Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3138392e38392e3132382e302f31382d3234203d3e203238313836.roa
File:                     3138392e38392e3132382e302f31382d3234203d3e203238313836.roa (raw, json)
Hash identifier:          MbX9Qq4LTgWRUZ8Ru6MwyB278QtA7VqVZ2O9zk7qP/8=
Subject key identifier:   E8:C7:E2:67:A2:4A:19:3F:54:F3:90:D1:5B:BC:0B:2E:09:0B:37:66
Certificate issuer:       /CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
Certificate serial:       7C56EDB64F7FD971CEC110B4B1C11C722BBABE65
Authority key identifier: 89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3138392e38392e3132382e302f31382d3234203d3e203238313836.roa
Signing time:             Wed 22 Nov 2023 19:53:40 +0000
ROA not before:           Wed 22 Nov 2023 19:48:40 +0000
ROA not after:            Wed 20 Nov 2024 19:53:40 +0000
asID:                     28186
IP address blocks:        189.89.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:56:ed:b6:4f:7f:d9:71:ce:c1:10:b4:b1:c1:1c:72:2b:ba:be:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
        Validity
            Not Before: Nov 22 19:48:40 2023 GMT
            Not After : Nov 20 19:53:40 2024 GMT
        Subject: CN=E8C7E267A24A193F54F390D15BBC0B2E090B3766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:81:2b:42:55:4d:d1:51:f7:cd:ba:1d:af:
                    d7:25:39:f6:5c:cd:9b:3a:6c:6e:8f:34:7a:7e:cf:
                    ce:f8:da:e0:01:18:91:a5:fa:14:66:a8:49:5d:58:
                    b1:c4:a1:23:26:c2:3f:db:2e:45:f6:a6:c1:f2:19:
                    5c:f2:9a:76:e3:a9:69:ed:ff:9a:a4:a0:fb:bb:75:
                    8f:b4:f3:78:e7:a4:ea:51:ee:8d:2d:b6:fe:0f:89:
                    31:2a:16:d7:fc:c4:2c:72:28:4d:ad:d0:1f:86:cf:
                    21:54:ad:ab:c9:84:ca:7b:1d:33:59:18:65:46:ba:
                    02:11:7d:64:7c:02:80:74:cb:6a:d4:86:fa:6e:28:
                    8f:23:60:c2:be:f2:88:03:11:46:17:50:c9:f0:78:
                    58:18:9c:23:45:00:3f:2c:70:f4:f8:f1:56:4e:98:
                    a8:5c:c1:ae:d8:d3:f5:d8:d5:c0:20:f3:8a:99:13:
                    5a:d2:9a:24:b4:b9:ac:c5:4b:e5:40:47:68:10:c1:
                    c8:ba:e3:0a:0c:aa:7a:f0:c6:21:e6:43:08:5f:a5:
                    94:13:88:5a:0b:e9:09:4c:78:4a:ec:27:60:a4:b1:
                    89:db:ae:19:a0:a6:3e:ae:26:92:22:e6:c8:61:5a:
                    e7:e3:cd:ef:c1:57:db:cf:a8:20:07:e8:fb:f1:13:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C7:E2:67:A2:4A:19:3F:54:F3:90:D1:5B:BC:0B:2E:09:0B:37:66
            X509v3 Authority Key Identifier:
                keyid:89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3138392e38392e3132382e302f31382d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:76:06:dc:06:95:6a:be:fc:b3:6e:a5:25:f5:4a:8d:17:7d:
         12:ec:4b:8c:a4:c4:8e:35:b0:3b:55:3f:fd:4f:42:a4:6a:36:
         29:c7:59:3c:09:a5:0e:85:8b:ec:7e:b8:37:82:84:0e:9b:f1:
         8e:51:dc:75:48:85:80:5a:58:89:ed:cc:78:f3:a4:42:7e:34:
         02:71:38:b8:3e:39:f0:b4:43:9d:09:fd:1b:22:bc:91:78:7d:
         c9:68:d1:36:03:b2:78:46:7a:fc:95:05:2d:16:d3:20:fa:00:
         ce:91:ba:20:34:a1:74:a8:21:b1:43:01:cf:c7:eb:6d:fa:de:
         b0:40:d2:d1:55:1e:4a:c7:2d:f1:a9:22:cc:24:e7:eb:6b:0c:
         53:06:03:7e:d5:0e:c2:2d:1f:c4:16:1b:58:5a:cf:d3:d2:c1:
         c1:4d:82:36:51:8b:8f:98:05:ce:0b:31:d9:89:e7:75:5d:9f:
         82:dc:c3:1c:b4:07:7a:63:b9:36:1d:07:13:31:3a:8a:ee:27:
         33:5e:04:64:75:f6:b2:e2:6d:b7:10:2f:e2:f9:10:a0:02:b6:
         bd:a3:45:c0:b9:1d:50:41:6b:34:38:f8:51:4b:ad:2f:20:93:
         44:f4:56:8f:0f:1a:62:1e:16:bf:bf:b6:6c:71:9b:5e:53:9e:
         19:f5:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org