Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/3138392e35312e33322e302f32322d3232203d3e20323730373234.roa
File:                     3138392e35312e33322e302f32322d3232203d3e20323730373234.roa (raw, json)
Hash identifier:          SOkqWDNhnmjnyJOI8TI18x/SFz1vKun0rXsp5oZJdTo=
Subject key identifier:   17:D8:1E:9E:21:13:EF:B3:18:09:AD:8B:2A:CF:25:07:33:B4:A2:42
Certificate issuer:       /CN=489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640
Certificate serial:       44910DA78EF3770DC6B3BC58173B258BAE153274
Authority key identifier: 48:9C:8F:0A:8E:BB:2E:30:A2:4E:0E:C9:1B:9B:B8:31:17:F5:F6:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/3138392e35312e33322e302f32322d3232203d3e20323730373234.roa
Signing time:             Wed 05 Jul 2023 17:58:28 +0000
ROA not before:           Wed 05 Jul 2023 17:53:28 +0000
ROA not after:            Wed 03 Jul 2024 17:58:28 +0000
asID:                     270724
IP address blocks:        189.51.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:91:0d:a7:8e:f3:77:0d:c6:b3:bc:58:17:3b:25:8b:ae:15:32:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640
        Validity
            Not Before: Jul  5 17:53:28 2023 GMT
            Not After : Jul  3 17:58:28 2024 GMT
        Subject: CN=17D81E9E2113EFB31809AD8B2ACF250733B4A242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:5c:e1:e1:31:e8:b7:49:14:a9:ff:b4:88:
                    bd:46:d8:30:c7:d6:71:66:0b:4c:4d:b8:0c:f1:c5:
                    c7:9b:9c:c0:01:f2:b1:2a:8b:0c:a7:80:df:32:cc:
                    84:14:b1:91:49:d5:20:1b:4c:de:4e:70:31:f6:97:
                    64:f9:db:d9:f7:22:16:53:16:89:77:e2:45:82:67:
                    43:0a:31:55:e0:0c:9c:63:bc:72:a2:ca:0e:f0:57:
                    36:7e:6c:74:d3:ec:72:82:24:af:f8:ba:fd:46:9b:
                    91:b4:0a:86:0c:d7:95:c4:4e:4e:34:d3:d0:d0:2a:
                    8c:b1:7b:a6:f0:53:a8:73:81:c4:bb:ae:12:f2:c5:
                    1f:e6:28:dc:7c:7d:a7:95:47:76:b5:53:20:22:7b:
                    22:86:86:ff:ef:60:4e:db:f3:ee:f0:b0:38:3c:cc:
                    17:96:e6:69:ae:fe:a4:23:7e:56:04:c9:60:72:f7:
                    7a:0f:10:11:fe:03:0a:e4:10:73:29:bd:f4:4b:c7:
                    1b:5a:63:66:e1:9a:6a:7d:61:b4:a7:51:19:28:70:
                    d9:f8:50:95:59:13:4e:5d:5a:f5:bb:39:ac:21:e4:
                    33:f2:8b:db:32:ad:23:c3:28:b8:68:b7:d0:a2:de:
                    6c:19:37:2e:e3:4d:92:99:73:7d:05:31:12:a4:58:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D8:1E:9E:21:13:EF:B3:18:09:AD:8B:2A:CF:25:07:33:B4:A2:42
            X509v3 Authority Key Identifier:
                keyid:48:9C:8F:0A:8E:BB:2E:30:A2:4E:0E:C9:1B:9B:B8:31:17:F5:F6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/3138392e35312e33322e302f32322d3232203d3e20323730373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:8a:26:60:5c:56:57:99:9a:78:47:96:9a:ef:7d:67:69:
         ad:17:ba:cf:13:af:bd:be:ae:c2:ff:ce:0c:c0:d5:0a:81:51:
         72:0f:46:f2:69:a3:ed:1f:d0:4c:ed:51:e7:e7:b2:ce:b8:79:
         a2:d9:74:95:4f:61:19:60:3b:ec:38:d7:55:69:f2:93:0f:a4:
         d2:3e:a1:c5:96:8a:52:7a:4c:c6:9c:5b:06:dd:aa:45:c4:b2:
         b9:74:e2:96:69:ab:ee:b7:36:be:04:6b:9a:c6:55:ba:26:7d:
         57:d9:3d:3a:81:92:73:73:f2:df:f5:9d:d2:c1:f7:2b:4f:74:
         bd:3f:12:db:20:e7:3c:6c:be:7a:cd:f8:6d:d1:2b:86:5d:82:
         00:aa:2d:8d:9b:bf:38:ae:e8:26:32:ba:9c:f6:9f:7e:63:3d:
         9d:4e:dd:29:d0:84:16:d7:37:a7:75:4a:a1:4e:8a:b3:5b:7e:
         39:47:dc:ab:c4:2f:e8:a0:4e:fd:32:5b:09:c9:f1:52:f7:e5:
         bc:a8:d8:ba:07:2f:2e:cd:61:46:0f:a8:40:ad:25:f8:90:cc:
         1a:03:01:6d:1a:ec:a5:08:28:0f:18:c9:a3:a3:de:e6:10:c7:
         40:d0:36:67:dc:de:ab:01:dd:a4:5b:c3:2e:b4:96:2a:96:fb:
         0f:4b:d2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org