Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133352e302f32342d3234203d3e20323730373031.roa
File:                     3138392e3132372e3133352e302f32342d3234203d3e20323730373031.roa (raw, json)
Hash identifier:          4MhdEOow/dZ/Tv0SgXD82+UPa/WWeoACpeT88UaIUCQ=
Subject key identifier:   54:E7:0D:15:CC:9E:83:C2:82:0A:40:76:23:F1:ED:47:6D:4B:94:F3
Certificate issuer:       /CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
Certificate serial:       462CF16EF83736F9AA965CC77FC5C7259D30F939
Authority key identifier: 76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133352e302f32342d3234203d3e20323730373031.roa
Signing time:             Fri 19 Jan 2024 22:39:27 +0000
ROA not before:           Fri 19 Jan 2024 22:34:27 +0000
ROA not after:            Fri 17 Jan 2025 22:39:27 +0000
asID:                     270701
IP address blocks:        189.127.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2c:f1:6e:f8:37:36:f9:aa:96:5c:c7:7f:c5:c7:25:9d:30:f9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
        Validity
            Not Before: Jan 19 22:34:27 2024 GMT
            Not After : Jan 17 22:39:27 2025 GMT
        Subject: CN=54E70D15CC9E83C2820A407623F1ED476D4B94F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:eb:b7:8f:53:38:4c:80:85:c4:27:62:b2:1a:
                    0e:eb:40:5f:c8:63:da:98:da:6d:51:d8:b1:2e:f5:
                    a1:28:df:ea:b7:86:e2:44:c4:3c:fc:85:46:90:c5:
                    ed:70:02:05:6f:e3:47:35:3a:e1:c9:b0:82:f2:3d:
                    5e:98:80:88:60:5e:b0:47:09:c5:6c:aa:13:c8:50:
                    ab:91:f0:1a:7a:ac:99:b2:11:51:79:f8:9a:68:f7:
                    1d:c7:07:db:09:8d:9e:0f:7f:7f:98:f1:c7:f3:fb:
                    66:bb:15:00:a4:fe:85:93:f5:66:06:44:47:9b:9c:
                    39:66:b5:a7:29:e7:52:2d:63:15:17:82:74:ea:5d:
                    d8:84:03:ab:43:df:73:2f:74:91:1f:2e:41:58:4d:
                    b4:61:5b:74:06:05:4f:23:b5:d0:a1:44:3e:81:e8:
                    96:7b:f9:d2:8b:9e:fa:a5:88:68:f7:b5:cc:64:dd:
                    6b:be:9d:98:f0:9f:6f:9f:8c:eb:71:8f:bc:ae:44:
                    62:2b:d9:4d:92:59:05:6f:4d:41:10:ea:ac:b2:6e:
                    f9:eb:bd:f8:c7:0b:cb:27:b8:6d:24:ff:5b:7c:19:
                    70:7d:a0:89:b6:cc:a9:01:f1:3d:28:e8:02:6c:ac:
                    54:7c:70:71:07:73:93:c4:31:9f:07:04:97:ab:6a:
                    d5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E7:0D:15:CC:9E:83:C2:82:0A:40:76:23:F1:ED:47:6D:4B:94:F3
            X509v3 Authority Key Identifier:
                keyid:76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/3138392e3132372e3133352e302f32342d3234203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:cd:f6:c7:0e:eb:d5:0e:b2:3a:db:33:94:a1:d5:4a:61:64:
         d3:4d:d9:2b:12:d4:d2:33:a2:72:8b:5a:ba:30:8f:53:96:c1:
         fe:51:1e:1f:4e:47:7c:ae:04:43:63:c3:45:67:72:39:8d:4d:
         e1:11:01:63:c7:ae:66:28:b1:8e:3f:a4:f9:11:95:dc:d2:47:
         62:f7:a4:da:9d:3f:b8:28:55:5a:53:07:52:d4:b1:5d:7b:f6:
         bb:c1:dc:aa:d9:09:5b:c7:42:a4:e2:95:b6:52:da:51:c4:5c:
         8b:25:56:af:35:ce:bc:60:ad:2c:8e:68:7c:19:19:a0:6f:22:
         b7:d6:04:e7:db:60:7a:bb:e7:30:29:67:25:04:6d:6b:a1:78:
         d2:fe:7b:42:25:8b:81:18:ed:ff:ce:13:3f:db:42:97:cd:15:
         52:d5:fa:cc:80:1b:63:e5:e1:fb:b5:10:89:c7:f2:53:ae:73:
         82:64:fb:5c:48:9f:ec:52:e9:c9:7b:5b:b7:5e:29:d6:7c:41:
         54:4b:f1:a4:3b:3f:a9:af:17:1f:4e:56:4f:55:53:2d:18:9d:
         e8:30:a5:a9:5e:4b:7a:49:e6:5b:e0:6e:9a:fe:27:63:23:e1:
         62:e6:0e:9c:04:c0:e2:c5:1e:64:72:83:5b:61:9f:c8:9d:b3:
         83:69:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org