Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
File:                     3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa (raw, json)
Hash identifier:          OF9/qqhaBwZIdfCZqb3326jk5w8XgxQpWPm+IZzJP1M=
Subject key identifier:   DC:97:E7:31:E1:15:D8:49:F8:F2:C4:BA:B0:2C:CA:00:2E:FC:49:22
Certificate issuer:       /CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
Certificate serial:       3255EE1A13FE6E997B4156977DA7FE1DF8F4B0C5
Authority key identifier: 5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
Signing time:             Sun 05 Nov 2023 18:06:57 +0000
ROA not before:           Sun 05 Nov 2023 18:01:57 +0000
ROA not after:            Sun 03 Nov 2024 18:06:57 +0000
asID:                     272228
IP address blocks:        189.126.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:55:ee:1a:13:fe:6e:99:7b:41:56:97:7d:a7:fe:1d:f8:f4:b0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
        Validity
            Not Before: Nov  5 18:01:57 2023 GMT
            Not After : Nov  3 18:06:57 2024 GMT
        Subject: CN=DC97E731E115D849F8F2C4BAB02CCA002EFC4922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:91:2c:3e:ec:cb:4d:8d:ce:63:95:a9:a4:53:
                    24:06:0a:31:3d:42:9f:fc:ba:6d:0e:07:1c:89:f0:
                    e4:19:66:23:8d:98:18:d0:29:b1:cd:9c:02:94:29:
                    c5:0a:82:dc:72:cc:3f:7f:10:55:0c:ae:89:32:27:
                    ce:2b:b4:bd:c3:f1:1a:f3:4e:31:e9:b2:a3:c1:0c:
                    10:2d:56:65:5c:db:40:31:6e:be:fd:1a:97:29:cd:
                    3f:aa:9c:67:47:37:ad:bf:eb:78:40:13:73:85:e6:
                    1d:c0:95:85:5c:6a:de:05:cf:46:6c:fe:e7:b4:ca:
                    02:85:eb:c8:25:63:f7:3c:5f:f0:6e:63:f2:68:6d:
                    e3:a3:e0:f8:d6:13:75:b0:d8:17:bf:0c:4b:fe:72:
                    d6:58:a4:0e:be:69:51:32:a0:d9:61:82:ce:62:d6:
                    7b:4e:65:84:60:95:18:50:3f:7c:6a:e9:17:c2:be:
                    4f:3f:d2:89:ee:0c:ec:dc:4e:b4:7c:85:d6:98:79:
                    a9:8d:99:dd:81:49:d7:69:c2:d1:69:73:70:b0:cd:
                    b6:bb:76:ef:b7:3a:09:9b:ce:15:cd:05:09:69:5d:
                    19:71:85:c4:b4:9c:a3:92:e3:91:88:60:97:86:33:
                    29:15:9b:28:d7:fd:88:50:aa:78:3b:52:85:25:5c:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:97:E7:31:E1:15:D8:49:F8:F2:C4:BA:B0:2C:CA:00:2E:FC:49:22
            X509v3 Authority Key Identifier:
                keyid:5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:63:1e:dc:22:3c:eb:11:8d:6c:38:b4:d1:e8:7d:87:b5:26:
         90:5f:a5:a3:21:0a:4c:01:c7:84:20:f2:1c:64:65:b5:6a:a3:
         94:a7:f4:52:ce:f0:2c:b9:5a:b6:c6:06:2a:a8:ca:45:82:5c:
         e9:fa:da:ad:6c:ce:84:bc:0f:cd:ba:f7:3b:13:61:10:a0:0d:
         2d:1b:74:4a:4b:2c:e8:83:f0:6b:da:e9:e1:03:74:70:59:c1:
         e4:48:6a:49:dc:37:6e:bc:a4:43:67:f6:9b:c8:5f:d4:e4:51:
         08:5e:91:c2:c6:5f:32:6b:40:4f:5b:28:41:70:87:dc:78:d8:
         41:fa:99:4e:07:f6:a8:83:67:27:7f:69:58:e2:37:61:d0:cc:
         dd:54:b1:66:b6:6a:ea:e3:3b:bb:4a:64:a8:47:e8:35:16:6b:
         fe:72:8b:a3:36:c9:08:23:08:cc:f0:cd:c6:03:1a:6c:bf:1c:
         d6:ed:3b:09:15:1b:18:61:29:e7:3b:9f:25:3f:5e:6c:73:d9:
         4c:9c:1f:8d:49:3c:9c:fd:47:ec:34:c8:20:4d:9c:a8:ea:93:
         1b:46:b4:90:7a:71:a6:0f:d6:fe:f9:68:eb:8f:e6:00:34:a3:
         5a:74:da:02:55:dc:52:c8:da:7a:80:f4:44:0e:65:c0:f0:e9:
         d2:4f:9f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org