Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138392e32382e3234302e302f32302d3234203d3e203238353830.roa
File:                     3138392e32382e3234302e302f32302d3234203d3e203238353830.roa (raw, json)
Hash identifier:          1w1iaGG8d12AAW89zK6OYWETd2dkExAo7ph+MvnFZy4=
Subject key identifier:   35:DC:EF:62:51:7C:E4:61:B3:79:F3:83:A2:10:2C:3C:CD:77:07:1C
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       6A0FD5E7B105F6C96073A68524FE4C44ACC3E47D
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138392e32382e3234302e302f32302d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:03 +0000
ROA not before:           Thu 19 Oct 2023 19:10:03 +0000
ROA not after:            Thu 17 Oct 2024 19:15:03 +0000
asID:                     28580
IP address blocks:        189.28.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0f:d5:e7:b1:05:f6:c9:60:73:a6:85:24:fe:4c:44:ac:c3:e4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:03 2023 GMT
            Not After : Oct 17 19:15:03 2024 GMT
        Subject: CN=35DCEF62517CE461B379F383A2102C3CCD77071C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:ed:7f:d1:e9:80:74:43:67:8b:72:46:72:
                    3e:7c:c1:90:b0:94:ad:7a:c6:58:ec:ce:a9:37:c4:
                    fd:1a:f1:2d:e1:bf:43:ec:a6:c3:89:f3:20:8d:5c:
                    55:45:45:e1:2f:2d:db:c6:9b:6a:22:64:49:7d:1e:
                    39:1e:c9:86:9a:15:ff:8f:a9:af:ff:fa:17:c3:4d:
                    90:3f:ee:ad:db:66:cc:cf:cb:43:a7:fc:57:9b:23:
                    c1:5d:40:6b:77:aa:bb:14:0f:5a:1d:15:61:81:78:
                    e3:04:32:a9:ad:6f:fb:c4:ca:cf:75:72:09:e1:77:
                    fe:49:ef:82:15:5f:44:f9:e6:e2:58:63:95:4e:8e:
                    9b:1e:99:d4:bf:c4:db:6d:3f:6f:22:2b:d3:8b:c2:
                    7e:95:97:b0:55:ae:2a:00:a1:c1:d0:c7:74:5a:78:
                    41:fc:aa:09:f1:05:26:08:80:b0:86:c9:a5:04:bd:
                    fa:ba:48:15:77:17:51:77:1e:65:c2:cb:30:49:13:
                    bb:c6:a6:65:6f:2b:39:d0:12:ef:16:ee:ed:30:ea:
                    4b:a1:bf:09:6c:52:b1:e7:20:b8:9b:55:46:a3:31:
                    3d:30:c9:f2:d5:7c:2a:cf:56:0f:42:07:25:45:50:
                    86:36:f7:e1:10:01:9d:09:63:0d:ad:52:8f:5f:64:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DC:EF:62:51:7C:E4:61:B3:79:F3:83:A2:10:2C:3C:CD:77:07:1C
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138392e32382e3234302e302f32302d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:32:01:34:b9:fa:6f:38:fb:70:4e:ee:77:33:e8:76:40:
         68:9c:91:3e:d2:58:84:ac:1f:8c:3b:d9:d2:48:bb:2d:03:f5:
         72:11:d0:ec:93:65:db:d2:59:39:08:f5:b9:c0:cb:25:1d:f0:
         6a:64:95:79:2e:b5:5b:a5:c9:91:55:b4:08:b9:76:6e:5c:f3:
         e4:11:97:06:10:73:aa:1d:23:8a:f2:7f:e4:38:d2:f8:3b:ff:
         3f:68:60:89:b6:c3:d1:01:7e:3a:80:3b:7f:bb:52:46:85:4f:
         3c:e6:93:b2:33:9c:b7:f1:d3:4b:2f:85:31:7c:5b:a2:bd:3f:
         d2:9b:71:5c:58:44:19:7c:b2:1d:07:00:1a:59:1e:be:47:10:
         9c:3e:52:4c:33:48:3d:f6:77:ef:74:d0:a4:2e:e6:4d:b9:36:
         e4:90:5b:e4:c9:14:8d:df:a5:06:66:3b:a0:80:db:85:8b:cb:
         76:66:61:5c:2a:00:85:70:a1:14:2b:7a:5b:39:5b:7e:d1:69:
         05:e2:4c:83:b4:a9:ee:13:cb:e0:ce:f4:68:fa:0d:da:0c:41:
         8a:af:ab:9a:e3:b1:11:22:3f:f6:34:51:8f:a8:6c:9a:92:74:
         cc:36:8b:e0:8f:ec:30:d3:f8:ab:73:97:42:5a:9f:0d:f6:91:
         3c:8f:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org