Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32332d3233203d3e20323730373031.roa
File:                     3138392e3132372e3133322e302f32332d3233203d3e20323730373031.roa (raw, json)
Hash identifier:          fwcbjMQqarQcp7lbar4TpcTbpNpHEtexMlnUg9EjBck=
Subject key identifier:   B3:20:4C:44:35:E6:05:CC:17:3F:44:20:16:A4:C7:FB:2D:70:C7:58
Certificate issuer:       /CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
Certificate serial:       3DDD6A1D4CBA4297411BF1861EF46B74EFFD691A
Authority key identifier: 76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32332d3233203d3e20323730373031.roa
Signing time:             Fri 19 Jan 2024 22:39:08 +0000
ROA not before:           Fri 19 Jan 2024 22:34:08 +0000
ROA not after:            Fri 17 Jan 2025 22:39:08 +0000
asID:                     270701
IP address blocks:        189.127.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dd:6a:1d:4c:ba:42:97:41:1b:f1:86:1e:f4:6b:74:ef:fd:69:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
        Validity
            Not Before: Jan 19 22:34:08 2024 GMT
            Not After : Jan 17 22:39:08 2025 GMT
        Subject: CN=B3204C4435E605CC173F442016A4C7FB2D70C758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:58:c2:e8:b7:de:46:ff:db:f6:d1:7b:71:
                    16:25:88:6a:8d:b3:35:73:c3:80:d6:6f:c1:63:d4:
                    73:48:de:6e:ff:9e:cd:99:76:78:df:02:f0:d6:ad:
                    2e:eb:ab:2d:c3:c4:2a:9c:48:d4:47:ad:7b:22:9b:
                    8e:28:94:6a:2e:63:e7:7c:f3:9c:40:b3:20:3b:26:
                    12:9c:cb:86:0d:0c:23:fb:0f:2c:05:33:33:54:ce:
                    03:8c:ce:dc:22:6e:b4:2b:91:c7:97:eb:71:b7:99:
                    3f:5e:ea:d8:6c:f6:8a:51:cb:fb:ed:b6:f9:65:5b:
                    9e:88:59:95:70:9d:65:1c:a3:f2:00:4c:a7:76:a1:
                    8d:08:14:57:c7:67:d7:8a:96:de:eb:cb:48:a5:f0:
                    29:88:79:87:a0:90:79:18:25:ef:c4:ce:01:08:ee:
                    ec:8e:a3:9a:f8:71:ff:3e:5c:21:8b:f5:a4:db:21:
                    95:3d:4f:38:2e:d1:fa:3f:8b:b5:97:00:21:ee:f5:
                    76:9d:ef:58:96:13:80:7d:74:90:31:7b:6d:92:28:
                    86:96:ae:d8:01:dd:b4:c2:08:8c:6d:04:69:7a:0a:
                    29:fe:88:df:78:f9:ed:1c:a2:66:23:6d:ce:85:7c:
                    0d:7e:14:d4:f1:7f:df:9b:0f:5e:88:27:51:87:47:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:20:4C:44:35:E6:05:CC:17:3F:44:20:16:A4:C7:FB:2D:70:C7:58
            X509v3 Authority Key Identifier:
                keyid:76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133322e302f32332d3233203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:f2:dc:92:7e:4b:da:08:2c:7b:77:d8:c5:0a:e2:ac:c5:e0:
         9d:c7:f3:60:34:52:db:b8:0f:7d:c7:9c:25:7b:0f:a0:f9:fb:
         15:6e:04:78:e1:d3:6c:1f:6d:44:c1:f9:56:6a:d3:25:da:13:
         47:52:6b:47:a0:1d:75:cb:e2:da:cd:3e:eb:d7:b9:aa:91:03:
         08:b0:2e:f6:85:21:b5:4d:df:f9:5d:1f:a1:5a:1b:b8:1e:fb:
         9b:da:6b:ce:e3:de:54:93:0c:ef:e1:7e:79:a5:8c:bf:0d:9b:
         36:51:eb:0c:11:8d:e1:3d:14:7f:c6:20:c1:61:5a:4d:6e:ce:
         13:2b:80:ae:e9:95:ce:0a:97:b9:d4:3d:ec:8a:be:f6:7b:91:
         fa:c6:20:9b:93:76:d9:d1:e4:0a:77:2c:4a:97:9f:6f:04:c9:
         5e:bf:93:e7:ec:ac:20:b7:c5:a4:2e:4f:a6:ab:a2:0a:e3:2d:
         bc:52:78:6d:d1:39:f9:92:ea:9b:44:8f:bd:0f:e5:e1:5e:de:
         8d:8c:74:e2:77:9e:24:2c:bf:ee:a1:10:91:04:59:a7:8c:27:
         c8:7f:3a:26:b8:0a:de:bd:14:fc:0b:66:b6:80:fa:03:bc:d8:
         fd:85:71:91:fc:14:5f:7e:ff:e7:03:09:62:ab:42:69:88:4a:
         77:1b:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org