Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/3138392e3132342e31362e302f32302d3234203d3e203238323139.roa
File:                     3138392e3132342e31362e302f32302d3234203d3e203238323139.roa (raw, json)
Hash identifier:          SrPm1S29w9KNGObRUo6E8vZRIf6zvF/2u6uG42X/Hck=
Subject key identifier:   D6:71:C3:9D:FA:33:5C:9D:D7:D7:88:74:85:8A:2B:B1:DF:33:62:93
Certificate issuer:       /CN=D3FE378BD4E7B3E9AF1C47D245624178DC4E9709
Certificate serial:       46B2B0D08201C19BBBB805728658FFDA231754A8
Authority key identifier: D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/3138392e3132342e31362e302f32302d3234203d3e203238323139.roa
Signing time:             Fri 08 Dec 2023 13:39:55 +0000
ROA not before:           Fri 08 Dec 2023 13:34:55 +0000
ROA not after:            Fri 06 Dec 2024 13:39:55 +0000
asID:                     28219
IP address blocks:        189.124.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b2:b0:d0:82:01:c1:9b:bb:b8:05:72:86:58:ff:da:23:17:54:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FE378BD4E7B3E9AF1C47D245624178DC4E9709
        Validity
            Not Before: Dec  8 13:34:55 2023 GMT
            Not After : Dec  6 13:39:55 2024 GMT
        Subject: CN=D671C39DFA335C9DD7D78874858A2BB1DF336293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:f9:f1:41:0f:89:3c:78:f9:b8:41:b7:40:
                    2a:0e:a9:71:a7:37:55:10:31:77:0d:21:25:1b:0f:
                    f9:fe:b7:d3:fd:8f:2e:bc:8e:63:5a:c9:eb:f6:66:
                    ee:1b:94:51:38:a2:13:ee:19:b4:75:e1:dd:ad:12:
                    3a:b1:91:75:ea:9d:ac:cd:45:6e:40:d1:06:a6:6c:
                    ba:11:b6:6c:ef:e9:d0:35:f4:99:f2:4b:13:15:71:
                    a5:59:56:3e:bc:d2:7d:21:c6:bd:9a:69:df:94:5c:
                    3b:74:59:46:7c:c3:b2:19:91:88:cc:9f:17:df:c1:
                    f5:cb:90:95:3d:cf:2e:d9:38:47:7d:02:3c:d0:0f:
                    42:c1:ba:27:2a:6c:80:f8:a1:cf:54:fd:18:af:ea:
                    db:a9:79:83:e7:ea:69:e1:be:7e:6d:df:75:13:37:
                    e7:65:69:49:09:e3:d4:67:3b:45:a8:7b:34:c7:91:
                    29:0b:0a:8c:5c:dd:62:86:56:0a:52:45:85:84:23:
                    dd:51:39:76:b5:91:7d:03:3f:e9:1e:9e:95:43:8a:
                    ed:63:fd:09:53:4f:90:db:ca:92:bb:04:8d:f5:7c:
                    2c:85:83:f6:ff:4f:5d:b2:7e:b7:d0:f7:cf:5e:be:
                    de:8d:25:6d:c8:49:7b:d0:b9:3f:40:24:23:fe:ab:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:71:C3:9D:FA:33:5C:9D:D7:D7:88:74:85:8A:2B:B1:DF:33:62:93
            X509v3 Authority Key Identifier:
                keyid:D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/3138392e3132342e31362e302f32302d3234203d3e203238323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:da:48:0b:be:96:22:2f:8c:51:c4:c0:18:02:8d:77:08:4b:
         11:82:d9:1a:c1:82:75:c5:f6:27:c4:52:05:94:d0:de:74:38:
         2e:ac:11:e9:7c:aa:50:59:95:d5:ce:32:6c:17:7f:bd:f4:7d:
         13:76:2b:71:fb:d6:f0:bc:64:0d:11:e5:63:e6:3a:63:de:a3:
         bc:43:a7:03:43:74:8a:d1:66:ea:cc:2a:67:b6:bd:73:ac:12:
         97:1b:39:11:db:bf:f0:93:93:8b:ed:e2:20:99:a9:60:d2:56:
         1f:fa:7f:93:35:81:c7:12:c9:9e:ac:4c:8b:38:1f:38:ae:a4:
         06:d5:90:cf:99:56:1c:21:07:e5:bc:25:5c:a0:f1:67:b3:53:
         c4:d5:e8:ce:43:7d:0c:d9:68:0e:1e:80:6e:02:bb:9b:45:f3:
         6a:10:08:4c:77:0c:c4:60:ca:13:be:46:ea:59:7c:69:09:9c:
         da:a5:31:58:7a:8d:95:5a:7b:3b:6d:cd:86:aa:ef:87:b4:54:
         c3:40:88:64:31:96:4e:b7:bb:61:af:35:cf:84:20:8c:8a:34:
         b6:b8:27:cf:48:b3:8f:6b:83:ca:c4:51:00:0e:d7:65:36:af:
         80:24:3f:e7:2c:ee:ae:a9:62:8d:e8:74:77:ed:11:92:50:04:
         ef:65:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org