Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa
File:                     3138392e32382e3137362e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          7n7jW3eqwhwVz8mibpiLUWAlfQHKP6hHM9vrV4tEiNQ=
Subject key identifier:   1F:6F:67:2E:FF:63:1E:E5:9A:74:AA:FF:51:5F:46:72:BD:36:C6:99
Certificate issuer:       /CN=18351F1F584DF1964127BF7A96A3BBD25F1990EC
Certificate serial:       53A259FF9A1C1EF595FA67D5AED55713DA894570
Authority key identifier: 18:35:1F:1F:58:4D:F1:96:41:27:BF:7A:96:A3:BB:D2:5F:19:90:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 25 May 2022 19:00:00 +0000
ROA not before:           Wed 25 May 2022 18:55:00 +0000
ROA not after:            Thu 25 May 2023 19:00:00 +0000
asID:                     28292
IP address blocks:        189.28.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a2:59:ff:9a:1c:1e:f5:95:fa:67:d5:ae:d5:57:13:da:89:45:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18351F1F584DF1964127BF7A96A3BBD25F1990EC
        Validity
            Not Before: May 25 18:55:00 2022 GMT
            Not After : May 25 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:fa:06:e3:82:eb:f9:32:36:00:26:ac:e4:
                    b7:54:af:ce:3e:ac:0f:70:cb:1c:12:d9:2a:da:43:
                    84:fc:69:a1:ad:65:02:07:f9:58:c3:ad:fd:f5:bc:
                    64:13:b9:d7:8e:eb:db:9d:38:28:8c:bb:9b:c4:95:
                    c5:bb:bb:86:c2:b0:f1:25:27:bc:9b:fc:f7:28:26:
                    9c:ad:82:64:b9:63:a6:c7:eb:b5:f5:71:f2:ee:0d:
                    9d:99:65:4f:84:5b:54:15:b0:ae:1b:38:fa:ac:a5:
                    dc:02:70:11:4f:6d:d0:ee:b5:44:08:39:47:52:0c:
                    83:21:21:4f:9b:4a:87:4d:9a:c2:41:0d:23:0d:d8:
                    2d:f1:37:92:fd:4b:10:cd:fa:c4:0a:6f:60:57:26:
                    02:98:2f:13:f1:74:ee:e1:10:57:37:72:94:16:f3:
                    ed:0a:43:b6:c5:36:58:a4:60:d6:c2:ad:5a:62:55:
                    6d:95:41:2c:1f:49:8e:65:ff:7d:3b:b3:d1:90:a9:
                    89:44:0d:03:ba:9a:5c:d3:33:de:02:fe:92:f4:45:
                    22:a4:7b:22:09:9a:9c:12:79:77:18:00:47:48:48:
                    b8:bf:b2:7b:37:34:fd:c0:13:6d:ca:b9:44:af:4a:
                    a6:89:20:bb:18:bd:ac:e3:ec:76:6c:94:64:b8:b3:
                    5f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6F:67:2E:FF:63:1E:E5:9A:74:AA:FF:51:5F:46:72:BD:36:C6:99
            X509v3 Authority Key Identifier:
                keyid:18:35:1F:1F:58:4D:F1:96:41:27:BF:7A:96:A3:BB:D2:5F:19:90:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:95:2e:aa:5a:e1:9f:2c:bf:c3:fa:8d:07:ce:44:e5:43:e4:
         4f:46:48:ce:12:e1:b4:1e:c0:f6:d2:c1:29:9d:9c:cc:b2:c8:
         38:26:51:2b:2d:21:55:9d:6f:4c:93:e4:5d:1e:c7:02:d1:b7:
         49:10:bd:44:f2:4c:df:e3:7c:e8:f4:63:a8:2a:42:81:98:78:
         25:a6:9c:00:47:16:99:69:97:4b:5a:50:d0:d2:49:6d:4b:9e:
         3d:a7:e9:e5:0e:38:b1:fb:e1:37:92:af:bb:c1:43:6a:ed:82:
         09:69:37:ab:ff:3f:0d:d7:92:8e:7e:7e:95:ff:13:99:09:60:
         eb:66:22:ce:fb:5b:b9:f1:70:42:a4:94:fe:8a:29:b9:6e:a3:
         5d:e4:25:37:ee:76:e7:a3:ed:93:00:71:4e:86:e6:65:12:bc:
         37:e5:ce:b3:bb:3e:7d:65:b2:8a:57:46:41:19:df:14:13:c2:
         eb:8e:56:ce:49:19:f8:87:95:bd:7e:f1:3a:6f:a0:7c:d3:08:
         82:c2:39:f8:1c:14:02:07:e7:4e:fb:0e:27:e7:42:49:5b:78:
         f5:a1:31:78:16:da:f8:5c:9f:72:aa:fa:3d:a3:a8:06:1d:98:
         09:d4:7f:39:9d:98:81:01:3f:1c:28:12:6d:9d:77:98:8d:8c:
         c3:6b:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org