Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32332d3233203d3e20323730373031.roa
File:                     3138392e3132372e3133342e302f32332d3233203d3e20323730373031.roa (raw, json)
Hash identifier:          aSfzAMw4vstjUB9/D0+jug0KNqTB8U/IbWqeZImdLrw=
Subject key identifier:   27:36:79:35:4E:2C:E0:27:EE:40:9A:09:1E:C2:60:E2:16:96:B7:3A
Certificate issuer:       /CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
Certificate serial:       327E18DC8FFAC461C486E736152FDFBFEA13C7F4
Authority key identifier: 76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32332d3233203d3e20323730373031.roa
Signing time:             Fri 19 Jan 2024 22:39:21 +0000
ROA not before:           Fri 19 Jan 2024 22:34:21 +0000
ROA not after:            Fri 17 Jan 2025 22:39:21 +0000
asID:                     270701
IP address blocks:        189.127.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7e:18:dc:8f:fa:c4:61:c4:86:e7:36:15:2f:df:bf:ea:13:c7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
        Validity
            Not Before: Jan 19 22:34:21 2024 GMT
            Not After : Jan 17 22:39:21 2025 GMT
        Subject: CN=273679354E2CE027EE409A091EC260E21696B73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:54:11:93:f2:db:50:01:ef:30:bc:98:fd:
                    85:89:f3:ec:2b:08:07:10:94:e8:96:10:63:92:65:
                    b4:60:97:c6:77:6f:4e:22:a9:ca:e0:3c:c3:f7:ca:
                    a0:68:70:7f:44:bc:b2:6a:0c:f3:ad:43:97:78:50:
                    38:f3:3a:03:10:46:8f:09:8f:60:86:90:f4:1a:45:
                    27:4a:34:15:db:f4:ff:52:28:36:8f:c9:98:93:19:
                    b0:d1:38:16:42:40:ec:6a:94:d0:c7:55:23:6b:75:
                    f9:d5:83:2e:7c:f0:19:68:17:6c:e1:57:9f:19:93:
                    e8:2b:5e:03:c0:2b:8b:fc:71:8c:86:11:93:20:ca:
                    1a:5e:aa:dd:bf:15:25:98:c2:11:e7:07:5f:12:87:
                    10:86:3e:72:b9:08:d2:2e:88:2d:c0:cc:1e:f4:cd:
                    17:83:cd:2a:49:04:72:18:6a:e7:ae:12:82:2e:a6:
                    5b:15:ef:e6:aa:09:a5:82:54:87:b1:8c:32:2d:9e:
                    a8:6d:40:ff:3e:7d:27:0c:b4:dc:af:ec:14:2f:6f:
                    39:3c:ac:35:25:3b:a9:ac:6d:3d:f2:ae:97:fd:6e:
                    97:96:34:6f:d8:84:e6:f0:b1:46:13:31:13:67:21:
                    b6:40:b2:bd:12:90:f8:a9:07:2e:06:46:17:d5:e8:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:79:35:4E:2C:E0:27:EE:40:9A:09:1E:C2:60:E2:16:96:B7:3A
            X509v3 Authority Key Identifier:
                keyid:76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133342e302f32332d3233203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:f9:d1:57:c1:7d:30:7b:d8:d3:c9:63:92:1b:32:dd:9c:
         18:a9:3b:f7:2d:9f:15:e8:5d:7f:bf:11:81:a1:30:a0:dd:9e:
         32:82:96:20:b8:ec:16:7d:8e:22:bf:95:db:80:79:26:6f:bb:
         3b:5b:81:b7:43:f8:18:34:47:35:bf:30:63:2f:58:8d:e3:2b:
         a5:8d:bf:4c:0e:26:a5:b9:b9:39:f0:63:08:e2:1e:1f:bf:30:
         b2:f4:01:8f:35:b0:cc:01:41:3c:ae:a7:3f:ec:f1:b8:4a:6d:
         97:52:7b:65:ec:18:0c:73:0f:8a:ce:9e:21:87:7b:21:92:38:
         6b:b8:32:9f:a1:ce:d4:ae:46:04:8a:24:88:2a:c1:49:fc:e6:
         2c:8a:3c:fb:0a:6f:45:0a:98:a2:d7:e2:47:fa:fa:73:c5:0b:
         04:00:fb:01:4f:99:e9:e5:cc:11:08:4a:2b:a3:78:40:b3:db:
         b1:0a:83:9a:13:2b:4c:48:9c:27:d5:7c:d1:2b:54:69:4e:14:
         2f:cb:06:e1:58:f9:24:b5:24:a8:0d:ce:fd:93:a6:d2:a7:20:
         9c:04:52:4b:b6:f2:80:1a:c0:10:e7:5f:f4:47:c7:fd:bd:ce:
         10:89:59:74:7b:4a:c9:70:64:c5:cb:09:9d:6b:0d:74:3d:21:
         87:3a:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org