:95:82:0C:CA:C2:6F:5E:D0:F8:EF:1D:95:B1:1B:66:31:34:8E
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS28664.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:9a:10:55:61:a1:24:0e:c4:8c:2c:36:c8:c3:5c:77:49:63:
         9e:84:68:fc:53:8e:70:fb:fb:ee:aa:98:cc:06:d3:12:93:12:
         6a:28:43:1d:90:e2:e4:7e:c2:a1:41:8c:cb:da:b1:90:49:e5:
         22:89:b2:d4:1b:ab:8c:5a:6e:3e:ec:45:65:24:55:d1:fb:f2:
         74:d7:5d:5a:95:13:ef:16:4a:9a:91:9c:4a:29:56:2f:c9:6d:
         38:f2:83:e7:43:db:4c:ee:a0:58:79:a9:07:0f:b2:aa:36:4c:
         dc:cf:ce:35:35:bb:64:2c:3e:6a:b3:83:6e:c1:63:ac:35:91:
         b6:ce:61:73:85:72:ae:14:a3:46:f2:5f:a4:f2:8c:00:ec:e8:
         d1:ce:96:28:74:7a:d3:cf:d9:72:89:25:9b:99:39:b2:61:d8:
         5f:a9:47:9b:30:98:f1:a5:10:30:29:30:e1:b5:35:15:09:17:
         21:45:5c:09:b5:1f:99:ee:e6:da:32:c5:44:51:52:77:da:d1:
         37:2e:b2:cb:11:7e:ea:46:d0:2e:b2:78:87:d1:f2:a3:da:db:
         86:bb:86:91:24:81:63:a1:bc:5b:24:17:55:f3:08:1c:0a:4a:
         6b:af:6f:02:72:f1:03:a7:7a:d1:5f:38:ce:80:73:e7:fe:93:
         45:c3:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org