Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/3138392e3132372e3134382e302f32332d3234203d3e20323730373035.roa
File:                     3138392e3132372e3134382e302f32332d3234203d3e20323730373035.roa (raw, json)
Hash identifier:          aR44QvtvOWlj09JbYNsi9YvJbAd/mCuaM9g8cz9yzog=
Subject key identifier:   4F:B8:9A:6C:9C:22:A4:02:B0:CA:71:11:50:04:4B:A4:49:CE:A3:FE
Certificate issuer:       /CN=B6E5CD0AC333BA9A2348AA912613E30B2E699A1B
Certificate serial:       5A296D6B70138BBB8DE37C353BE0574B536409E3
Authority key identifier: B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/3138392e3132372e3134382e302f32332d3234203d3e20323730373035.roa
Signing time:             Mon 11 Mar 2024 21:15:50 +0000
ROA not before:           Mon 11 Mar 2024 21:10:50 +0000
ROA not after:            Mon 10 Mar 2025 21:15:50 +0000
asID:                     270705
IP address blocks:        189.127.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:6d:6b:70:13:8b:bb:8d:e3:7c:35:3b:e0:57:4b:53:64:09:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E5CD0AC333BA9A2348AA912613E30B2E699A1B
        Validity
            Not Before: Mar 11 21:10:50 2024 GMT
            Not After : Mar 10 21:15:50 2025 GMT
        Subject: CN=4FB89A6C9C22A402B0CA711150044BA449CEA3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:67:95:a3:32:9d:69:66:71:00:aa:e7:7c:
                    81:31:b3:d7:0b:6c:49:b9:4f:fb:ac:55:dc:2e:2e:
                    a8:bc:c0:f8:0d:6a:cf:77:8b:f3:43:ed:16:a4:e2:
                    c2:9e:2a:dc:ca:50:09:21:53:6d:48:8f:82:8d:1a:
                    c3:a2:e8:f4:6e:ce:c9:7c:24:ac:75:83:fa:b0:c7:
                    f0:f6:bf:1e:1a:13:19:6d:0d:0f:2b:46:fa:8a:18:
                    36:1b:e9:63:25:19:d3:25:fe:5a:e7:17:cb:2a:c0:
                    e3:93:7d:37:5a:fa:ba:58:82:df:da:c7:81:6a:da:
                    e3:45:ef:7d:85:dc:29:6a:77:82:08:4d:60:87:93:
                    41:b9:19:78:81:3e:d2:0b:ff:86:a2:d1:a2:ce:8e:
                    1c:c1:d2:32:77:a3:89:99:bf:1e:e1:ba:9f:33:4d:
                    17:da:1c:69:2e:59:f9:78:cf:e8:e5:9f:4a:49:53:
                    2f:2f:9e:65:06:f5:5a:7e:fd:34:ab:0a:f5:6e:98:
                    42:e9:d1:62:08:9d:d2:a0:54:81:9f:40:6b:cf:e6:
                    fc:9b:4c:8a:54:79:e7:85:84:6a:c2:4b:62:92:98:
                    6a:92:68:bb:07:a3:18:fe:b6:23:16:f6:75:1b:3d:
                    40:45:8b:c5:41:0a:79:f1:29:81:3e:61:49:c6:3d:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B8:9A:6C:9C:22:A4:02:B0:CA:71:11:50:04:4B:A4:49:CE:A3:FE
            X509v3 Authority Key Identifier:
                keyid:B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/3138392e3132372e3134382e302f32332d3234203d3e20323730373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:c5:ec:0e:d1:24:7e:da:ea:44:e7:7e:1e:28:40:8f:84:
         b3:e2:f9:61:2c:8b:3c:00:29:51:a8:a6:e9:ea:c8:29:8a:c3:
         ae:60:66:45:08:d3:ed:cb:d9:0b:4d:6b:57:b8:ec:68:4c:79:
         04:17:10:bf:78:98:82:c3:7c:11:f7:54:a6:e8:3f:0d:82:1a:
         c7:27:9f:89:8e:0c:f7:e0:df:e3:68:36:4d:08:c1:2d:52:b3:
         4f:6a:01:a4:7b:5c:e6:d2:58:ec:be:89:97:ae:ad:b9:a7:1f:
         03:5c:b5:f1:80:3e:3c:2c:d1:2e:aa:90:30:9f:49:59:42:a3:
         74:85:1e:9c:15:7a:fe:39:e0:d5:1a:df:dd:5a:f8:17:25:24:
         d7:f6:5d:b0:f8:aa:b5:53:58:91:e2:8a:7e:ec:64:76:b5:0e:
         2b:9b:e4:9c:a9:ea:c0:cf:9b:9d:72:65:13:34:e2:35:26:29:
         65:7f:16:4d:e3:71:f2:61:02:ee:9e:c5:ea:38:e4:ef:56:1d:
         f2:a1:1d:4c:c8:25:fe:4f:a9:ae:45:65:1e:15:35:70:93:26:
         0a:b1:76:7f:20:96:7b:6f:e2:96:04:80:af:c4:9f:f8:8a:16:
         ee:52:38:82:44:bd:9e:fd:f0:05:2d:ed:72:d9:be:51:cc:c1:
         3d:01:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org