Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138392e33392e38302e302f32302d3234203d3e203238353830.roa
File:                     3138392e33392e38302e302f32302d3234203d3e203238353830.roa (raw, json)
Hash identifier:          HbUwLuokQ/FEop7AnrfJ/3RMOJfkY6ptGbB23TjFjrU=
Subject key identifier:   A6:82:B8:64:49:8A:3C:09:B1:AC:12:14:0C:2A:7C:4C:69:B5:E8:BC
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       47DFC20889FB5151B20D17AFF9B53E6F11A73B3E
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138392e33392e38302e302f32302d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:04 +0000
ROA not before:           Thu 19 Oct 2023 19:10:04 +0000
ROA not after:            Thu 17 Oct 2024 19:15:04 +0000
asID:                     28580
IP address blocks:        189.39.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:df:c2:08:89:fb:51:51:b2:0d:17:af:f9:b5:3e:6f:11:a7:3b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:04 2023 GMT
            Not After : Oct 17 19:15:04 2024 GMT
        Subject: CN=A682B864498A3C09B1AC12140C2A7C4C69B5E8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:28:7a:d8:e0:e3:b8:4a:ad:83:f2:fe:b0:
                    f9:11:d6:19:a5:85:b0:74:4c:10:7c:4f:84:9e:0a:
                    63:ab:bc:12:10:fc:af:ce:af:24:70:94:3c:02:fb:
                    3c:72:b3:4c:ef:70:43:ab:90:04:e4:c4:3f:a6:8b:
                    8c:7d:d4:16:04:3b:18:98:e9:80:f8:56:0f:88:38:
                    e5:56:3f:2f:a6:3e:24:e4:1f:a0:c5:b0:c6:81:ef:
                    73:56:39:16:a5:f2:a1:55:6c:e6:49:de:19:ea:b4:
                    5a:79:f1:ef:30:64:b4:ff:e2:63:29:9f:d2:aa:bf:
                    e0:77:a1:24:ee:d8:db:86:99:f0:65:2e:47:5e:90:
                    c1:70:f7:7f:67:eb:ef:f3:af:83:2d:65:c8:7e:e4:
                    e5:46:b1:e9:e4:49:3f:37:2c:92:dc:d7:91:88:0e:
                    3e:31:fc:82:0a:26:47:5e:b2:2b:99:3b:ef:92:36:
                    3c:6e:7d:4b:c8:53:06:e1:93:da:23:c7:61:bc:26:
                    bd:7b:23:6d:1a:72:96:02:2f:40:98:ca:53:96:d4:
                    bb:8c:41:70:da:18:8e:06:f5:2f:59:14:e7:eb:6b:
                    c5:c1:90:4a:b6:4f:28:5f:63:55:fa:69:a9:d9:70:
                    85:dc:4c:17:43:70:d5:26:c9:84:56:a1:81:e4:33:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:82:B8:64:49:8A:3C:09:B1:AC:12:14:0C:2A:7C:4C:69:B5:E8:BC
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138392e33392e38302e302f32302d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:45:eb:4c:44:ad:5a:ac:ee:0a:78:f7:77:fe:be:98:f2:09:
         54:06:d9:1d:72:a3:d4:ff:1e:26:de:00:2a:a3:a0:77:b0:fb:
         a3:f8:e6:37:ed:ee:95:4c:15:ab:93:78:b2:85:56:f6:e3:da:
         c8:d0:ba:3d:81:4b:f1:45:28:22:83:c1:61:a9:04:f6:37:73:
         73:c4:b0:2f:bc:fa:e0:e6:72:82:fa:08:2b:6d:8e:81:0a:4d:
         dc:81:1b:ee:30:98:ef:16:45:a2:58:34:9f:fe:67:d8:e4:a8:
         5e:73:d6:ba:dd:d6:79:b8:3b:62:db:66:6d:e1:e8:9d:c5:5a:
         94:58:7c:89:f0:26:c8:f4:fc:09:13:46:a1:7f:ba:a4:e7:b8:
         57:76:d1:de:c9:1e:76:67:3f:88:26:52:90:a8:83:05:6c:5c:
         5b:46:fe:49:8f:e3:d8:c0:7f:64:60:3c:b0:12:69:30:cc:f7:
         ee:ba:0b:46:49:0c:40:f9:0b:1f:66:5c:f7:d3:11:54:ae:11:
         3c:ac:e8:b7:14:56:7e:20:61:de:eb:b2:e4:b1:cf:ad:17:53:
         1f:69:f4:70:02:32:d9:3d:e6:44:e5:f3:e7:74:5c:7e:98:33:
         ac:37:2d:e7:90:f7:ee:a0:8a:49:dc:b5:e7:ec:33:cd:12:0c:
         2e:b0:48:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org