Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa
File:                     3138392e3132372e33322e302f32302d3234203d3e203238323332.roa (raw, json)
Hash identifier:          vMBHUkyJ5hHT2EC3PdW2EzoAEDLwjPm5khC0RC6NCnM=
Subject key identifier:   33:33:84:43:23:F9:86:0C:EB:A9:81:7B:E5:61:06:B8:0A:87:5B:22
Certificate issuer:       /CN=9A6C850A6CFC6280C718D75F48315458AEB33DB5
Certificate serial:       1C8F7B9CCEADAF87614FD7E8A9B81813372D46E7
Authority key identifier: 9A:6C:85:0A:6C:FC:62:80:C7:18:D7:5F:48:31:54:58:AE:B3:3D:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa
Signing time:             Thu 21 Sep 2023 11:28:58 +0000
ROA not before:           Thu 21 Sep 2023 11:23:58 +0000
ROA not after:            Thu 19 Sep 2024 11:28:58 +0000
asID:                     28232
IP address blocks:        189.127.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8f:7b:9c:ce:ad:af:87:61:4f:d7:e8:a9:b8:18:13:37:2d:46:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6C850A6CFC6280C718D75F48315458AEB33DB5
        Validity
            Not Before: Sep 21 11:23:58 2023 GMT
            Not After : Sep 19 11:28:58 2024 GMT
        Subject: CN=3333844323F9860CEBA9817BE56106B80A875B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:a7:f8:91:4c:aa:30:0f:11:6a:7b:24:d0:
                    71:b3:d2:8c:a9:8d:0f:c1:dd:f3:ad:d2:44:48:73:
                    2a:8e:86:78:8c:8b:a1:f8:50:57:22:4f:55:e8:0b:
                    c5:11:5d:05:a0:c7:64:b6:83:35:46:42:3f:8f:22:
                    66:f4:99:6b:8e:08:3f:53:80:78:e9:d5:54:ba:10:
                    2c:a5:64:bc:53:d6:dc:97:2c:e1:21:39:67:41:6c:
                    78:a5:96:cb:92:f0:1a:c7:3a:5a:27:0d:8b:9e:5f:
                    2d:11:bc:6d:ab:df:4b:83:30:37:cf:8c:04:fc:dc:
                    18:c2:dc:db:48:62:2b:ce:b3:9f:0e:2a:0c:92:70:
                    2b:4a:f2:5a:de:0c:b1:f4:72:78:5e:ca:16:d7:6a:
                    eb:4e:87:6a:dd:ed:90:3e:95:b1:d7:83:73:68:31:
                    d8:5c:65:55:a4:25:fb:fb:77:57:14:5f:80:c2:b8:
                    73:c9:73:41:f1:e6:68:36:42:9c:98:c4:52:8c:49:
                    ca:14:4e:f9:8c:3c:f8:39:21:18:b7:48:aa:4c:48:
                    da:77:17:91:c0:ec:67:c1:61:86:07:9a:9d:b9:da:
                    b7:df:6d:75:24:3f:e4:13:0e:01:18:e9:87:9a:e5:
                    43:6f:5c:60:03:94:e3:13:28:02:b2:1f:ef:ae:75:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:33:84:43:23:F9:86:0C:EB:A9:81:7B:E5:61:06:B8:0A:87:5B:22
            X509v3 Authority Key Identifier:
                keyid:9A:6C:85:0A:6C:FC:62:80:C7:18:D7:5F:48:31:54:58:AE:B3:3D:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:a0:17:fe:a8:b3:10:3a:04:a9:8d:f4:31:88:54:5b:89:61:
         5b:3e:22:0e:f5:cd:ea:2a:81:3a:00:7b:44:e9:b7:4e:c7:4d:
         33:68:31:ae:24:d2:10:a3:34:92:bd:db:42:b5:dd:df:e9:8e:
         1f:74:e4:22:77:f7:43:ba:c0:04:a6:ba:7c:f0:fb:44:b0:ed:
         48:60:b2:9d:9d:a9:2f:13:f8:ca:de:14:6c:3a:56:4a:d1:bf:
         82:ed:1a:67:df:75:c2:ff:2b:2b:38:8b:77:6d:60:73:26:c7:
         55:ba:5d:d9:d5:06:c9:3f:97:fc:eb:a9:eb:8d:fb:a7:5b:d3:
         3c:31:84:57:a0:5f:0b:44:3b:15:aa:f0:06:87:56:04:39:96:
         20:ba:80:7d:a4:89:ff:e7:a1:18:aa:fb:d5:a6:75:18:6d:57:
         b1:e9:95:f0:1b:8d:67:23:12:09:0f:fd:d8:e6:c4:38:06:1f:
         8f:51:5a:70:e4:cc:7b:43:7a:1c:61:a7:b5:c3:1d:76:ba:b1:
         e9:c3:b8:26:b6:c9:e6:f3:da:2b:b5:a5:89:1c:ac:7b:a2:e9:
         e8:1a:a7:38:de:db:9a:9e:29:a2:3b:51:16:2c:18:95:2c:cf:
         22:d2:34:14:bd:5c:c4:c7:37:c5:07:19:39:cd:db:77:73:dd:
         ad:84:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org