Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
File:                     3138392e32382e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          1bb0OzTB1i6n/Yq/sO21K2PBcFHW0xYvVkBvW6ib81o=
Subject key identifier:   33:90:DF:29:1A:18:29:0E:03:06:A8:A9:A9:01:A6:DD:E4:B5:F4:FB
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       0AEF1855F4B454A45A400EED9CFE0B70F552D9C1
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:40 +0000
ROA not before:           Fri 03 May 2024 19:39:40 +0000
ROA not after:            Fri 02 May 2025 19:44:40 +0000
asID:                     28669
IP address blocks:        189.28.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ef:18:55:f4:b4:54:a4:5a:40:0e:ed:9c:fe:0b:70:f5:52:d9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:40 2024 GMT
            Not After : May  2 19:44:40 2025 GMT
        Subject: CN=3390DF291A18290E0306A8A9A901A6DDE4B5F4FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:a2:89:99:e8:dd:57:e1:9d:58:c1:71:f8:
                    1e:13:9a:ed:21:b9:fe:80:fa:73:0f:db:11:30:57:
                    0d:32:d1:b4:cb:ad:95:dd:b5:14:5f:6d:49:d6:9b:
                    a1:15:57:fb:4b:8a:e5:3e:00:6a:98:4d:7a:ea:69:
                    70:44:38:09:88:e5:1f:ee:7e:c6:ad:7e:ab:a6:f1:
                    b3:3c:2b:a3:34:6a:6a:93:cf:2c:95:2b:da:d8:c3:
                    39:3f:4c:81:60:c7:66:e2:39:52:31:86:a4:9a:10:
                    af:d6:e9:fe:be:1e:b6:ba:62:34:2b:7c:2d:1f:c1:
                    ff:7d:d0:e1:79:12:b0:d5:d3:74:8f:fe:67:0d:08:
                    22:09:17:bc:a0:10:79:a9:35:4b:5b:7c:87:bc:d9:
                    77:c8:3b:16:c7:bf:96:93:76:e8:5b:07:b4:86:34:
                    f3:33:39:ac:fc:20:bc:ec:59:0e:bc:ae:7c:18:63:
                    ef:9f:3b:6f:23:b0:b1:67:69:17:ef:2d:85:38:e2:
                    1f:f4:fa:8f:0b:48:e8:d7:28:14:8f:57:6c:2d:aa:
                    c6:b5:cb:0a:89:f0:5a:87:96:f7:e8:6e:88:71:f8:
                    fc:15:40:12:52:d1:8a:ca:e0:64:e4:f2:0a:b1:8f:
                    62:73:80:73:c9:8a:ea:d4:62:87:cd:b5:e9:0e:8f:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:90:DF:29:1A:18:29:0E:03:06:A8:A9:A9:01:A6:DD:E4:B5:F4:FB
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:6d:8d:72:2c:27:22:a0:09:a8:8c:de:fe:6e:bd:d2:65:
         4a:c0:87:82:d2:9c:21:4a:be:10:b4:10:45:1d:fd:86:20:5f:
         52:2e:34:47:ce:2a:d8:94:00:c7:f3:11:59:44:b9:df:b2:d6:
         2c:ae:30:43:82:39:cc:f9:b8:91:a0:f8:d9:cd:08:da:a1:db:
         99:dc:dc:1b:b7:03:f0:3f:05:3d:0b:b0:95:87:17:e2:08:4b:
         2d:f1:d5:49:5b:ed:2e:ce:41:68:10:b9:cc:3c:ad:5f:17:c5:
         94:86:7b:13:a4:63:86:21:9e:e4:83:74:4c:e7:19:c7:24:29:
         b8:db:25:7f:4a:a4:55:43:c1:aa:79:92:bd:cb:2b:9f:03:3f:
         51:a2:5c:2c:6d:e9:16:7d:bc:4b:74:df:08:1d:b9:30:43:ea:
         97:f1:17:52:33:2f:20:28:ce:ff:66:d2:49:80:ad:df:a4:4d:
         0c:8c:9a:02:8d:c1:02:b2:8e:ac:dc:50:77:50:d2:a8:40:a8:
         49:ba:f4:d5:60:3d:f1:eb:f9:7c:fe:28:ce:a2:ee:a0:c4:86:
         ac:4a:01:fd:7f:18:bb:79:2b:b6:19:8d:d7:43:a9:b2:34:0a:
         95:14:1d:ff:0e:33:fc:4b:8e:80:e1:27:5b:79:69:79:4c:de:
         d5:62:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org