Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230362e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3230362e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          gfzIW5TGMxyL9IRhcsvXOBodk/BMiIjFecCr5ZVG5gg=
Subject key identifier:   0C:66:78:28:96:E8:0A:39:DD:D3:2C:E8:C2:9C:BD:ED:03:9A:E3:76
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       20A90DFFA5D1C496BB0969719F8BBA32857B7BA1
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230362e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:54 +0000
ROA not before:           Fri 13 Oct 2023 14:31:54 +0000
ROA not after:            Fri 11 Oct 2024 14:36:54 +0000
asID:                     28352
IP address blocks:        189.51.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a9:0d:ff:a5:d1:c4:96:bb:09:69:71:9f:8b:ba:32:85:7b:7b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:54 2023 GMT
            Not After : Oct 11 14:36:54 2024 GMT
        Subject: CN=0C66782896E80A39DDD32CE8C29CBDED039AE376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b3:a0:a9:dd:84:6e:1e:ff:90:23:0a:ff:6d:
                    ae:11:6f:d9:bd:ae:ec:9d:2a:4f:90:2e:ec:fb:93:
                    7f:be:3f:59:af:81:e6:50:91:6c:76:11:4c:fb:4a:
                    f8:28:46:31:67:90:0a:13:61:da:12:75:a9:b4:ee:
                    23:06:d9:aa:7b:80:0a:66:7e:10:91:45:2f:09:51:
                    aa:1a:2c:c5:bd:1b:db:e4:75:f2:ec:72:05:e6:10:
                    6b:7e:9c:6c:79:90:ad:04:3c:d9:55:1b:08:3a:c1:
                    0a:7d:2b:36:be:dc:63:92:b8:ae:d7:e1:ff:f7:21:
                    da:95:d6:32:6e:29:4f:c7:a6:c5:95:69:91:57:52:
                    6c:8b:49:4b:ce:c1:d3:f7:fb:b2:b5:61:43:79:7c:
                    79:ea:4c:c8:6d:89:f6:25:d3:1d:cd:67:81:47:d3:
                    8a:64:73:48:0c:70:2f:bd:9f:27:06:7a:5a:0f:6e:
                    6f:b3:6a:fc:9e:a5:30:71:bc:c4:8d:64:4c:cf:ef:
                    28:5a:36:da:fc:53:2a:a7:97:b3:8e:36:e7:c1:bd:
                    57:06:a2:cd:e7:f5:7d:d4:50:c5:ee:ff:a7:bf:93:
                    50:fd:7e:de:fd:1d:5b:7a:4f:62:ee:88:18:03:4f:
                    8a:a2:77:31:a8:26:69:9d:c8:12:e2:0d:67:6c:b2:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:78:28:96:E8:0A:39:DD:D3:2C:E8:C2:9C:BD:ED:03:9A:E3:76
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230362e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:b8:9b:94:34:e7:e7:16:04:f3:18:04:10:84:1a:f1:09:
         d8:f9:72:3c:a1:7c:1f:90:43:af:3c:6b:5e:60:ad:00:41:44:
         d5:01:46:cc:53:04:73:13:70:ba:68:61:2e:f5:47:98:92:9b:
         e1:ea:14:31:9e:26:98:db:98:9b:6a:a6:b4:fd:6c:78:c0:81:
         99:9e:2e:f8:a0:a6:46:09:1e:aa:94:e5:b7:e1:23:87:33:3e:
         d0:85:32:39:54:26:e4:f9:60:ec:3e:35:79:1a:9d:9e:c7:25:
         98:c5:71:07:17:04:05:2a:93:4f:83:6e:57:fb:3e:19:78:f0:
         20:ef:60:0b:99:a1:d3:0b:e2:87:c4:93:51:3e:4b:95:2e:aa:
         00:64:40:c9:a5:60:31:44:a8:86:30:61:54:0d:61:d1:42:44:
         df:c9:b6:f3:be:6c:a8:a3:11:5b:71:ed:f7:28:ac:f0:79:35:
         6f:f9:60:b8:31:c6:29:b2:f0:0f:46:fd:57:e4:20:64:04:ff:
         0b:45:33:79:7b:d7:40:08:56:5e:8a:e5:45:79:13:2d:3a:53:
         b3:98:8c:14:4b:d4:a4:5a:65:9a:9f:20:fd:87:54:a2:9d:aa:
         ab:6e:96:fd:43:8e:ab:d6:11:b8:24:c1:3e:ce:2a:bd:b0:62:
         ed:f8:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org