Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa
File:                     3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa (raw, json)
Hash identifier:          dJTL2BRL5IZTKWP++wBhggaTJrpmkCsXJeoGCSyyqtY=
Subject key identifier:   4C:91:BC:8F:90:BC:BC:52:64:A7:D5:37:A1:D2:4B:2A:42:BD:D1:C4
Certificate issuer:       /CN=42009413094777E86D462A87543681113F5E42E8
Certificate serial:       3C339A727785C010FEC41AF298E540B42005CA3D
Authority key identifier: 42:00:94:13:09:47:77:E8:6D:46:2A:87:54:36:81:11:3F:5E:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42009413094777E86D462A87543681113F5E42E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa
Signing time:             Thu 13 Jul 2023 19:00:00 +0000
ROA not before:           Thu 13 Jul 2023 18:55:00 +0000
ROA not after:            Sat 13 Jul 2024 19:00:00 +0000
asID:                     270770
IP address blocks:        189.127.138.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:33:9a:72:77:85:c0:10:fe:c4:1a:f2:98:e5:40:b4:20:05:ca:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42009413094777E86D462A87543681113F5E42E8
        Validity
            Not Before: Jul 13 18:55:00 2023 GMT
            Not After : Jul 13 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:5a:35:09:c8:19:7f:32:ee:ad:66:ec:4d:
                    d3:8f:4c:9d:0c:d7:fb:07:c6:de:43:69:4b:f6:c6:
                    66:f4:0c:78:82:94:c4:ae:90:21:65:e6:ac:71:4a:
                    8d:d4:e3:43:20:0c:8e:68:29:9e:97:62:00:b3:ff:
                    9a:51:5e:eb:03:35:86:0d:31:25:7b:82:a9:b5:1b:
                    83:cd:80:51:32:8a:07:8c:10:b1:92:47:9c:d4:db:
                    2a:e6:85:68:56:cd:a8:0c:06:94:06:0c:75:20:81:
                    59:e1:f6:a7:be:0b:f8:80:e0:7f:55:6f:26:87:9e:
                    e1:c0:1d:fa:f4:5b:7d:8c:5a:32:1f:82:d9:75:b3:
                    3b:bb:4c:87:e9:64:27:c5:92:68:2e:c7:c9:43:96:
                    8b:d2:be:7b:9f:22:da:07:3d:33:96:76:17:88:c0:
                    af:a6:59:36:13:f4:53:d8:f1:bf:f6:06:a2:c0:86:
                    93:0a:35:d2:8d:92:65:8e:b8:48:d5:05:8a:65:93:
                    7c:b6:f7:ca:1a:e5:33:92:34:bf:d7:78:09:9b:5a:
                    a7:49:8a:55:a9:6c:93:a1:58:dd:ff:d8:45:0f:e5:
                    73:b4:ef:b1:e4:e8:86:73:9e:0d:ea:b7:8b:39:62:
                    f0:5c:d1:7b:5b:91:2c:14:70:c9:91:81:a0:6a:60:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:91:BC:8F:90:BC:BC:52:64:A7:D5:37:A1:D2:4B:2A:42:BD:D1:C4
            X509v3 Authority Key Identifier:
                keyid:42:00:94:13:09:47:77:E8:6D:46:2A:87:54:36:81:11:3F:5E:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/42009413094777E86D462A87543681113F5E42E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42009413094777E86D462A87543681113F5E42E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:be:30:5d:16:b5:f6:e1:bd:26:b8:2a:34:5a:13:25:3a:d7:
         30:9d:3a:ff:81:ed:68:a7:b1:58:4e:a6:8b:7d:f0:c4:43:35:
         7e:8a:ad:29:05:51:48:52:f9:2d:f7:0d:e9:c9:f9:78:51:6f:
         bc:55:fa:41:34:51:9a:70:82:f9:24:26:a6:51:ce:a4:94:3c:
         a4:f9:76:69:2a:19:07:dc:15:c2:d0:b6:46:87:85:a9:d6:44:
         8c:ed:a7:fd:8b:61:0c:aa:e6:d2:cf:39:15:02:f8:fe:62:6c:
         13:4a:5c:b9:cb:3b:00:5f:0b:b1:9d:21:b5:39:0f:bf:22:81:
         22:f3:17:cb:81:60:45:62:23:75:48:d5:98:06:22:51:e4:59:
         f8:c9:9a:3c:4e:09:14:3d:5d:ed:9f:32:58:94:e9:1e:1a:d1:
         60:60:54:b8:18:07:a8:68:38:08:57:a4:ba:2d:48:64:f1:fd:
         6c:bd:2e:90:7b:ae:8a:54:a6:40:6d:1f:ec:ec:28:3d:c1:4f:
         93:84:95:ef:a6:76:02:85:cc:45:a3:bb:a3:d3:8b:3e:d5:dd:
         e8:7e:46:8b:ad:a2:c5:bf:ce:6d:b0:75:07:38:60:48:7a:82:
         67:ba:da:ab:78:34:0c:32:4b:57:56:e3:01:c8:30:37:e3:86:
         70:29:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org