Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa
File:                     3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa (raw, json)
Hash identifier:          Ey052eW7fA5gWzOFZOlzhe/8Yur/0KkDBk+NgQj53jI=
Subject key identifier:   B6:3A:6D:47:AE:01:F7:BD:09:CD:CA:09:2B:24:F7:7D:61:12:75:23
Certificate issuer:       /CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
Certificate serial:       583E63253E3182F328B5519FE042F9C4C4E68971
Authority key identifier: 5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa
Signing time:             Sun 05 Nov 2023 18:06:56 +0000
ROA not before:           Sun 05 Nov 2023 18:01:56 +0000
ROA not after:            Sun 03 Nov 2024 18:06:56 +0000
asID:                     272228
IP address blocks:        189.126.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3e:63:25:3e:31:82:f3:28:b5:51:9f:e0:42:f9:c4:c4:e6:89:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
        Validity
            Not Before: Nov  5 18:01:56 2023 GMT
            Not After : Nov  3 18:06:56 2024 GMT
        Subject: CN=B63A6D47AE01F7BD09CDCA092B24F77D61127523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:9f:55:2f:9c:e5:e2:88:d4:de:6c:69:0a:
                    d3:3b:33:99:ae:67:59:36:6c:0b:bf:e3:67:6c:cb:
                    1f:b4:21:dc:49:66:96:70:c4:5b:be:e2:b2:0a:29:
                    30:b3:cc:1a:d9:1d:9a:ad:bf:66:4f:4e:db:57:8b:
                    44:4f:2e:fc:2d:24:ac:54:a2:bd:c9:af:91:c6:78:
                    d9:44:18:61:ae:ba:ae:97:68:3c:28:52:aa:fd:97:
                    bf:9e:e9:c1:8d:41:cf:96:76:f9:15:98:d1:aa:de:
                    78:5a:f7:42:f6:46:a3:9c:1f:d5:87:68:2b:bf:11:
                    90:c3:3f:df:fa:d4:21:3e:d6:6e:54:f3:1e:ce:de:
                    64:84:06:81:34:17:6c:4b:96:96:72:69:c9:34:1d:
                    fa:b8:db:7b:5d:17:76:36:11:e8:ec:f5:95:84:da:
                    a5:4e:79:68:28:4a:1a:b0:98:62:a3:12:46:31:a2:
                    8d:09:4b:75:5b:c6:81:29:ae:0e:b3:bc:f0:15:20:
                    2d:1c:5a:0f:f9:78:ad:0d:dc:24:44:4e:32:9f:0d:
                    ed:d6:4d:e5:ce:c7:d6:70:5b:20:ba:58:cb:5a:fb:
                    bc:2d:32:3b:16:21:1b:dd:48:ef:67:57:db:6b:22:
                    6d:22:9d:24:9f:55:e0:fa:91:f6:b3:74:df:7e:65:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3A:6D:47:AE:01:F7:BD:09:CD:CA:09:2B:24:F7:7D:61:12:75:23
            X509v3 Authority Key Identifier:
                keyid:5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:63:5c:8a:db:7e:46:e8:92:63:a4:d4:10:2f:b1:db:6b:d0:
         7b:9d:53:d5:2f:2e:53:0b:a1:3d:fa:44:d6:85:93:06:77:f0:
         37:ee:08:fc:ba:60:f3:b4:df:a7:87:a6:77:32:2c:0c:b5:60:
         70:b5:71:7a:2a:eb:3b:18:44:63:06:de:59:ef:80:52:f1:21:
         ce:e7:0e:c9:9c:03:19:40:cf:ba:4c:54:dc:09:c1:97:1e:7c:
         39:26:ca:60:07:eb:f4:88:67:13:76:98:fe:6a:ef:5d:74:c9:
         d9:9d:e3:ce:a4:67:63:f6:f4:ed:41:2b:2d:aa:42:a1:4a:43:
         b0:24:9b:70:04:95:69:5a:80:ee:e0:d7:a1:9f:5f:c1:5c:42:
         5f:af:d8:e4:80:60:42:07:dc:e3:0c:cd:a5:dd:e2:0a:c4:b3:
         fa:af:fd:d5:51:00:ee:37:2f:ff:ed:93:24:33:80:0f:1f:ed:
         46:d7:dc:78:4b:4b:f9:12:61:52:84:c5:da:3b:26:85:58:f5:
         73:3c:9d:14:4d:b0:b1:1d:f3:53:cb:76:d2:a0:2e:68:08:37:
         cb:72:55:ea:59:90:34:b5:0a:ad:3c:7a:54:63:2c:c4:af:5a:
         25:19:c6:1f:43:42:0f:cc:b3:6d:8b:c7:38:48:a1:4c:bc:20:
         7b:a1:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org