Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138392e382e38302e302f32302d3234203d3e203238363639.roa
File:                     3138392e382e38302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          9lq0qkt/INcFG0jOYleMsPt+1u7mvzLn4si6wAmU7Aw=
Subject key identifier:   58:A6:00:A1:3F:E7:9B:9F:11:33:C6:56:37:37:A2:E1:56:35:7D:C4
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       61D11610DEFB5B140B6A8526727A24A0BC4B5D21
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138392e382e38302e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:35 +0000
ROA not before:           Fri 03 May 2024 19:39:35 +0000
ROA not after:            Fri 02 May 2025 19:44:35 +0000
asID:                     28669
IP address blocks:        189.8.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d1:16:10:de:fb:5b:14:0b:6a:85:26:72:7a:24:a0:bc:4b:5d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:35 2024 GMT
            Not After : May  2 19:44:35 2025 GMT
        Subject: CN=58A600A13FE79B9F1133C6563737A2E156357DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:0a:ec:9d:e3:7e:be:4c:0e:12:d1:c9:3e:
                    81:eb:d4:45:40:d2:68:26:79:b6:9a:04:e6:76:aa:
                    77:61:6b:1e:99:fc:a4:1f:17:f2:be:72:28:0d:37:
                    33:43:0e:d5:4b:05:96:71:de:20:a8:e4:f2:3c:ff:
                    98:78:56:4d:0c:a3:a4:19:0c:0f:1b:e3:e8:34:5f:
                    a8:5d:69:8e:88:cc:ce:0c:9d:c3:9d:51:39:0b:c5:
                    6c:8f:05:30:9f:ef:21:1d:f7:1f:02:ba:97:fa:d3:
                    ac:b5:9a:d8:4c:1b:a8:a5:6d:32:79:31:08:72:6c:
                    22:84:78:9f:d7:42:95:51:5b:b2:12:db:c2:6d:b9:
                    73:22:81:fd:e0:8d:58:da:01:24:54:77:bd:89:ec:
                    66:b5:3f:17:46:2b:02:63:eb:e6:c3:0e:eb:7d:cc:
                    08:e8:b7:c1:cf:2c:83:1d:1a:20:92:cd:64:36:66:
                    dc:0c:80:55:64:4f:fc:c2:87:c5:26:56:00:59:fc:
                    03:90:10:5c:3a:ad:ce:8f:9c:c9:da:60:6b:20:0d:
                    9c:73:a0:81:17:9e:36:a2:d7:09:2b:1c:60:b1:21:
                    99:2b:98:bc:59:4e:3a:59:d0:9c:ee:ad:d9:08:6d:
                    4c:ec:a3:9b:4e:84:c5:c4:78:9c:d1:36:5b:cd:4b:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A6:00:A1:3F:E7:9B:9F:11:33:C6:56:37:37:A2:E1:56:35:7D:C4
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138392e382e38302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:98:47:e4:21:10:c0:1b:b7:e4:45:ae:29:e0:68:6f:18:
         46:6d:49:15:38:a0:83:16:e4:25:42:08:10:85:2a:f1:56:ac:
         d9:ef:50:9f:6a:b8:07:1e:d9:12:e1:06:8b:d5:d6:52:7a:dc:
         99:c7:f2:8e:8b:41:c7:07:10:2a:d2:24:72:4b:98:2f:38:ed:
         05:87:9a:fd:b2:06:86:2c:fe:40:58:3c:5b:df:c9:8c:0c:15:
         52:2a:cf:0c:4b:5a:3b:10:2e:ff:40:79:10:39:48:cf:52:52:
         70:c7:a0:70:e0:c0:44:c4:51:17:0b:9b:57:00:d7:3b:c4:03:
         ff:b4:3d:d2:ea:de:09:f0:06:a9:a7:b6:93:5e:69:3b:e3:87:
         31:54:17:e8:cc:03:33:54:cc:66:60:4e:ed:3a:65:33:06:6b:
         a0:cd:f1:86:38:5d:14:ba:bb:85:83:34:72:81:9a:79:b0:0f:
         fd:c1:ff:b5:2b:41:8d:59:79:97:f8:b2:55:fe:a2:38:0d:69:
         b6:4b:c3:2a:5a:0c:b1:76:4a:ec:00:df:9e:a0:ef:1c:bb:26:
         59:71:92:80:24:2b:79:c5:24:ce:80:74:cd:96:66:27:52:2f:
         3e:ca:11:23:bc:4a:28:a3:6a:a4:80:85:13:48:24:ef:08:7f:
         a2:af:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org