Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/3138392e382e3132312e302f32342d3234203d3e20323730373332.roa
File:                     3138392e382e3132312e302f32342d3234203d3e20323730373332.roa (raw, json)
Hash identifier:          OqAjJFfJAVqfoyNiBh/jtL08Huuxbs+Hhr+x/DvJCos=
Subject key identifier:   2A:0A:91:A0:49:EC:3E:74:37:EB:2B:82:3D:A5:8E:78:CE:BD:64:C0
Certificate issuer:       /CN=41F3C0F65E8171965A227085FB864D9A4D75C0E2
Certificate serial:       38D42E1BA394D87D2B84E9D80BFA144F45A61D25
Authority key identifier: 41:F3:C0:F6:5E:81:71:96:5A:22:70:85:FB:86:4D:9A:4D:75:C0:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F3C0F65E8171965A227085FB864D9A4D75C0E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/3138392e382e3132312e302f32342d3234203d3e20323730373332.roa
Signing time:             Fri 23 Aug 2024 20:08:57 +0000
ROA not before:           Fri 23 Aug 2024 20:03:57 +0000
ROA not after:            Fri 22 Aug 2025 20:08:57 +0000
asID:                     270732
IP address blocks:        189.8.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d4:2e:1b:a3:94:d8:7d:2b:84:e9:d8:0b:fa:14:4f:45:a6:1d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F3C0F65E8171965A227085FB864D9A4D75C0E2
        Validity
            Not Before: Aug 23 20:03:57 2024 GMT
            Not After : Aug 22 20:08:57 2025 GMT
        Subject: CN=2A0A91A049EC3E7437EB2B823DA58E78CEBD64C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:37:36:b7:ba:9d:56:2c:44:d7:c6:d6:6d:
                    20:55:a9:b6:8d:02:ef:65:39:e5:3d:fb:15:ad:39:
                    29:f5:01:44:c4:ca:df:4a:80:74:75:05:01:a8:cf:
                    03:0d:ac:f7:53:64:05:71:92:dd:da:01:e0:a0:77:
                    ee:f0:44:b4:cc:62:69:ee:bd:02:ff:20:5c:56:40:
                    64:25:a0:14:fa:4d:4d:06:3a:bb:7c:18:b7:14:75:
                    ce:87:a4:13:4b:b0:b5:b6:90:c8:55:ff:6a:0d:04:
                    cc:e1:08:4f:c3:f6:5c:4a:82:ef:9c:9c:67:4d:84:
                    5c:d3:76:45:f7:fa:ff:70:a1:11:b8:8c:e1:e4:fb:
                    0a:c5:a3:d1:6c:e1:ee:b0:d4:67:14:be:4e:b6:83:
                    8f:74:f8:51:8d:ec:55:89:75:bf:13:a7:c9:c5:cf:
                    50:73:fb:e0:ff:b3:e4:86:13:18:7d:49:17:94:54:
                    3c:5b:66:18:f6:f6:78:cc:44:88:cf:03:16:b7:a4:
                    44:ef:db:5f:a7:21:1a:cb:cb:8b:4b:d3:2b:1d:1f:
                    49:f6:fb:93:f3:46:46:7e:c8:df:0d:98:7a:b2:2e:
                    08:55:43:fe:11:b3:0b:88:93:ba:17:84:df:e6:3b:
                    a0:33:fd:a2:a0:ef:55:a1:a1:3d:5d:6d:9e:12:81:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0A:91:A0:49:EC:3E:74:37:EB:2B:82:3D:A5:8E:78:CE:BD:64:C0
            X509v3 Authority Key Identifier:
                keyid:41:F3:C0:F6:5E:81:71:96:5A:22:70:85:FB:86:4D:9A:4D:75:C0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/41F3C0F65E8171965A227085FB864D9A4D75C0E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F3C0F65E8171965A227085FB864D9A4D75C0E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/3138392e382e3132312e302f32342d3234203d3e20323730373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a8:39:b1:4e:e3:89:df:02:b2:ff:ec:a5:fa:ab:61:ff:7b:
         6b:41:19:e5:88:7f:85:dd:b7:5d:17:cd:91:a0:9f:0d:ef:a4:
         2b:57:14:9e:d0:64:f4:e7:8d:98:0c:9f:3b:d1:2d:f5:59:f7:
         de:d0:aa:ad:56:cc:b1:82:0a:6c:24:a4:9d:e6:35:ec:2c:88:
         57:81:44:6a:b7:6d:80:9b:0b:ec:44:6b:d4:52:7d:d1:dd:3c:
         02:92:0e:ca:81:8e:ca:48:2f:19:e4:76:77:0c:14:90:7a:3e:
         5a:2f:52:33:c9:64:23:b0:49:1b:53:c9:fd:47:8e:d0:89:5c:
         dc:06:d0:5e:df:a4:d7:a5:23:b8:d7:90:8f:d6:e4:1f:b0:aa:
         e6:c1:e0:21:d1:fa:b7:16:cb:e4:c0:0d:21:4f:2d:1b:64:84:
         5b:5a:f9:52:38:21:b9:bf:07:eb:65:44:b1:ec:16:a0:c6:54:
         3e:97:66:2d:68:45:f6:d4:3f:50:f5:9c:e9:93:f2:89:a2:3b:
         1c:92:de:c9:05:a4:92:f3:a3:d5:af:51:ae:27:ee:b1:5a:e3:
         f5:c7:8e:13:d5:5a:36:e7:40:3b:cc:16:c2:7b:6c:d0:fe:c6:
         b0:27:b2:cf:9a:57:e2:c3:6e:47:bb:7d:d3:83:f7:25:70:9b:
         37:59:cc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 13:34:35 2024 by rpki-client on console-ams.rpki-client.org