Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa
File:                     3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa (raw, json)
Hash identifier:          b1dcqk9zbC+H/zekDRbsh6Y4ktk3+9neeyOV2IRJUL4=
Subject key identifier:   FB:4B:F3:CF:78:83:DF:67:83:23:5A:80:80:8E:F2:47:19:BD:CA:67
Certificate issuer:       /CN=B6E5CD0AC333BA9A2348AA912613E30B2E699A1B
Certificate serial:       59E61069556248C95D44C2FD5679A4081122B04C
Authority key identifier: B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa
Signing time:             Mon 11 Mar 2024 21:16:07 +0000
ROA not before:           Mon 11 Mar 2024 21:11:07 +0000
ROA not after:            Mon 10 Mar 2025 21:16:07 +0000
asID:                     270705
IP address blocks:        189.127.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e6:10:69:55:62:48:c9:5d:44:c2:fd:56:79:a4:08:11:22:b0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E5CD0AC333BA9A2348AA912613E30B2E699A1B
        Validity
            Not Before: Mar 11 21:11:07 2024 GMT
            Not After : Mar 10 21:16:07 2025 GMT
        Subject: CN=FB4BF3CF7883DF6783235A80808EF24719BDCA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d7:05:04:72:70:f9:d8:55:1d:7b:24:35:21:
                    39:3a:93:cc:61:20:53:f8:bc:8f:8c:a7:f7:1a:13:
                    32:16:7b:84:be:76:ff:4d:65:64:fc:01:05:56:fa:
                    ba:87:45:ba:b9:7a:ed:8d:64:8c:10:76:38:37:2e:
                    a9:b3:ad:67:01:39:4b:81:a3:86:c8:b8:4b:5b:c4:
                    f3:89:dc:3c:37:4f:cc:43:32:f8:a7:0a:a4:78:fc:
                    ef:b6:df:62:1d:ef:b4:fb:59:39:0e:78:35:78:a9:
                    bd:cb:77:a1:af:c9:ef:ac:f5:f3:b8:ae:5f:46:59:
                    15:df:3b:dc:91:87:98:7e:d7:47:32:ab:a2:0d:85:
                    e3:d9:a0:1a:b0:93:9c:67:4f:3d:66:fb:4e:b6:79:
                    03:78:be:92:62:4e:a5:84:96:de:d5:00:c9:38:64:
                    a4:90:5f:9f:16:88:36:7e:b1:c8:54:d5:1e:29:d8:
                    20:17:19:b6:84:75:0b:14:a1:f3:0f:29:ea:2a:a1:
                    6e:12:e1:c3:55:25:7c:db:8e:d7:58:c7:55:76:71:
                    28:08:7d:74:a9:5c:3a:d1:cc:8a:a2:38:df:50:d3:
                    4d:b0:8d:f9:6a:ca:73:58:bc:07:e5:ca:31:2e:2d:
                    5f:d9:f4:0f:dc:11:26:49:dc:7a:24:15:ee:f4:00:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4B:F3:CF:78:83:DF:67:83:23:5A:80:80:8E:F2:47:19:BD:CA:67
            X509v3 Authority Key Identifier:
                keyid:B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:f4:93:ab:17:24:6b:f4:56:4e:ec:0f:3d:8e:1d:1a:e2:96:
         9e:ed:4b:dd:e8:e0:7e:48:bc:64:8f:da:79:f9:b1:69:57:fd:
         33:0e:29:4f:af:3a:74:d8:cc:c5:1e:5c:7f:f0:93:fc:4f:c4:
         f6:19:5d:bc:88:af:57:15:93:79:8d:17:4c:89:1f:42:8a:17:
         84:cf:06:4e:da:94:e4:d2:e3:df:19:56:f8:69:93:4f:a7:39:
         0a:28:ec:b4:ee:28:98:bc:2e:86:95:97:97:b9:2b:f4:a9:9f:
         56:04:dc:92:66:01:79:b0:ac:5f:88:43:90:80:f9:5a:11:f9:
         b1:0e:c3:63:6b:4e:62:83:e0:a1:a3:16:a7:63:af:2a:81:54:
         7f:56:76:ef:42:ae:a9:23:b8:c6:c8:38:08:e3:32:e1:9b:0d:
         3b:63:bf:b0:19:6b:a9:dd:6c:b3:4c:ff:4b:42:77:64:69:79:
         8d:45:4b:f1:d4:a5:ca:df:aa:24:97:3c:b5:17:a2:ea:e9:13:
         25:42:aa:21:06:c2:fa:f2:95:eb:af:c9:d2:b0:fd:a2:fd:62:
         ce:33:e2:0b:4c:4f:f6:99:1c:26:03:bf:c0:29:26:97:e8:20:
         4a:88:47:1a:98:e6:83:f5:c5:af:01:ad:f5:cb:0a:44:9c:75:
         64:d5:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org