Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa
File:                     3138392e32382e3137362e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          8rV5IlYQ2LVj5ESra0XI1uHcX9BJ8bm6ekv2HuGYcF4=
Subject key identifier:   5C:27:93:46:2A:13:7F:21:F6:34:8D:40:75:45:6E:CF:1E:D9:B5:36
Certificate issuer:       /CN=8893F0FF2FC76BC29138372DA9E7EBAB17DAF056
Certificate serial:       3FE8B7C80CF97955106F35572659B83D578D5F2C
Authority key identifier: 88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 17 Aug 2022 19:35:01 +0000
ROA not before:           Wed 17 Aug 2022 19:30:01 +0000
ROA not after:            Thu 17 Aug 2023 19:35:01 +0000
asID:                     28292
IP address blocks:        189.28.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e8:b7:c8:0c:f9:79:55:10:6f:35:57:26:59:b8:3d:57:8d:5f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8893F0FF2FC76BC29138372DA9E7EBAB17DAF056
        Validity
            Not Before: Aug 17 19:30:01 2022 GMT
            Not After : Aug 17 19:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:74:b9:62:93:49:55:0b:6a:ff:a2:cb:f2:
                    5b:71:dc:d9:6f:76:79:8d:7d:32:79:3e:fc:58:93:
                    ec:d9:d4:1a:db:98:a0:cc:ce:79:57:17:17:9d:d6:
                    8d:77:31:0d:ce:c2:b7:27:e0:d5:a0:c5:3a:7b:53:
                    11:60:6e:0a:ef:f4:fe:47:ee:27:05:a7:fe:cb:40:
                    df:37:21:81:86:59:78:0e:71:a3:90:a6:e2:94:0f:
                    47:8f:27:97:d5:2c:41:61:6e:96:48:c3:14:0e:d0:
                    c4:04:70:42:05:2e:e3:aa:1d:8f:15:6c:ed:59:d7:
                    a9:52:5b:de:2a:d6:4a:c3:93:08:22:b9:1b:e7:18:
                    82:61:c8:d5:ff:c2:95:5c:d6:59:03:c4:2b:65:55:
                    57:6d:86:f5:61:59:0b:c5:99:18:6d:a0:d3:cb:e1:
                    ac:a0:4e:c6:69:66:0c:81:1f:b7:49:99:50:46:4f:
                    98:fb:12:30:30:2a:9c:fb:48:ad:eb:67:5d:19:3f:
                    71:25:c1:f8:32:d9:cb:2d:c2:d9:83:f6:8e:a8:e5:
                    d3:a4:bb:fe:4d:8a:88:b2:c4:88:ae:12:02:6d:25:
                    e0:dc:a3:2b:1c:af:7d:d9:b1:f1:4a:94:3c:51:5c:
                    c3:fd:65:ff:3a:32:5f:2c:6e:08:2a:a9:bb:e9:7a:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:27:93:46:2A:13:7F:21:F6:34:8D:40:75:45:6E:CF:1E:D9:B5:36
            X509v3 Authority Key Identifier:
                keyid:88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:07:98:d4:67:e7:70:b7:d3:f2:2b:ef:09:f7:39:ee:0e:
         6b:4f:ef:d3:08:07:65:9b:74:79:67:b2:ff:2e:24:cf:78:ea:
         cc:17:9d:69:0c:b3:8c:a6:95:ae:6d:c4:69:b8:0c:60:cb:78:
         0f:6a:24:d3:9f:b7:15:c0:46:22:07:5e:92:6a:2b:d9:07:de:
         13:22:8e:fc:7c:b8:9e:ec:bb:13:ef:06:64:83:5b:9c:2d:b6:
         05:c9:22:6f:05:66:b8:8c:26:6c:1c:d8:a6:9d:0e:6d:6d:33:
         80:01:76:0e:c8:7f:95:06:c1:a4:d7:5a:07:72:60:f2:11:4f:
         c2:63:41:b3:83:cc:0d:06:e8:00:f9:fa:11:7e:f3:df:8c:ad:
         67:08:65:e7:20:d9:36:83:85:d8:b7:10:d7:92:cd:0f:bd:be:
         67:d8:b4:15:e7:bf:02:90:71:2a:b8:97:ca:ad:6a:b4:d8:07:
         31:b5:3c:21:18:19:ec:4c:22:86:7a:ce:62:59:34:de:98:0e:
         21:a3:81:e4:22:0d:d8:20:fd:23:1a:a0:12:f4:94:af:80:e2:
         c7:29:91:89:09:f1:e2:ed:c9:08:c9:3b:38:3c:a4:a5:62:87:
         e6:ef:c6:15:55:2a:e8:10:9f:6c:07:ff:33:be:ea:20:a7:18:
         eb:15:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org