Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3232203d3e20323730373031.roa
File:                     3138392e3132372e3133322e302f32322d3232203d3e20323730373031.roa (raw, json)
Hash identifier:          i1PwWAFpzkBmEzFvRy4wwHPz+3blV16ZDa4EbBcgvF8=
Subject key identifier:   EE:06:68:88:AB:CC:D6:A4:47:0C:54:FF:81:93:12:68:E0:70:9E:81
Certificate issuer:       /CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
Certificate serial:       3BB1E55DAC0054E13E6231350189D61F6BE9FF1E
Authority key identifier: 76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3232203d3e20323730373031.roa
Signing time:             Fri 19 Jan 2024 22:39:05 +0000
ROA not before:           Fri 19 Jan 2024 22:34:05 +0000
ROA not after:            Fri 17 Jan 2025 22:39:05 +0000
asID:                     270701
IP address blocks:        189.127.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b1:e5:5d:ac:00:54:e1:3e:62:31:35:01:89:d6:1f:6b:e9:ff:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
        Validity
            Not Before: Jan 19 22:34:05 2024 GMT
            Not After : Jan 17 22:39:05 2025 GMT
        Subject: CN=EE066888ABCCD6A4470C54FF81931268E0709E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:b2:64:11:7d:84:9d:ef:3b:4f:27:c4:27:
                    91:46:cf:40:a9:fd:29:c0:42:4f:59:b7:76:4b:cb:
                    92:44:75:f1:dc:ca:f8:90:32:8a:52:8a:e0:5c:16:
                    a3:e3:78:e5:41:d7:a5:4e:44:2a:b0:e3:e7:66:34:
                    58:87:42:43:4a:ed:c1:e2:79:cc:40:6f:b2:94:8d:
                    1c:d2:57:ac:be:18:ae:cd:eb:cc:32:8c:bf:02:03:
                    b9:ea:91:ec:46:f3:b9:b4:8a:af:e1:49:35:61:16:
                    56:c9:4b:42:16:db:32:59:b8:26:f7:e6:88:5c:a6:
                    ea:0b:e5:2a:69:92:d7:2f:31:3b:69:4e:cb:34:12:
                    05:b3:7f:a8:f3:cd:74:1e:3d:97:8b:12:11:52:79:
                    6e:a3:83:50:ec:ea:84:0d:2e:71:f0:c0:84:e7:cb:
                    cc:45:e0:f4:ce:93:e3:74:6a:d1:f9:b2:03:04:e3:
                    db:4e:ee:57:4e:48:0b:eb:3a:b7:e8:df:0b:e7:19:
                    58:76:fd:95:c4:91:66:ad:36:ee:90:0b:3c:f6:35:
                    26:32:6c:fa:fb:5a:bf:46:4f:86:6a:ed:43:87:11:
                    9c:03:61:92:c7:a6:ae:eb:18:08:f0:59:95:5c:a4:
                    3c:b6:c6:34:76:68:97:e8:09:af:7b:f9:e8:ab:f9:
                    3e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:06:68:88:AB:CC:D6:A4:47:0C:54:FF:81:93:12:68:E0:70:9E:81
            X509v3 Authority Key Identifier:
                keyid:76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3232203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:49:81:0f:f3:2d:61:f0:f1:cd:5a:a6:39:ff:bd:f2:36:
         d0:05:4b:12:bd:42:3a:34:c5:6d:f1:e5:dc:68:77:b8:71:0e:
         aa:66:df:a6:25:94:76:3b:da:aa:69:a6:3a:d3:f2:c3:3e:8f:
         18:7a:81:f3:0b:25:32:33:e0:4a:bb:fc:da:97:64:92:ef:61:
         1f:e8:9d:6d:80:95:91:31:17:45:1a:8c:45:e9:fb:34:5f:b3:
         74:da:b6:5f:13:3b:96:d1:96:f5:1f:3b:a2:61:81:20:56:91:
         57:37:f4:2d:ff:28:7f:4f:91:3e:29:22:65:92:b6:8d:f8:8f:
         8f:8c:a8:11:b8:a9:cb:4c:5c:83:5e:f8:25:3e:da:4b:12:c5:
         b7:f7:5b:34:28:41:cf:e8:91:06:09:c2:cb:a1:27:81:b0:2a:
         48:c8:c0:fd:a6:0e:b3:13:bb:7f:28:23:dc:69:84:42:22:93:
         15:7e:74:d2:16:bf:98:f1:e6:69:99:94:c4:2c:f2:15:f5:3a:
         33:93:64:82:2d:28:23:b7:1c:1a:1b:fb:5e:50:cf:8d:af:f7:
         5d:ad:89:ec:3b:10:c9:4a:53:aa:8c:bc:1e:93:5c:ac:29:72:
         c8:4c:65:f2:ca:33:44:67:21:af:42:c7:df:71:47:b9:be:e8:
         e1:c4:d8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org