Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3139392e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          ATqTXJ4jnSgKY/P05q36kkw8Bf48hhJdd0249cWXWtk=
Subject key identifier:   60:D9:32:92:CD:01:8A:5D:F9:B7:8E:4C:78:E5:E7:E5:E1:F3:09:64
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       6717D030BA6549CF1B08171079F4911FE9BF2C15
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:54 +0000
ROA not before:           Fri 13 Oct 2023 14:31:54 +0000
ROA not after:            Fri 11 Oct 2024 14:36:54 +0000
asID:                     28352
IP address blocks:        189.51.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:17:d0:30:ba:65:49:cf:1b:08:17:10:79:f4:91:1f:e9:bf:2c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:54 2023 GMT
            Not After : Oct 11 14:36:54 2024 GMT
        Subject: CN=60D93292CD018A5DF9B78E4C78E5E7E5E1F30964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:23:de:76:29:d5:79:7c:ab:26:f4:54:08:
                    fb:58:0c:2d:0b:69:9d:1c:3b:38:34:23:4d:93:08:
                    3c:7e:5d:a6:06:9b:be:ee:cf:e3:23:e1:5c:9b:5e:
                    63:d3:df:3e:11:23:82:01:f3:b5:b1:1f:bc:ae:f2:
                    43:90:c8:bd:09:11:2e:82:4a:1c:55:62:a0:f9:6c:
                    ee:2e:ea:5a:7d:81:ad:8e:00:86:dd:cc:b1:05:ab:
                    80:cf:6d:42:1b:a9:36:d4:14:ee:5d:13:e7:4f:56:
                    5f:f7:8c:02:6a:23:b6:11:17:bc:b3:be:6d:7e:19:
                    39:cf:3a:73:3a:b1:a9:55:4b:c0:f2:5d:c1:d9:3c:
                    1c:63:15:ce:ca:8f:9f:18:15:9f:de:c7:f5:1c:1a:
                    99:3f:83:47:2d:f4:42:ea:6f:7d:41:39:28:5d:98:
                    75:84:f2:80:8a:7c:b8:dc:5a:eb:2d:56:ba:a6:a7:
                    6b:1e:4e:3a:45:c1:46:36:2e:fb:5c:9b:16:c1:1e:
                    3e:86:4e:47:7f:1d:dc:b7:cb:d6:56:e0:65:c4:ba:
                    b7:d2:a5:64:5d:7d:6b:12:12:97:37:d1:2b:b2:0d:
                    32:40:cd:ef:b6:18:13:aa:5c:1b:5d:f2:5b:98:61:
                    c8:62:c0:e6:22:20:d6:57:48:1f:bd:e0:5e:76:27:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D9:32:92:CD:01:8A:5D:F9:B7:8E:4C:78:E5:E7:E5:E1:F3:09:64
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:61:d1:87:84:0e:ec:f8:b4:9f:8a:b2:84:64:a6:10:e7:7e:
         29:38:2a:b3:29:5d:cc:20:d5:9b:c3:62:22:2d:2e:d5:98:0d:
         3f:50:2f:f8:9a:54:75:dc:03:62:4c:4c:ad:df:3d:a0:01:e9:
         1a:07:fb:f8:a8:8c:c9:19:b0:dc:f6:14:20:12:47:26:5a:37:
         2e:0b:ee:39:7e:db:63:85:03:1f:2c:29:21:72:db:82:41:6d:
         15:e8:17:b2:05:e5:c5:f6:6c:c6:16:50:aa:81:9e:74:11:35:
         3e:ac:df:b7:ef:d2:3a:62:a2:91:85:8a:d1:59:7e:64:ae:8d:
         e7:2e:96:61:e9:9d:08:01:8b:3c:4d:91:b9:c5:34:a3:40:46:
         2b:27:2e:06:e7:13:e8:10:18:ed:5e:88:e5:cd:7c:f3:11:3b:
         55:75:bb:0e:69:34:d1:40:61:00:f5:73:63:9b:7c:a5:32:e2:
         09:91:9c:06:fd:f6:dc:a8:9c:31:97:71:c9:0a:e3:a0:5d:15:
         d8:96:5f:8f:ad:23:cf:c6:0a:ce:80:97:7c:01:a1:dc:14:cc:
         30:f8:01:be:ab:34:2b:42:5d:ea:2f:7b:db:28:b3:48:da:ec:
         78:d1:61:39:ad:8e:19:6d:6e:e5:d9:78:0b:25:0a:da:e3:0e:
         c9:69:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org