Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138392e3132362e34382e302f32302d3234203d3e203238323234.roa
File:                     3138392e3132362e34382e302f32302d3234203d3e203238323234.roa (raw, json)
Hash identifier:          kfJIDNY3QD1mqIdvI1pytbb4WnwA2Dv43bxv1jfvR1Q=
Subject key identifier:   0F:4B:BA:7D:09:A5:C3:D7:01:F4:97:42:79:22:12:9D:2E:51:7D:AF
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       7CF686DE4F079CE1A4164286C4DAA1B9094B14A5
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138392e3132362e34382e302f32302d3234203d3e203238323234.roa
Signing time:             Wed 21 Dec 2022 17:16:50 +0000
ROA not before:           Wed 21 Dec 2022 17:11:50 +0000
ROA not after:            Wed 20 Dec 2023 17:16:50 +0000
asID:                     28224
IP address blocks:        189.126.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f6:86:de:4f:07:9c:e1:a4:16:42:86:c4:da:a1:b9:09:4b:14:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:50 2022 GMT
            Not After : Dec 20 17:16:50 2023 GMT
        Subject: CN=0F4BBA7D09A5C3D701F497427922129D2E517DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:89:a2:10:14:ce:db:29:19:f8:02:fe:d4:
                    62:23:7a:26:22:79:47:c0:56:34:8d:e4:67:73:b4:
                    a3:e5:9f:c5:36:b6:21:4a:37:b7:95:5d:48:9e:c7:
                    9a:df:4b:7f:ac:14:74:7b:08:80:c6:58:c4:3e:68:
                    03:98:ce:1f:7b:b8:c5:df:ea:0d:00:da:b0:7c:77:
                    e3:74:2a:9d:7d:9a:ac:92:c8:d5:08:e5:cc:33:ed:
                    98:e6:63:74:92:5f:e7:b2:f9:32:99:a3:da:ba:a5:
                    a8:73:17:44:8c:42:60:c7:c9:f6:ac:fe:d0:1b:98:
                    74:d5:09:35:c9:48:a9:92:d5:49:d9:f5:1e:c5:e7:
                    42:ee:a3:98:17:ed:6d:61:23:67:28:41:59:b6:25:
                    74:23:d9:21:6a:50:6c:bd:98:0e:7a:5c:08:cd:17:
                    ac:f7:9b:d0:33:85:0e:e6:ae:c8:e9:39:72:84:1a:
                    ba:9c:2d:71:00:ce:b5:56:e1:64:4b:c9:9d:08:e1:
                    c3:07:d4:52:c0:d5:72:66:79:49:2d:aa:cd:51:db:
                    f9:bc:67:33:33:0d:5d:8f:c3:5e:9c:6a:78:0d:49:
                    ab:8a:b0:ff:f5:9c:35:29:98:fc:71:49:0c:41:03:
                    ac:5c:3d:47:92:e2:23:95:b8:97:af:e3:98:51:23:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4B:BA:7D:09:A5:C3:D7:01:F4:97:42:79:22:12:9D:2E:51:7D:AF
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138392e3132362e34382e302f32302d3234203d3e203238323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:66:4a:47:8b:fd:d4:db:e8:17:14:e0:61:ee:21:f4:01:
         cf:3c:e1:4b:fc:7c:0a:cc:1c:ff:66:bf:48:82:7c:ae:ed:92:
         e9:22:a4:31:69:66:3b:b6:b7:61:40:8c:f5:f6:b6:ea:a7:ba:
         1f:57:c0:d2:f6:a9:d1:5c:3e:02:02:0f:04:c3:44:47:b7:b8:
         87:cb:c4:d4:f6:cd:45:21:ee:31:ab:56:73:e0:9b:15:c9:be:
         1f:00:80:e4:86:32:36:89:3b:4c:b8:77:79:4a:75:2c:2e:cc:
         55:e2:46:cc:07:8e:1f:e8:48:54:b9:91:d1:c5:de:60:94:41:
         cb:1d:3e:52:3b:93:65:4a:c5:b6:cc:a3:04:a5:46:3d:3c:43:
         ed:ef:81:4e:95:77:20:66:06:c2:1b:3f:f1:cc:bd:51:c0:3a:
         8f:a2:89:7f:32:56:e6:32:76:e1:5f:3b:b9:d2:9a:08:c7:91:
         d7:0b:dd:d3:1b:ee:e6:ed:8e:55:c5:41:8c:0e:19:9f:be:80:
         8c:e4:0b:29:10:97:4f:88:d3:61:79:ca:b2:f1:6f:a8:26:74:
         dd:5d:fe:d8:ea:10:87:12:02:19:32:14:51:99:50:71:63:4b:
         52:c5:7e:03:90:87:02:48:fe:27:e4:9f:f5:ff:41:3a:68:a4:
         7e:b3:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org