Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa
File:                     3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa (raw, json)
Hash identifier:          KdOp7Qm31rea02BWQIFsKnLllPZYJ0oQZPUS1GeAvVg=
Subject key identifier:   41:49:F4:73:82:6D:2D:01:05:9D:4A:0B:DC:DD:3A:F8:FE:83:4D:DA
Certificate issuer:       /CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
Certificate serial:       0627640BEC924B3EBF047D6F781F52DEADC8C84F
Authority key identifier: 5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa
Signing time:             Sun 05 Nov 2023 18:06:56 +0000
ROA not before:           Sun 05 Nov 2023 18:01:56 +0000
ROA not after:            Sun 03 Nov 2024 18:06:56 +0000
asID:                     272228
IP address blocks:        189.126.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:27:64:0b:ec:92:4b:3e:bf:04:7d:6f:78:1f:52:de:ad:c8:c8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
        Validity
            Not Before: Nov  5 18:01:56 2023 GMT
            Not After : Nov  3 18:06:56 2024 GMT
        Subject: CN=4149F473826D2D01059D4A0BDCDD3AF8FE834DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:cb:36:8e:09:03:28:15:ca:ef:0d:84:f1:
                    73:f9:13:41:58:1a:78:3d:bc:f1:5c:3f:7e:11:b2:
                    41:d7:8a:72:85:ce:f4:b7:ad:20:e0:8f:2d:7e:a8:
                    a7:20:48:70:46:5b:22:24:2d:e7:66:dc:84:17:c0:
                    df:72:60:e3:1f:c8:c6:89:15:89:98:04:aa:36:6e:
                    0e:cb:3a:78:1a:04:9a:18:4b:55:9d:57:50:9f:36:
                    3a:a0:d1:78:64:6a:2b:cd:97:a7:2a:3b:12:8f:80:
                    fa:21:c0:9a:03:db:a2:c9:29:ef:dc:e4:87:ae:92:
                    f8:05:f4:ae:49:e0:07:71:0a:b6:0a:25:a1:53:26:
                    58:fe:14:f1:33:b1:3a:76:9c:42:66:40:3e:7d:d0:
                    e2:c1:93:68:d8:d7:f2:2c:cb:e6:cb:3a:1b:7f:58:
                    31:18:ad:77:0a:bd:0f:68:c7:9f:82:00:11:aa:fd:
                    76:b3:30:df:22:7e:a9:36:7f:0b:47:56:2e:6d:4f:
                    eb:c9:ca:16:01:36:73:04:b4:7b:82:80:d8:a3:74:
                    1a:fd:f9:bf:b9:5a:22:f0:de:e9:e9:6b:70:b7:9f:
                    0e:fd:a7:5e:9e:39:c4:b2:63:2a:5c:a8:b8:08:c4:
                    c2:cf:37:98:9a:6d:35:c6:b3:92:49:7b:bf:ce:5d:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:49:F4:73:82:6D:2D:01:05:9D:4A:0B:DC:DD:3A:F8:FE:83:4D:DA
            X509v3 Authority Key Identifier:
                keyid:5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:94:02:f0:ef:9c:18:89:b0:30:b0:45:8b:41:ae:51:7d:e2:
         4c:dd:3f:e8:6d:60:9b:53:a7:a2:ff:06:df:d9:13:b8:6f:fd:
         38:f0:82:77:b5:9f:cc:fa:b6:33:cb:e2:47:55:2a:4c:78:df:
         67:0b:77:a2:05:c2:68:ca:05:31:ca:5c:f6:e2:d6:d2:1f:2e:
         f7:c4:f1:97:37:69:d4:31:06:ab:d2:86:3e:4a:23:6a:f0:0e:
         86:47:3f:d6:c1:b0:59:59:46:a6:22:85:0a:37:f3:9f:c2:cb:
         9d:61:25:52:e7:6d:61:5b:e4:34:9d:8b:29:9d:19:b1:44:eb:
         aa:aa:ad:75:e4:4a:ed:73:e2:52:75:ea:60:20:c6:54:cd:c9:
         46:c1:92:54:19:21:98:a9:6b:67:42:89:de:48:07:1e:c6:6f:
         95:84:90:32:3f:a9:08:6e:6b:6d:30:a8:4b:f9:55:74:5f:05:
         13:54:8f:4d:07:9f:2f:0c:91:3b:5c:58:38:f1:23:6a:d5:5f:
         32:a7:8e:c6:37:e5:4e:30:38:8d:79:4a:bf:b6:62:eb:77:2f:
         b1:03:36:69:36:96:77:97:58:40:f9:70:5b:97:f8:20:53:bd:
         71:43:35:e8:51:c6:60:f9:e4:01:36:5d:46:7f:37:1e:bc:3a:
         06:27:b9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org