Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3234203d3e203238363635.roa
File:                     3138392e312e3132382e302f32302d3234203d3e203238363635.roa (raw, json)
Hash identifier:          Vs6TRgG0Gdof6BMtF7Lwn4ah1MGHgVfJTt/IHDNpQ4A=
Subject key identifier:   B3:0C:D9:6D:2D:7C:E6:2B:FE:7F:1D:B7:97:E2:73:13:56:9D:79:F5
Certificate issuer:       /CN=8BD147C947DB64C5F81687C80D51E9C754CCE613
Certificate serial:       3EA3F2DD17AE80DE85C9028E78BFF549F68E4838
Authority key identifier: 8B:D1:47:C9:47:DB:64:C5:F8:16:87:C8:0D:51:E9:C7:54:CC:E6:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD147C947DB64C5F81687C80D51E9C754CCE613.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3234203d3e203238363635.roa
Signing time:             Wed 06 Mar 2024 16:00:47 +0000
ROA not before:           Wed 06 Mar 2024 15:55:47 +0000
ROA not after:            Wed 05 Mar 2025 16:00:47 +0000
asID:                     28665
IP address blocks:        189.1.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a3:f2:dd:17:ae:80:de:85:c9:02:8e:78:bf:f5:49:f6:8e:48:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD147C947DB64C5F81687C80D51E9C754CCE613
        Validity
            Not Before: Mar  6 15:55:47 2024 GMT
            Not After : Mar  5 16:00:47 2025 GMT
        Subject: CN=B30CD96D2D7CE62BFE7F1DB797E27313569D79F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:44:55:4f:47:60:f0:f6:b9:05:25:22:15:14:
                    55:62:76:3a:2a:e5:93:21:72:1a:1b:b1:20:e9:ed:
                    b2:62:42:66:f2:46:3c:60:3d:a5:af:b5:c8:59:37:
                    58:97:0c:89:30:c8:7d:0e:ba:87:7f:57:7c:a0:1a:
                    af:66:59:c1:d8:98:98:0f:b3:ea:48:9d:d3:30:25:
                    29:5b:13:ad:22:a0:14:8d:26:e9:8f:79:6f:32:d7:
                    5c:8f:f2:1d:b1:98:fe:3f:1e:80:25:d8:98:ef:15:
                    57:62:6c:05:eb:04:e2:92:c2:29:0f:86:46:80:56:
                    fe:87:31:d0:5a:4d:3b:62:a4:20:56:de:39:94:e2:
                    f5:b8:ec:93:6c:f4:1f:e0:ac:eb:9f:9f:04:67:49:
                    f6:aa:05:82:7d:40:ce:83:5f:b1:21:b6:81:76:2f:
                    21:db:a7:9a:7f:ae:df:8e:80:27:a5:c4:af:08:bc:
                    c3:e7:3f:74:97:fc:53:05:15:8e:4c:b7:75:27:9e:
                    71:e1:51:e3:eb:0d:d9:d6:24:93:41:02:24:fe:8f:
                    9a:85:6c:a5:c8:a3:3e:68:52:0e:ca:2d:8b:98:e1:
                    d3:63:36:33:95:1a:4a:34:18:57:17:af:0d:6e:08:
                    8d:9f:61:47:f3:11:a2:54:57:ae:3e:2b:56:fd:d4:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0C:D9:6D:2D:7C:E6:2B:FE:7F:1D:B7:97:E2:73:13:56:9D:79:F5
            X509v3 Authority Key Identifier:
                keyid:8B:D1:47:C9:47:DB:64:C5:F8:16:87:C8:0D:51:E9:C7:54:CC:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/8BD147C947DB64C5F81687C80D51E9C754CCE613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD147C947DB64C5F81687C80D51E9C754CCE613.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3138392e312e3132382e302f32302d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:24:de:39:eb:2e:37:a3:d0:53:88:9c:97:2b:25:da:a7:01:
         3b:c0:ce:c6:88:80:13:ff:fa:f9:7e:16:5f:ef:5e:fe:75:e1:
         2e:03:c9:4b:76:f9:ca:1f:9e:f9:09:a2:c9:5e:9a:84:a7:bc:
         ec:81:21:d8:53:fe:2a:9e:55:46:77:10:09:22:18:36:96:c0:
         68:9f:7e:89:0b:63:35:ec:07:40:98:70:77:21:6e:75:4a:f1:
         61:fc:21:7c:e1:90:44:3a:6a:a5:a2:4a:7a:dc:5e:55:e4:a3:
         9e:71:b3:08:dc:2c:d1:ce:c1:55:f7:2a:64:34:35:50:1a:b8:
         a4:82:6e:d6:bb:5a:ba:a7:7e:11:18:77:c4:45:35:7a:c7:6c:
         a4:84:77:a6:a0:6f:30:3d:09:d0:79:1b:27:1a:8c:15:fc:68:
         a0:c6:80:96:ce:7d:a8:bd:0f:f6:f9:ee:b0:6c:63:f2:91:19:
         64:a5:7a:6f:da:2a:ae:de:1b:01:9a:5c:8c:4c:c7:bb:b6:ba:
         73:f2:34:ce:69:9d:c3:69:62:30:1d:9d:4c:a0:33:bc:52:5c:
         3b:74:22:7b:fd:c5:3c:3d:76:ba:e1:1d:d1:2a:f9:0e:1a:dd:
         b0:16:fc:77:e2:11:e3:3f:37:17:14:d3:3c:d2:bf:8e:7d:83:
         fb:d2:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org