Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3230382e302f32302d3234203d3e203238323130.roa
File:                     3138392e3132372e3230382e302f32302d3234203d3e203238323130.roa (raw, json)
Hash identifier:          Qd0n93KM1sqwBztFL9NyXYygxgXLOklvvm/qWr420CQ=
Subject key identifier:   64:07:C1:2A:39:01:95:01:FF:4E:CE:A3:86:51:58:F6:21:0A:AE:51
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       0617DF914F4E55553ACC69C9778C4BB67BC21077
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3230382e302f32302d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:09:25 +0000
ROA not before:           Sat 04 Mar 2023 16:04:25 +0000
ROA not after:            Sat 02 Mar 2024 16:09:25 +0000
asID:                     28210
IP address blocks:        189.127.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:17:df:91:4f:4e:55:55:3a:cc:69:c9:77:8c:4b:b6:7b:c2:10:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:04:25 2023 GMT
            Not After : Mar  2 16:09:25 2024 GMT
        Subject: CN=6407C12A39019501FF4ECEA3865158F6210AAE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:1c:6c:5f:4b:00:94:b9:6a:81:62:42:da:
                    1d:fd:73:a4:cc:33:89:b4:36:5b:2b:46:6a:b1:ba:
                    04:44:6f:f6:78:39:93:ea:fe:15:02:0d:ac:38:bf:
                    c4:63:a9:d2:c5:8b:63:52:4e:1a:16:81:29:82:71:
                    f5:a5:1f:d3:cd:2e:7d:c6:9d:19:8f:54:1f:ea:59:
                    b4:83:b1:d4:fe:4f:ed:76:3c:2f:cb:44:e6:83:12:
                    eb:f8:05:8b:39:82:2d:8d:52:04:36:34:e5:64:e8:
                    61:24:44:ac:9f:c4:12:3e:87:b5:4f:96:cb:9a:87:
                    84:57:a0:36:a5:fd:32:4f:d2:71:4f:a3:3f:36:7c:
                    ee:51:b6:55:58:60:e6:4d:1c:fb:82:dd:3c:d1:9a:
                    20:1a:39:c6:90:5a:0c:32:83:59:ac:1e:7b:bc:98:
                    a1:c8:b1:9d:c3:a8:fc:94:b3:e0:04:26:05:32:d0:
                    99:f4:c8:7d:2c:35:4e:64:69:89:08:1c:40:6c:21:
                    f8:65:b3:d1:a5:fa:2e:00:16:45:6c:e2:60:8b:fc:
                    75:7f:d5:4c:72:56:7d:f2:0a:ca:b4:d4:3d:48:17:
                    0d:b1:eb:03:e1:a0:26:07:4e:b4:7b:fe:a2:3d:d1:
                    f6:5d:e3:fb:40:ca:3f:59:40:41:36:0c:da:af:a8:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:07:C1:2A:39:01:95:01:FF:4E:CE:A3:86:51:58:F6:21:0A:AE:51
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3230382e302f32302d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:39:ae:dd:6e:c2:74:0a:f3:0b:a9:06:12:5f:e5:b3:5f:
         b0:30:7d:2f:c0:b6:a6:fd:71:05:d6:2d:d0:a9:94:65:4a:41:
         e3:e0:54:40:7d:c4:4f:fb:e2:d4:0c:c0:b7:43:15:f9:48:bd:
         6d:19:3b:0d:ba:7d:0d:0e:f8:a5:36:ce:40:17:89:2a:9b:c2:
         03:5f:70:4e:7d:9f:87:d9:c9:e1:92:66:6c:1f:4b:67:11:71:
         f8:07:6c:5b:0c:e6:bb:47:09:22:fd:47:ff:49:35:2e:6c:83:
         2c:fb:a6:76:81:c9:0f:53:ac:ae:90:14:59:e1:50:8c:3b:67:
         5e:d6:33:3b:2e:c3:17:2d:a6:51:e9:1b:25:12:39:a5:08:2d:
         05:45:cc:a5:fd:67:da:29:24:68:ef:6e:cd:9d:90:fc:5d:e3:
         1b:cb:59:41:9a:fb:dc:49:cb:e5:1a:e0:70:86:a3:60:71:18:
         d6:23:8a:79:9f:15:cd:48:31:72:36:f7:42:29:5d:b8:ae:ea:
         0b:76:8e:89:f5:45:33:69:ad:8d:0b:59:ed:8c:1b:a5:d0:64:
         3c:d9:3a:01:1a:ee:4d:9c:83:d3:d1:57:f1:1c:9d:45:5d:ed:
         37:83:6b:c0:63:e6:df:bb:fa:99:27:ca:f6:1b:a5:0b:5a:43:
         8a:57:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org