Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/0/3138392e33392e3138362e302f32342d3234203d3e20323730373932.roa
File:                     3138392e33392e3138362e302f32342d3234203d3e20323730373932.roa (raw, json)
Hash identifier:          x9xT6x1jVtUpptRMzPuSfNukqj2mbeSvKK4O9bWlZnA=
Subject key identifier:   BF:ED:E3:E8:5D:39:74:9B:53:79:3D:9A:BA:12:D4:F7:A5:DA:67:A8
Certificate issuer:       /CN=A511EA133B1E4AF533E9E68196F99D3B73E96A23
Certificate serial:       51A0B8034EAB201CB83F95DF5D2392A75D5F1A09
Authority key identifier: A5:11:EA:13:3B:1E:4A:F5:33:E9:E6:81:96:F9:9D:3B:73:E9:6A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A511EA133B1E4AF533E9E68196F99D3B73E96A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/0/3138392e33392e3138362e302f32342d3234203d3e20323730373932.roa
Signing time:             Thu 19 Oct 2023 18:11:03 +0000
ROA not before:           Thu 19 Oct 2023 18:06:03 +0000
ROA not after:            Thu 17 Oct 2024 18:11:03 +0000
asID:                     270792
IP address blocks:        189.39.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:b8:03:4e:ab:20:1c:b8:3f:95:df:5d:23:92:a7:5d:5f:1a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A511EA133B1E4AF533E9E68196F99D3B73E96A23
        Validity
            Not Before: Oct 19 18:06:03 2023 GMT
            Not After : Oct 17 18:11:03 2024 GMT
        Subject: CN=BFEDE3E85D39749B53793D9ABA12D4F7A5DA67A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:1e:0c:59:68:6e:79:ee:a6:40:2a:e7:0d:
                    36:1e:60:77:3d:7e:9a:95:86:3c:27:64:66:92:4b:
                    e1:26:89:49:e2:1f:ce:8b:12:65:8d:1e:c9:5b:9e:
                    2a:de:60:52:fc:b9:23:ba:27:e7:80:f8:d6:5b:b2:
                    d3:3d:64:a8:4c:16:22:93:1e:a1:a5:f0:35:a0:8d:
                    75:72:15:5b:df:09:6f:c8:44:8c:42:bc:f7:be:86:
                    a5:67:65:3b:13:77:51:fc:20:1b:e7:2a:8b:4c:91:
                    75:01:20:99:35:e7:24:b6:e6:9d:fb:ef:24:b7:92:
                    0b:fc:7f:12:16:66:76:04:90:f8:5d:cc:97:12:0e:
                    a4:0a:80:5b:b5:ab:9f:fa:2d:04:e1:c0:93:7d:36:
                    3a:cd:01:d7:18:6a:e2:e7:5a:e5:d9:94:5d:e5:8f:
                    21:99:3f:79:24:5b:93:45:a6:05:a5:38:66:d9:0c:
                    7c:ed:78:cc:f9:95:c2:28:cb:21:67:91:3b:3e:d3:
                    fd:02:b2:11:ca:c8:79:dc:70:38:0d:1d:f6:e3:23:
                    c4:a2:13:5f:7f:4f:ee:90:1e:3a:4d:60:88:51:be:
                    d3:ea:b2:b4:82:05:88:7e:cc:13:64:11:60:64:71:
                    67:29:a7:fd:f5:ca:ce:cd:70:23:1a:03:c2:ec:2d:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:E3:E8:5D:39:74:9B:53:79:3D:9A:BA:12:D4:F7:A5:DA:67:A8
            X509v3 Authority Key Identifier:
                keyid:A5:11:EA:13:3B:1E:4A:F5:33:E9:E6:81:96:F9:9D:3B:73:E9:6A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/0/A511EA133B1E4AF533E9E68196F99D3B73E96A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A511EA133B1E4AF533E9E68196F99D3B73E96A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/0/3138392e33392e3138362e302f32342d3234203d3e20323730373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9e:06:5e:6f:32:a8:0d:f9:27:bc:4a:77:c1:c7:06:6f:aa:
         e5:0c:9a:93:24:ea:22:65:c8:87:cd:33:f2:4c:70:1c:ff:fe:
         aa:79:41:f8:d9:4e:5d:e6:41:01:22:7c:46:c2:d5:92:49:7e:
         41:99:87:44:4b:9e:83:49:10:da:00:23:6a:3a:e7:80:40:9d:
         40:7d:3f:2c:a0:44:03:10:fa:ab:89:77:9c:45:e5:b6:52:d4:
         5e:63:0e:1b:97:b1:e2:00:5a:55:70:f7:d1:09:d6:a6:da:1f:
         9e:c6:fa:df:83:8d:06:ab:3e:4a:1e:f0:18:89:c1:b9:a7:bc:
         34:f1:5b:4b:25:f8:a0:08:12:a6:2d:11:1f:36:1a:b4:cc:80:
         12:c1:0c:2d:5d:07:aa:27:ae:85:b1:90:e3:37:36:39:3d:e3:
         57:01:34:b8:d9:70:91:11:5b:de:c4:63:1d:2d:30:af:5d:3b:
         94:5d:59:27:ac:dc:05:31:b3:5d:22:0c:b8:de:57:64:33:9e:
         46:4e:68:96:35:17:16:c0:c8:b8:c9:66:9e:9b:8f:3d:6b:7d:
         f1:bb:32:8e:6a:d5:a7:11:27:25:f3:ca:83:db:d5:17:9a:b4:
         b4:2d:b3:bf:94:95:3a:49:08:f8:9a:49:a6:de:90:49:81:e7:
         2a:64:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org