Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cevt3JWrFyeQEZzWp1PGZ8pK4S7qikNHztgRbvZ5d8G/0/3138392e312e38302e302f32302d3234203d3e203238363634.roa
File:                     3138392e312e38302e302f32302d3234203d3e203238363634.roa (raw, json)
Hash identifier:          TyQJEJiQRmWDnCLC0Hq1bSt3jorbG8DrbFWtUiiJnLo=
Subject key identifier:   08:8F:37:3B:17:7B:13:3C:C1:2A:B2:BF:99:13:57:14:8E:62:C8:79
Certificate issuer:       /CN=8396C5EBF0E18A654027DEEAA33F82D68A8F8504
Certificate serial:       19743D7D6873A5C4C169A4BD2C4C9A5A53470967
Authority key identifier: 83:96:C5:EB:F0:E1:8A:65:40:27:DE:EA:A3:3F:82:D6:8A:8F:85:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8396C5EBF0E18A654027DEEAA33F82D68A8F8504.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cevt3JWrFyeQEZzWp1PGZ8pK4S7qikNHztgRbvZ5d8G/0/3138392e312e38302e302f32302d3234203d3e203238363634.roa
Signing time:             Wed 12 Jul 2023 21:18:25 +0000
ROA not before:           Wed 12 Jul 2023 21:13:25 +0000
ROA not after:            Wed 10 Jul 2024 21:18:25 +0000
asID:                     28664
IP address blocks:        189.1.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:74:3d:7d:68:73:a5:c4:c1:69:a4:bd:2c:4c:9a:5a:53:47:09:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8396C5EBF0E18A654027DEEAA33F82D68A8F8504
        Validity
            Not Before: Jul 12 21:13:25 2023 GMT
            Not After : Jul 10 21:18:25 2024 GMT
        Subject: CN=088F373B177B133CC12AB2BF991357148E62C879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:b3:47:6f:14:3b:87:19:30:c6:f9:3a:9b:
                    af:45:88:27:34:8e:cb:7a:af:fd:d5:e8:32:8a:13:
                    80:eb:63:35:d6:9d:50:89:b7:80:93:f8:8c:47:f4:
                    1c:08:9f:18:be:2d:96:d2:37:32:b7:af:23:58:ac:
                    18:69:c7:a0:81:74:17:dd:11:79:bb:c0:66:cf:f9:
                    08:3d:c6:f1:ce:45:f9:b0:39:55:c7:e1:69:55:17:
                    da:4c:56:0e:de:4c:d7:20:34:e8:38:39:dc:41:97:
                    f1:ee:52:f2:44:3e:e1:0c:58:1b:7c:3a:21:9d:4f:
                    85:47:de:7e:7d:e7:8e:90:6f:08:7a:0b:1c:7e:25:
                    b8:5b:a0:fd:3e:66:44:7f:8c:0a:08:9b:21:41:19:
                    58:11:d8:83:ff:5d:c6:f6:12:60:11:2b:d9:72:11:
                    ea:5c:e8:f7:ba:b0:d2:7b:e5:c8:49:96:0a:fa:8d:
                    42:9d:1d:23:0a:7c:2b:b0:ab:78:92:9d:8f:ce:3b:
                    ec:c4:d9:92:a7:bf:44:20:a4:48:ec:3f:88:6a:1b:
                    ce:43:23:e7:cc:1e:46:81:2a:80:4c:5f:9d:f6:76:
                    b5:f1:ab:6d:14:73:54:4e:01:4d:c7:37:2a:bf:dd:
                    aa:b3:3f:69:bb:28:e6:ab:70:d7:f3:2e:a4:3f:db:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8F:37:3B:17:7B:13:3C:C1:2A:B2:BF:99:13:57:14:8E:62:C8:79
            X509v3 Authority Key Identifier:
                keyid:83:96:C5:EB:F0:E1:8A:65:40:27:DE:EA:A3:3F:82:D6:8A:8F:85:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cevt3JWrFyeQEZzWp1PGZ8pK4S7qikNHztgRbvZ5d8G/0/8396C5EBF0E18A654027DEEAA33F82D68A8F8504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8396C5EBF0E18A654027DEEAA33F82D68A8F8504.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cevt3JWrFyeQEZzWp1PGZ8pK4S7qikNHztgRbvZ5d8G/0/3138392e312e38302e302f32302d3234203d3e203238363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:f7:0a:0d:34:af:c2:7c:87:03:f6:3f:0d:3a:61:d9:75:9e:
         15:a5:85:98:bd:ef:79:3d:89:78:ca:7f:45:38:95:1b:1f:5b:
         50:57:4f:47:45:eb:d7:4b:64:03:93:b1:50:64:32:46:25:ad:
         10:11:a8:06:c1:e4:77:32:1f:6b:d2:1a:13:8e:02:66:76:b9:
         51:89:1f:2f:d1:17:5b:4e:c4:40:37:a5:22:1e:56:67:a9:9b:
         04:ff:99:4e:e8:ec:56:4f:a6:67:f9:5c:5f:ae:22:da:a5:f1:
         89:cb:19:9e:43:fc:7b:4f:e4:61:00:ff:7e:c6:d0:40:19:44:
         51:b2:91:3f:5c:93:4c:c9:cd:9c:ce:69:82:c2:63:f1:12:6d:
         58:f5:62:61:32:7b:19:77:63:d4:4e:ab:0c:5f:cd:da:4f:c1:
         25:17:e2:4a:4d:d0:35:e2:d6:24:dc:a0:e6:f0:af:d4:6c:4b:
         32:03:97:f2:bc:77:26:44:f3:ce:c8:6c:9b:58:f9:d8:5e:98:
         f1:02:04:ce:a5:be:04:e2:d1:45:93:a0:f2:ed:bd:cf:2e:bf:
         b6:e5:56:80:be:07:bf:f1:ce:fc:40:82:d0:72:6c:2b:66:29:
         6e:1c:ca:b7:63:a5:37:95:8f:c1:78:2f:a4:0d:13:b3:27:51:
         a2:45:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org