Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133332e302f32342d3234203d3e20323730373031.roa
File:                     3138392e3132372e3133332e302f32342d3234203d3e20323730373031.roa (raw, json)
Hash identifier:          mpUvdPHEwQ7tRj8hJm1iBjeRueG+9vhRZ7zz7t6qCTM=
Subject key identifier:   85:D7:26:D4:B4:A9:18:B3:52:AC:A5:73:D0:4B:9E:87:57:E9:26:F4
Certificate issuer:       /CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
Certificate serial:       469E5D3035AEE600F595E1A60861F0E001B43CD3
Authority key identifier: 76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133332e302f32342d3234203d3e20323730373031.roa
Signing time:             Fri 19 Jan 2024 22:39:18 +0000
ROA not before:           Fri 19 Jan 2024 22:34:18 +0000
ROA not after:            Fri 17 Jan 2025 22:39:18 +0000
asID:                     270701
IP address blocks:        189.127.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9e:5d:30:35:ae:e6:00:f5:95:e1:a6:08:61:f0:e0:01:b4:3c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
        Validity
            Not Before: Jan 19 22:34:18 2024 GMT
            Not After : Jan 17 22:39:18 2025 GMT
        Subject: CN=85D726D4B4A918B352ACA573D04B9E8757E926F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c0:39:c4:ac:f9:64:ba:74:9f:e0:11:94:a1:
                    20:b7:5a:53:af:c1:3a:38:2b:60:13:20:dd:88:db:
                    1e:92:88:86:a1:39:d6:15:31:5d:12:1f:3b:c2:d7:
                    53:0a:e8:6f:86:59:62:6c:35:06:e2:88:85:0f:ee:
                    35:be:a3:ce:d6:8b:db:3a:45:53:68:42:be:67:c1:
                    79:c3:af:62:3b:37:73:8f:c3:dd:2d:99:19:92:99:
                    9d:9c:73:f2:b8:b5:ed:a8:bd:ce:f4:af:56:db:b1:
                    15:18:d6:47:f1:48:2f:de:6e:19:19:61:6e:14:2a:
                    30:b5:ea:bc:37:6a:9c:c2:0b:13:9a:6d:72:d1:b5:
                    fe:40:96:71:59:0c:fb:88:40:50:87:9e:d4:36:27:
                    a8:97:ac:b1:1a:da:d3:94:39:92:67:56:a5:90:cf:
                    55:09:b3:5e:4c:99:18:2e:dc:fb:07:23:cb:eb:81:
                    d9:67:b1:f3:de:f2:38:2b:1d:30:63:79:c3:09:77:
                    cf:71:70:9f:79:6b:23:2d:9d:e5:00:28:21:dc:22:
                    e5:fd:27:6c:23:24:2a:7e:3b:e4:e1:a1:3b:f7:98:
                    06:c5:b1:fd:8f:e9:43:66:9a:89:3f:1a:50:3b:c4:
                    67:2c:41:dd:39:57:74:e0:a0:b2:2d:cc:ba:f4:06:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D7:26:D4:B4:A9:18:B3:52:AC:A5:73:D0:4B:9E:87:57:E9:26:F4
            X509v3 Authority Key Identifier:
                keyid:76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133332e302f32342d3234203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:3d:eb:6b:94:72:72:43:90:fa:cf:72:eb:d8:8b:a6:ba:a6:
         d2:ac:3e:b5:b1:d1:1b:77:c7:c6:9c:ae:f7:cc:ae:24:86:06:
         1e:b0:a7:44:6d:3a:24:9c:7e:b7:bb:87:bb:f6:3e:40:12:0a:
         17:0c:14:7f:ba:fc:cf:2f:55:ca:96:9a:d5:4b:48:71:c2:74:
         41:e5:26:79:5a:0f:6e:bb:31:95:ba:85:fe:00:a6:e8:17:ae:
         f9:fb:83:69:d4:e0:96:5d:82:a7:14:10:fe:9f:51:40:81:89:
         87:10:b1:bd:a9:64:84:70:6f:ba:f6:a7:06:98:f6:cc:e4:5f:
         1a:2d:7d:8a:69:60:25:1d:b0:33:4e:2f:11:b0:fd:54:6c:da:
         00:e7:43:e1:69:0f:e3:a7:3f:fc:26:c8:a5:02:3c:c3:0f:d8:
         f1:57:4f:c0:5a:d0:9b:c9:07:3e:ad:76:17:af:34:8e:c3:dc:
         c1:f9:95:68:8d:f1:70:75:48:91:2a:68:20:f9:06:51:6c:cb:
         68:a8:1a:b0:e5:84:66:53:4f:5b:44:d7:fc:d3:9c:eb:f4:68:
         8f:65:b8:7a:16:2a:be:f1:66:fb:d4:61:2f:40:20:3b:6b:e5:
         fc:96:59:d5:06:0c:08:e0:c8:b1:5c:72:42:9e:eb:a7:c3:bd:
         13:ab:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org