Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138392e31342e302e302f31382d3234203d3e203232363839.roa
File:                     3138392e31342e302e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          SRpHCcr6CFVGbVebESgeDL2nt9vTKRFEjInj+FJ/mJA=
Subject key identifier:   A9:87:D8:29:43:6E:94:91:5A:F9:7E:03:A0:00:0C:D4:DD:DA:33:B9
Certificate issuer:       /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial:       59EDC21EA72A5D2D50C8ACFDA762444E4AE20977
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138392e31342e302e302f31382d3234203d3e203232363839.roa
Signing time:             Tue 20 Feb 2024 16:57:04 +0000
ROA not before:           Tue 20 Feb 2024 16:52:04 +0000
ROA not after:            Tue 18 Feb 2025 16:57:04 +0000
asID:                     22689
IP address blocks:        189.14.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ed:c2:1e:a7:2a:5d:2d:50:c8:ac:fd:a7:62:44:4e:4a:e2:09:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
        Validity
            Not Before: Feb 20 16:52:04 2024 GMT
            Not After : Feb 18 16:57:04 2025 GMT
        Subject: CN=A987D829436E94915AF97E03A0000CD4DDDA33B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:18:6b:c6:e9:9f:c0:bb:28:0c:12:47:e9:
                    d8:f3:b4:55:54:6f:4e:a1:e3:bd:4e:64:9d:08:b2:
                    b2:1d:16:f6:3f:01:b4:ab:64:aa:b5:bd:e8:cc:c0:
                    af:ff:f6:e7:af:4a:f0:03:46:4e:2b:06:19:b9:83:
                    81:60:16:23:84:ee:ab:66:45:23:be:f3:41:da:5f:
                    c0:ad:63:62:b8:a8:8c:f1:23:6d:30:ac:83:ba:8a:
                    41:45:8b:3d:8b:d4:a1:86:3c:25:b0:9a:bb:e0:62:
                    ec:76:86:17:78:75:f0:ba:f7:31:51:cc:f9:05:91:
                    dd:24:4d:ef:4a:dc:92:2d:0f:cd:7c:a3:8b:6c:3b:
                    f1:5b:16:5b:81:42:1b:70:0a:cc:63:64:46:5a:6d:
                    e9:b9:7e:2b:97:81:bf:ff:77:33:ad:5f:34:a8:32:
                    06:a7:a0:eb:4b:90:59:dd:d6:6a:71:91:bf:74:ca:
                    12:fc:f4:e7:34:62:b3:43:a3:63:4d:46:f9:66:8d:
                    44:20:43:cd:0d:6e:4b:62:59:67:11:16:e2:44:f1:
                    9b:3e:07:97:a4:bf:fc:07:ee:ac:65:4a:1e:a8:fa:
                    c7:61:d2:f1:96:73:a0:7f:74:0f:17:09:e7:e2:5d:
                    4c:f6:e8:8d:f7:60:26:90:41:32:fc:95:1c:5d:b3:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:87:D8:29:43:6E:94:91:5A:F9:7E:03:A0:00:0C:D4:DD:DA:33:B9
            X509v3 Authority Key Identifier:
                keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138392e31342e302e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:08:f7:a2:b3:ca:db:fd:81:77:b4:22:11:79:c7:9c:84:0e:
         41:df:72:a0:18:b2:36:30:0a:8f:7f:0b:26:ae:b9:c8:c9:04:
         85:67:af:ed:f0:90:95:49:63:95:8e:6c:3d:47:02:f0:43:3f:
         a5:20:9a:bf:c8:c9:4d:ca:2e:a2:22:a5:6c:fd:69:cb:7b:90:
         ae:08:d8:99:9d:a6:36:2a:54:58:46:2e:b6:ba:36:65:15:f8:
         0f:3c:40:93:f3:3a:e2:aa:ff:58:a8:6d:59:18:20:81:f2:58:
         46:87:9f:4b:38:3a:5c:ca:c6:06:12:14:80:8f:9f:11:99:67:
         28:b1:5a:94:59:e7:2e:76:da:9c:5f:27:9f:3b:cb:03:e6:89:
         56:bd:a0:cf:f3:ba:40:8e:85:7d:dc:52:43:20:31:cd:61:15:
         ea:fc:9d:35:b8:cf:ff:6b:a0:71:1b:c3:13:28:bc:43:b8:c7:
         f4:9d:3f:bf:41:ac:60:36:1b:a3:47:ad:ee:db:40:9a:09:c0:
         75:8f:f1:b5:21:dc:80:03:e0:23:eb:70:39:37:d3:41:42:98:
         3d:0f:5d:39:36:3f:67:cf:f2:e5:d0:6c:ac:ab:6b:13:c6:5a:
         f2:cd:a8:5c:5f:af:e3:4d:8e:51:1d:bb:a5:0b:d3:a6:17:b3:
         d2:07:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org