Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa
File:                     3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa (raw, json)
Hash identifier:          oy71fybrIdQTZNXHe8bEpuhWw1nDDSIQ1lrOwDK6g4c=
Subject key identifier:   4D:75:CC:7A:5B:8A:45:47:4B:BB:27:AD:C2:FF:6A:06:6D:37:F5:05
Certificate issuer:       /CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
Certificate serial:       6BECAD379C2296A85AF6C5821D7A0ECC3D4CD41E
Authority key identifier: 8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa
Signing time:             Thu 04 Apr 2024 11:16:20 +0000
ROA not before:           Thu 04 Apr 2024 11:11:20 +0000
ROA not after:            Thu 03 Apr 2025 11:16:20 +0000
asID:                     272228
IP address blocks:        189.126.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ec:ad:37:9c:22:96:a8:5a:f6:c5:82:1d:7a:0e:cc:3d:4c:d4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
        Validity
            Not Before: Apr  4 11:11:20 2024 GMT
            Not After : Apr  3 11:16:20 2025 GMT
        Subject: CN=4D75CC7A5B8A45474BBB27ADC2FF6A066D37F505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:09:0c:f2:c5:74:4a:0b:15:b7:3f:bf:a0:
                    28:e8:a1:2d:64:c4:78:46:6d:32:26:6c:06:42:b9:
                    da:60:10:ba:f6:1d:96:ab:a0:0a:fa:07:4b:a1:8b:
                    d8:94:8e:1c:b0:4c:63:97:cd:da:45:52:29:b3:e5:
                    9d:c4:52:cc:a9:93:6a:81:84:ec:a0:94:a2:4f:5f:
                    53:44:08:72:f3:ce:e5:83:48:d6:4d:e3:8b:94:18:
                    3c:10:10:3a:42:91:9f:ee:b5:19:47:65:6b:5e:2f:
                    2a:34:2c:67:93:b5:b8:d6:9b:6b:34:7c:ae:d0:cc:
                    8f:1b:cb:3f:84:78:d7:44:ed:23:28:31:fb:54:0c:
                    26:3b:88:0e:a2:2b:cf:87:12:ef:72:46:a5:15:8f:
                    f8:1d:f2:c7:dc:38:d5:7c:16:a1:91:f3:3e:2d:fb:
                    ad:0d:6b:58:ab:66:ce:9e:66:ce:90:88:4c:1b:19:
                    e4:9c:78:ad:ef:70:92:5d:d1:a7:d5:4f:d8:e8:f7:
                    ff:04:39:41:6f:c2:3b:97:8b:f9:9e:bb:66:34:9c:
                    83:40:c8:76:af:5f:34:2f:fe:1b:cf:08:e8:3c:a4:
                    0b:63:eb:ed:05:0a:6d:fd:db:a4:04:89:b7:7b:91:
                    33:7e:3a:7f:97:e5:e4:c6:d8:37:e0:b7:30:54:83:
                    93:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:75:CC:7A:5B:8A:45:47:4B:BB:27:AD:C2:FF:6A:06:6D:37:F5:05
            X509v3 Authority Key Identifier:
                keyid:8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:73:35:88:fa:6f:06:1e:07:31:f4:e8:63:f8:d9:af:2f:30:
         dc:9a:87:d1:3a:d8:d4:d4:c9:c9:22:f2:93:8a:9a:a5:de:bf:
         e2:18:d6:5b:bc:8a:c1:6b:21:92:cd:b0:3d:d2:70:19:d2:9f:
         43:1f:86:94:c7:5a:97:5a:1a:e6:7e:95:f0:f0:e8:75:34:55:
         ef:44:12:9e:73:e0:6f:95:d7:ae:69:a2:80:ba:28:0a:80:d5:
         da:63:77:bd:d0:57:46:0a:58:e5:3a:4b:6f:3f:e9:7a:ca:7e:
         76:bf:9f:63:d2:f5:f3:76:88:dc:1b:dc:e8:3b:3d:fb:4c:7c:
         ff:93:98:1b:95:89:b5:47:e0:56:8b:72:b8:9b:c5:54:19:49:
         9a:12:d3:17:e0:67:19:c5:a5:ee:40:34:22:8d:10:47:ae:28:
         69:09:ee:dc:33:a2:d9:0b:a1:95:d9:12:32:f0:0e:5f:f9:d9:
         f7:11:c6:6d:ed:00:ac:2a:d0:34:e2:e7:a1:d0:1e:35:57:27:
         25:57:b1:ab:a1:4b:f3:fa:60:36:78:14:f9:54:c7:91:8c:62:
         39:83:94:91:31:7d:ac:24:86:54:0b:f9:7d:c7:97:87:98:cf:
         53:8a:85:ef:f4:98:54:9a:12:30:1f:d8:19:9d:4f:8b:d3:92:
         ea:59:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org