Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3138392e3131332e3230382e302f32312d3234203d3e20323632333434.roa
File:                     3138392e3131332e3230382e302f32312d3234203d3e20323632333434.roa (raw, json)
Hash identifier:          r0GddUz9eoCRJbUvQOOzr4WEWtqPr74CFT4FALz/B00=
Subject key identifier:   D4:CB:A7:6B:4C:AC:CE:EF:B2:98:30:CC:2A:49:03:3F:1A:07:7C:54
Certificate issuer:       /CN=C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3
Certificate serial:       1E85CA5290FFB347EC66BAC1BECC826D98942825
Authority key identifier: C2:C1:FB:01:62:2C:A7:E7:2A:68:D5:CB:55:AA:FB:03:FD:BD:C6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3138392e3131332e3230382e302f32312d3234203d3e20323632333434.roa
Signing time:             Wed 03 Apr 2024 11:47:22 +0000
ROA not before:           Wed 03 Apr 2024 11:42:22 +0000
ROA not after:            Wed 02 Apr 2025 11:47:22 +0000
asID:                     262344
IP address blocks:        189.113.208.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:85:ca:52:90:ff:b3:47:ec:66:ba:c1:be:cc:82:6d:98:94:28:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3
        Validity
            Not Before: Apr  3 11:42:22 2024 GMT
            Not After : Apr  2 11:47:22 2025 GMT
        Subject: CN=D4CBA76B4CACCEEFB29830CC2A49033F1A077C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:7b:bc:2f:02:b3:6e:92:8f:6b:af:30:39:
                    76:be:0b:63:7e:54:a1:d9:f4:5f:99:e6:65:9e:d8:
                    7c:a1:db:32:8d:b4:11:82:91:d6:70:8f:a8:b4:9e:
                    6f:44:1d:d6:cf:97:62:39:8c:99:0b:6d:00:31:92:
                    73:79:66:ac:b5:b6:aa:a2:02:77:d2:7e:2e:6c:7d:
                    36:b4:08:9a:66:6e:68:82:5d:67:71:b2:68:b2:e0:
                    8c:51:a9:a8:e3:93:59:72:cb:73:64:80:b6:17:48:
                    39:5d:d6:34:9f:09:f2:4b:36:12:9a:08:0c:8d:9b:
                    68:e8:e5:27:d0:e5:f1:5e:e0:bf:35:12:33:14:78:
                    ef:07:1e:cc:eb:c5:24:3e:d3:29:48:58:86:75:59:
                    e2:e6:48:49:59:9b:1b:40:fa:41:ef:f4:bd:81:b5:
                    a9:8a:5f:cc:20:f3:cf:34:9b:fb:9f:0d:41:6e:7c:
                    a3:0d:14:23:85:bf:2b:14:54:36:41:78:6c:f3:5f:
                    31:89:5a:70:e3:80:46:db:cd:0b:10:a5:68:cc:91:
                    2d:02:58:96:47:24:8a:38:42:77:6e:6d:99:7f:7b:
                    cc:5c:c2:0b:78:b7:f8:20:4e:3a:34:e3:39:90:a8:
                    58:b4:1d:6c:ad:45:94:04:22:a7:06:94:d3:84:0a:
                    29:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CB:A7:6B:4C:AC:CE:EF:B2:98:30:CC:2A:49:03:3F:1A:07:7C:54
            X509v3 Authority Key Identifier:
                keyid:C2:C1:FB:01:62:2C:A7:E7:2A:68:D5:CB:55:AA:FB:03:FD:BD:C6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3138392e3131332e3230382e302f32312d3234203d3e20323632333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:33:5b:30:fa:a2:97:26:dd:a8:65:fe:fc:ce:c8:a6:2c:7e:
         d4:33:82:fb:1d:71:e8:99:62:51:d5:97:05:4c:c1:01:84:4a:
         94:43:40:fb:05:b9:e4:e7:ad:ce:4e:fc:39:fc:74:b5:7a:bb:
         b0:d0:25:5d:eb:e4:0a:b6:73:a4:41:0c:35:5c:ec:4c:52:02:
         25:2b:e3:90:d8:98:79:18:42:4d:1e:cd:5d:0f:39:75:85:6b:
         4f:cb:51:0f:16:22:68:ec:b0:52:43:45:3f:63:27:78:79:1a:
         19:c9:2d:1b:4a:76:e1:22:9f:17:79:27:92:32:d1:18:05:63:
         e5:01:99:2f:3c:2b:a6:09:06:72:7b:62:06:35:d9:44:c2:13:
         7e:62:a4:d7:09:d0:da:38:8f:e6:9c:9b:95:7a:e9:b3:d5:f5:
         8b:08:1c:26:98:01:a2:5d:eb:f7:39:9f:70:cb:4c:d0:28:a4:
         37:5f:6d:88:63:26:c0:f8:bc:63:ea:15:91:65:f4:00:ee:59:
         97:0b:a3:9d:3b:5d:f6:62:c7:a3:ed:61:8f:6e:48:c5:4f:8b:
         ab:26:19:ad:4a:5c:43:e3:c0:38:97:92:38:53:c7:26:a2:93:
         c1:bb:10:de:f9:45:57:6c:4b:1e:8a:ba:f6:28:75:17:e0:b7:
         56:33:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org