Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138392e37362e302e302f31382d3234203d3e203232363839.roa
File:                     3138392e37362e302e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          lbTS1ZK05jDAwB9xw/yTT4tQ1fGlWkcAfjJ4Jr+TMEc=
Subject key identifier:   FC:DD:5B:45:E7:5F:14:86:BC:3A:84:1B:22:C2:FB:C4:D6:7B:70:B7
Certificate issuer:       /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial:       09A8D6BF0CD4BE23CA7226041093625166155877
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138392e37362e302e302f31382d3234203d3e203232363839.roa
Signing time:             Tue 20 Feb 2024 16:57:03 +0000
ROA not before:           Tue 20 Feb 2024 16:52:03 +0000
ROA not after:            Tue 18 Feb 2025 16:57:03 +0000
asID:                     22689
IP address blocks:        189.76.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a8:d6:bf:0c:d4:be:23:ca:72:26:04:10:93:62:51:66:15:58:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
        Validity
            Not Before: Feb 20 16:52:03 2024 GMT
            Not After : Feb 18 16:57:03 2025 GMT
        Subject: CN=FCDD5B45E75F1486BC3A841B22C2FBC4D67B70B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:33:1c:a7:c3:d4:97:27:a6:39:ed:9b:96:
                    a7:1b:6f:4e:ee:70:31:8a:9b:da:37:ac:af:ce:26:
                    e9:de:a0:08:f8:fb:61:a2:c3:70:6d:74:70:3e:f7:
                    b3:86:39:01:be:4f:8c:53:da:13:fe:25:43:39:a5:
                    7c:60:a1:c2:f4:6d:15:98:cc:fe:0b:85:e2:27:39:
                    b5:85:c8:1f:3a:84:2f:53:c9:9d:7f:6d:54:cc:9c:
                    bd:18:ee:fe:3c:63:7b:a5:0f:6e:90:03:a3:33:4d:
                    58:f1:fb:96:15:72:ce:38:4c:a4:a9:4e:92:da:b7:
                    07:4c:e4:e5:66:10:e2:d8:61:b4:1e:9f:36:62:96:
                    8a:32:0a:25:a0:7b:8d:ea:5f:9d:b0:35:25:4a:ab:
                    2d:0b:8d:5a:b0:06:12:63:96:cc:ff:66:dc:bb:2f:
                    f8:2d:1a:f5:af:10:f8:7f:d5:2f:36:72:ad:78:d9:
                    ea:d3:76:83:75:98:9b:1a:4d:e1:b0:49:aa:7b:4a:
                    44:b1:02:fa:13:04:71:74:30:b2:19:ed:4a:0d:20:
                    9b:0a:54:f8:a0:b4:a1:a6:1e:73:ad:75:2d:ac:e1:
                    a0:81:8f:a1:27:c1:18:32:d4:8a:c9:9f:68:d7:ac:
                    49:35:c9:e4:8f:3b:d0:2c:15:07:6f:e8:d2:2d:44:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DD:5B:45:E7:5F:14:86:BC:3A:84:1B:22:C2:FB:C4:D6:7B:70:B7
            X509v3 Authority Key Identifier:
                keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138392e37362e302e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:e8:08:97:1c:c2:b9:fa:c9:16:9f:16:9c:38:70:30:d7:5f:
         10:94:d9:0f:79:0a:5d:63:8f:f5:af:e9:a3:63:9f:a5:a4:2c:
         24:42:ec:19:bf:63:88:c2:61:41:27:d3:f8:bc:b1:3f:dd:a1:
         da:47:e7:4b:ec:b4:5a:0f:b6:8f:d6:01:09:b1:4a:6d:eb:41:
         98:e9:76:7d:a4:d1:a8:19:a2:81:2d:41:75:55:f8:05:4c:ca:
         a0:87:51:d2:02:c2:ff:0a:2f:61:46:ee:54:98:67:13:40:d3:
         b3:fa:a5:6e:0c:51:29:b7:bf:7f:67:d4:3d:d7:e7:ef:fe:3d:
         7a:42:4a:18:51:e2:a2:1d:6a:31:02:ce:07:93:b7:7e:c2:47:
         6e:dd:20:e4:4c:3d:07:47:6a:5f:51:34:1f:4e:26:92:76:48:
         e9:f9:a0:f3:70:95:3b:f2:3d:23:cc:ab:68:a1:68:8f:b3:6b:
         1d:1d:0b:93:5c:22:9b:43:60:7a:0c:2e:2e:73:8a:b4:e5:ad:
         d5:39:36:51:d1:75:ac:73:b1:65:49:e1:62:6d:22:69:fd:10:
         aa:2d:56:d7:73:2a:8d:f8:80:9b:b0:bf:cf:09:6f:bb:70:87:
         c8:96:d5:9b:c6:eb:bd:38:1e:17:71:19:d7:15:3e:57:8c:b4:
         75:99:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org