Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3332203d3e20323730373031.roa
File:                     3138392e3132372e3133322e302f32322d3332203d3e20323730373031.roa (raw, json)
Hash identifier:          X5pZfLXgbLL2RLE+VmrBD19JdsJ5+GBB99bM7H5UVgI=
Subject key identifier:   B5:C5:EB:4A:C2:49:EA:32:E4:54:51:6A:E2:AE:FB:DD:49:25:F8:A9
Certificate issuer:       /CN=C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE
Certificate serial:       2D60EC8F4376489403FED77D23493119FDE78A59
Authority key identifier: C8:C1:E9:D2:CF:F5:1D:0F:16:E2:D0:4F:DE:71:23:3C:E0:5C:9F:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3332203d3e20323730373031.roa
Signing time:             Tue 03 Oct 2023 17:05:45 +0000
ROA not before:           Tue 03 Oct 2023 17:00:45 +0000
ROA not after:            Tue 01 Oct 2024 17:05:45 +0000
asID:                     270701
IP address blocks:        189.127.132.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:60:ec:8f:43:76:48:94:03:fe:d7:7d:23:49:31:19:fd:e7:8a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE
        Validity
            Not Before: Oct  3 17:00:45 2023 GMT
            Not After : Oct  1 17:05:45 2024 GMT
        Subject: CN=B5C5EB4AC249EA32E454516AE2AEFBDD4925F8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:d6:87:32:2c:e2:6c:4d:94:e6:e3:e6:e9:
                    7b:b2:7c:4a:17:3f:23:c1:82:04:4d:ed:2b:eb:cf:
                    63:f6:f2:ec:e2:66:0a:c7:35:e9:74:49:f8:ca:db:
                    fd:c6:55:5c:fb:7c:da:4b:8d:24:a5:a4:2f:f9:ea:
                    00:d3:a4:81:0d:c4:e1:9f:86:04:1b:a7:1c:88:cc:
                    8e:45:f6:4c:1e:d4:4e:bf:df:14:bb:3e:f4:55:9f:
                    26:54:46:11:fc:76:32:bb:ab:0e:97:44:0a:0f:65:
                    df:7b:59:e2:e0:79:12:d7:01:e4:60:5d:8f:5b:9c:
                    64:34:17:a5:8b:18:ee:82:87:f5:f7:63:15:48:17:
                    26:1b:af:50:c4:10:02:3d:aa:93:fe:e1:33:cc:c1:
                    cb:45:60:2d:bd:c9:06:b8:8a:eb:5a:ab:2f:78:10:
                    6e:19:d9:0a:d8:eb:d5:6c:0a:73:7a:de:fd:1f:76:
                    3c:55:b1:36:4d:75:00:ea:28:4f:a9:16:36:79:6c:
                    7f:23:e8:ea:2c:22:6d:ef:df:77:10:29:f7:dd:47:
                    3b:40:17:ff:93:72:fd:36:22:0b:e8:13:02:5f:52:
                    4c:1d:77:66:89:c9:0d:c0:7f:16:92:af:40:75:41:
                    e6:e4:3c:97:da:22:70:68:a9:5f:0f:43:36:0f:c1:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C5:EB:4A:C2:49:EA:32:E4:54:51:6A:E2:AE:FB:DD:49:25:F8:A9
            X509v3 Authority Key Identifier:
                keyid:C8:C1:E9:D2:CF:F5:1D:0F:16:E2:D0:4F:DE:71:23:3C:E0:5C:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32322d3332203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:4b:ea:47:f0:69:6a:51:d9:25:0e:72:38:5c:24:62:bb:34:
         f4:89:52:14:80:b1:6e:78:69:89:d3:6c:26:e9:2f:ef:eb:ac:
         e3:2e:41:fd:94:41:c8:65:5f:51:67:30:a1:ee:f6:20:d6:05:
         dc:91:4c:06:a6:c5:13:e1:7f:11:9c:7e:3b:f5:b5:19:e9:b4:
         b6:ee:65:bb:05:40:60:de:0b:08:16:5a:8a:12:c8:70:75:72:
         48:1b:1c:46:4c:ab:9f:73:3a:4f:37:db:d5:36:d0:8c:e3:74:
         10:a7:f1:f8:7b:a2:22:96:72:7f:a8:e1:c5:a7:48:10:d4:de:
         ae:8e:30:c1:6c:74:e5:48:f2:96:c9:09:be:60:bf:45:32:47:
         46:c4:0c:28:2d:c0:00:01:cc:9a:27:1c:42:47:45:b5:93:50:
         40:db:31:a4:35:ac:06:fd:2e:bc:f7:8c:da:fc:10:02:c9:c4:
         bc:ea:30:2a:61:be:43:07:af:a4:42:42:24:33:31:9d:cc:36:
         42:51:ad:ed:fc:1c:12:d4:56:7e:7c:37:af:00:43:bc:d6:0e:
         52:f6:8f:69:42:61:9b:f7:3d:64:1e:3a:b9:8e:61:98:2a:61:
         02:44:f0:d2:08:c7:b0:27:89:89:fc:29:43:5b:00:50:c9:e4:
         88:3f:c7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org