Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/3138392e37362e38302e302f32302d3332203d3e203532393037.roa
File:                     3138392e37362e38302e302f32302d3332203d3e203532393037.roa (raw, json)
Hash identifier:          nUnkGjg+uYsY/SWT/waOP801QR0jP/dHFKv2Qukc3rU=
Subject key identifier:   43:30:97:F6:3D:BB:53:BC:D7:D0:02:7F:98:8E:08:AA:E0:AF:8C:17
Certificate issuer:       /CN=EAE540AC049A415FD7667C071C89E2D7422438A3
Certificate serial:       5865D1357C16F79FE05AB466912CA42F16489006
Authority key identifier: EA:E5:40:AC:04:9A:41:5F:D7:66:7C:07:1C:89:E2:D7:42:24:38:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAE540AC049A415FD7667C071C89E2D7422438A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/3138392e37362e38302e302f32302d3332203d3e203532393037.roa
Signing time:             Thu 17 Aug 2023 22:20:59 +0000
ROA not before:           Thu 17 Aug 2023 22:15:59 +0000
ROA not after:            Thu 15 Aug 2024 22:20:59 +0000
asID:                     52907
IP address blocks:        189.76.80.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:65:d1:35:7c:16:f7:9f:e0:5a:b4:66:91:2c:a4:2f:16:48:90:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE540AC049A415FD7667C071C89E2D7422438A3
        Validity
            Not Before: Aug 17 22:15:59 2023 GMT
            Not After : Aug 15 22:20:59 2024 GMT
        Subject: CN=433097F63DBB53BCD7D0027F988E08AAE0AF8C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:8e:de:11:13:f1:4d:dd:3e:41:9e:b9:9d:
                    4c:5c:f3:f4:19:24:8f:a8:c8:13:f7:5b:fd:ae:1a:
                    b6:c2:e3:9d:50:5f:dc:5c:eb:39:32:a6:37:4f:48:
                    19:9d:3e:0f:d7:e2:a3:8b:34:0b:60:a5:85:aa:45:
                    67:41:7b:35:4e:fa:0f:5d:d7:ca:d7:01:a8:be:f3:
                    ec:e6:90:90:ea:ac:f5:36:1c:0d:5c:af:bc:88:bc:
                    b6:82:01:41:6d:b6:bf:08:35:6e:8c:85:7b:1c:16:
                    06:57:e1:1e:26:d7:17:86:23:a4:69:a3:d8:c7:6c:
                    aa:99:24:09:48:ac:1e:cc:5f:b1:40:d1:ae:ff:ef:
                    47:1b:92:b9:8e:5b:71:bd:15:bd:50:0c:b8:71:87:
                    da:ba:93:19:c8:67:53:13:0d:d9:a1:7c:44:dc:fb:
                    43:8b:85:8a:9f:48:8b:11:07:5c:60:e2:a2:99:1c:
                    99:56:51:a2:c8:ff:9b:74:61:a1:bf:f8:ee:7d:62:
                    60:2a:54:b7:f7:83:48:7f:96:c9:d9:e3:d9:6c:e4:
                    15:c3:d6:f6:46:ed:94:f5:31:47:68:1c:ab:24:81:
                    94:3e:a8:0f:4a:68:17:1e:4c:29:77:3c:38:ce:2e:
                    63:17:16:a6:5f:cb:34:3a:99:36:d6:bb:10:43:2c:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:30:97:F6:3D:BB:53:BC:D7:D0:02:7F:98:8E:08:AA:E0:AF:8C:17
            X509v3 Authority Key Identifier:
                keyid:EA:E5:40:AC:04:9A:41:5F:D7:66:7C:07:1C:89:E2:D7:42:24:38:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/EAE540AC049A415FD7667C071C89E2D7422438A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAE540AC049A415FD7667C071C89E2D7422438A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/3138392e37362e38302e302f32302d3332203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:04:16:83:9f:e9:2e:18:a8:dc:c2:bf:4d:b0:78:fd:6d:71:
         34:8d:4f:81:21:1e:3c:43:aa:da:8b:33:d4:8a:b7:b3:b7:58:
         51:48:91:3f:ad:ed:d2:20:b1:26:39:df:cf:d9:3f:1f:2a:18:
         86:15:a6:34:0e:5c:11:24:c8:71:9f:00:96:53:3a:5d:4b:d3:
         89:2b:47:5b:0d:ab:de:ea:07:b8:ac:30:1e:91:4f:38:2c:4a:
         7f:2c:cd:f2:71:d8:ef:66:88:e7:02:64:08:cd:59:15:4d:ec:
         f1:eb:0d:91:8d:5e:3e:bd:fd:60:d2:66:75:72:62:fa:ba:af:
         26:55:c8:06:aa:e0:a3:3a:81:03:ec:04:dd:17:51:4a:85:f7:
         67:8d:a7:b0:55:69:35:8f:98:ea:f2:26:a1:e6:ba:b6:ef:60:
         5f:66:d4:d3:e3:41:dd:99:52:62:e0:54:87:89:c9:0c:1f:6b:
         d8:c0:2f:65:1c:c1:bb:71:cc:12:fe:15:ec:fd:b7:25:a1:1e:
         79:8c:b6:ec:c9:09:b9:6d:a8:75:2b:af:fa:02:47:5a:fa:98:
         45:88:1b:be:36:fb:7a:1b:e2:d8:0b:9c:66:fa:f1:c1:dc:d3:
         8e:78:97:a2:4d:6d:8f:fe:54:a9:6b:7a:dd:f4:53:b8:e6:23:
         89:3e:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org