Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa
File:                     3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          9Bca7PYvquxAS+COcCg4Y+bPAdkRC1287kSzZL9tzl0=
Subject key identifier:   16:AF:E0:9C:00:0C:6D:28:86:1F:E2:43:EE:B2:E6:ED:E6:3B:D5:2E
Certificate issuer:       /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial:       55530D2A2ECA199A09533DF185CB86D63353A28C
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 23 Jan 2023 21:42:45 +0000
ROA not before:           Mon 23 Jan 2023 21:37:45 +0000
ROA not after:            Mon 22 Jan 2024 21:42:45 +0000
asID:                     271724
IP address blocks:        189.50.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:53:0d:2a:2e:ca:19:9a:09:53:3d:f1:85:cb:86:d6:33:53:a2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
        Validity
            Not Before: Jan 23 21:37:45 2023 GMT
            Not After : Jan 22 21:42:45 2024 GMT
        Subject: CN=16AFE09C000C6D28861FE243EEB2E6EDE63BD52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:16:24:e6:3b:4f:eb:77:37:be:ea:1c:36:
                    60:c9:71:7b:da:51:13:67:7f:97:6d:c0:84:f2:cc:
                    b0:23:2d:38:4b:86:c7:aa:b7:f1:b3:4d:c0:e1:1e:
                    48:cb:85:a2:95:ae:05:ee:47:4c:a4:15:eb:79:c4:
                    63:af:ed:b1:b5:8e:1f:a1:01:db:2a:55:db:77:3c:
                    41:d9:da:e7:e0:32:95:bf:94:0a:1b:03:59:f4:50:
                    ff:8d:c2:4d:d1:ae:03:5e:fa:dc:d4:ac:77:d6:40:
                    10:73:f0:9a:67:71:69:e3:42:cd:5e:c7:ff:9b:35:
                    12:d8:71:a8:fa:d0:3e:d1:ed:af:08:8e:32:6f:e3:
                    64:2d:71:6a:56:e5:21:61:3e:22:ff:59:e6:14:15:
                    5e:d9:c4:b8:fc:1b:39:f9:41:a3:7a:53:7e:1f:47:
                    9a:c8:a1:16:38:cc:ea:7c:6a:fc:37:1d:ce:74:c1:
                    cb:b2:4f:5e:e6:d7:6e:80:6d:68:66:f7:36:7a:ed:
                    62:27:12:e4:9a:5b:db:26:d5:82:79:5c:3a:18:c7:
                    1b:54:b6:0c:5d:87:3f:8a:dd:59:de:04:f1:41:7d:
                    46:00:06:d0:b1:2c:84:6c:e8:9b:8c:d0:15:56:cf:
                    b0:32:16:bb:c3:4e:2e:67:5b:1b:7b:ec:bc:4a:36:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AF:E0:9C:00:0C:6D:28:86:1F:E2:43:EE:B2:E6:ED:E6:3B:D5:2E
            X509v3 Authority Key Identifier:
                keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:77:e1:af:a9:4b:53:9d:eb:24:d2:f9:27:70:09:1b:60:67:
         bb:0d:35:35:22:60:a4:a8:a7:5c:96:3d:96:e6:80:ef:bb:3a:
         3e:0c:ce:96:59:a9:d7:98:ad:2d:d1:d9:1c:37:31:0f:15:5a:
         32:c8:e5:1b:07:6c:f4:1a:58:05:29:9c:c8:4d:b1:65:79:13:
         7b:5a:67:88:a0:5d:cf:54:f4:e2:2d:e8:f6:ed:3d:f3:81:70:
         8f:8c:5c:1b:d3:87:8a:87:56:70:00:cf:1a:72:da:8c:3c:78:
         13:39:72:bf:c3:ca:c7:ad:62:68:2f:7c:43:a3:8d:1b:a1:7c:
         f7:df:d2:38:b8:7b:f3:90:db:9f:8b:5f:bc:b9:9a:7c:c4:c0:
         fc:f8:67:b2:b1:4c:7a:a9:b9:9b:93:90:da:f4:de:31:5f:20:
         62:c1:47:97:b5:69:81:3d:55:73:c8:5c:cb:63:65:77:0d:34:
         93:03:04:e3:b3:c3:69:73:ab:78:cb:78:dd:45:53:1e:a7:4d:
         08:72:27:b7:b9:2e:2f:7d:41:a7:f5:93:fd:f0:22:c2:25:1b:
         a1:d3:91:a3:37:09:59:71:f5:5b:18:9f:fb:26:62:8e:36:78:
         4c:2b:2d:d5:6b:27:e1:12:6a:a8:4c:4d:22:ad:62:52:b8:f8:
         95:76:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org