Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3234203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32302d3234203d3e203238333532.roa (raw, json)
Hash identifier:          tW2HRaT1A3T77ucjxAmi2noYopNYKZfgGjZKhJhhvN0=
Subject key identifier:   6E:C6:8C:DB:4E:BB:4D:9E:E2:8D:DD:11:7D:46:FD:D0:B1:9E:42:85
Certificate issuer:       /CN=3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5
Certificate serial:       39BA8A7011FC85412C4755A75E114DCCC9CABF2D
Authority key identifier: 3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3234203d3e203238333532.roa
Signing time:             Wed 05 Apr 2023 18:38:45 +0000
ROA not before:           Wed 05 Apr 2023 18:33:45 +0000
ROA not after:            Wed 03 Apr 2024 18:38:45 +0000
asID:                     28352
IP address blocks:        189.51.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ba:8a:70:11:fc:85:41:2c:47:55:a7:5e:11:4d:cc:c9:ca:bf:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5
        Validity
            Not Before: Apr  5 18:33:45 2023 GMT
            Not After : Apr  3 18:38:45 2024 GMT
        Subject: CN=6EC68CDB4EBB4D9EE28DDD117D46FDD0B19E4285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:48:61:84:bd:e4:02:24:7e:e7:dd:f5:91:
                    41:54:9c:c2:23:92:45:7d:64:84:35:29:2e:b3:38:
                    1b:fe:07:37:95:4c:8f:3b:c1:50:df:d7:43:b0:e5:
                    20:6a:f7:ec:d2:98:10:3a:af:a0:e5:63:7a:e6:d1:
                    5b:22:ce:02:eb:76:b4:51:22:67:24:7f:74:26:bf:
                    1d:37:18:46:49:e5:c7:c4:f1:9d:90:a1:2a:15:dd:
                    8f:4a:08:1b:1b:52:d9:0b:df:e1:7a:7e:57:3d:c8:
                    3f:2d:3f:62:96:50:64:18:98:84:83:02:95:51:0f:
                    e5:e6:3c:4e:72:56:23:2c:af:a8:80:03:18:d6:45:
                    15:b4:0f:b6:79:4a:4d:e9:e1:84:8c:a6:b7:e1:93:
                    90:ab:86:43:25:4e:9c:87:85:6f:dc:e8:45:3b:4c:
                    cf:19:eb:43:b3:6b:ad:7f:e6:1c:24:f7:63:ee:f3:
                    d8:86:00:31:66:c6:54:7b:6f:c3:e9:9d:8d:3a:ee:
                    a2:26:56:82:0b:5a:54:ac:90:01:5e:40:d4:31:b3:
                    d2:ca:a8:b5:1e:18:4f:0c:f3:4a:86:ee:85:a1:bb:
                    9c:3c:06:19:45:ce:2a:44:b6:47:f8:f4:94:2a:47:
                    be:4a:f1:7f:fb:b1:8b:2f:79:f5:a1:d5:39:9b:d6:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C6:8C:DB:4E:BB:4D:9E:E2:8D:DD:11:7D:46:FD:D0:B1:9E:42:85
            X509v3 Authority Key Identifier:
                keyid:3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:98:20:77:f9:3e:d0:e6:85:59:5c:76:2a:14:af:b6:7a:d7:
         d9:c2:ea:74:15:ce:b4:2c:86:80:5c:de:15:5f:56:a6:fd:c3:
         94:e4:8f:63:75:23:71:2f:de:65:70:a8:a5:7f:a8:5c:d9:4e:
         34:f1:ce:ab:58:f6:f9:ab:ad:fc:10:db:31:d9:13:09:21:19:
         c1:e5:de:64:0f:af:b9:26:66:04:2b:02:ba:9f:5d:10:21:ae:
         4d:28:2b:a8:fb:47:5e:79:ee:d8:d9:71:2f:3a:db:35:dc:3d:
         89:95:d3:db:06:27:77:51:6d:65:e4:05:76:dc:76:1a:95:75:
         86:2c:14:6e:38:f2:73:b7:4c:e2:5a:cb:7c:50:2a:a2:f5:85:
         0c:2b:c6:ac:0a:26:cc:ff:3a:e6:23:3b:54:ab:c5:0a:55:5d:
         32:0f:e7:f6:2f:58:a1:32:55:bd:50:e9:11:fc:28:a0:db:29:
         01:e0:ef:00:cd:ae:0d:2c:10:bf:49:19:15:bf:33:b3:72:8c:
         4b:5a:ea:f0:45:11:b9:da:2e:a2:dc:f5:7d:2c:2b:e1:4e:a8:
         41:91:34:9a:5b:a7:e5:e6:5b:5e:2e:89:3f:c7:60:1e:3f:fe:
         d2:09:fa:9b:94:16:1c:f9:68:ac:12:ea:35:9d:b9:a5:2a:b4:
         66:8f:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org