Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/3138392e312e33322e302f32302d3234203d3e203238363633.roa
File:                     3138392e312e33322e302f32302d3234203d3e203238363633.roa (raw, json)
Hash identifier:          ZWq49Sl8MZ48rjj01SevsZC6HQ7RU2175ETIZt8cG78=
Subject key identifier:   D8:5D:70:B4:B2:9B:1A:04:38:C7:25:37:E4:12:E8:BF:57:BE:E5:56
Certificate issuer:       /CN=E105AB76EC1E159F0B8C636B1B58629153C43F24
Certificate serial:       78739446370D8EB073A34E6A9ACA71D0BE4C21AA
Authority key identifier: E1:05:AB:76:EC:1E:15:9F:0B:8C:63:6B:1B:58:62:91:53:C4:3F:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E105AB76EC1E159F0B8C636B1B58629153C43F24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/3138392e312e33322e302f32302d3234203d3e203238363633.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     28663
IP address blocks:        189.1.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:73:94:46:37:0d:8e:b0:73:a3:4e:6a:9a:ca:71:d0:be:4c:21:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E105AB76EC1E159F0B8C636B1B58629153C43F24
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject: CN=D85D70B4B29B1A0438C72537E412E8BF57BEE556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:f3:0b:08:d1:d1:37:ce:35:98:7b:2e:66:
                    fe:e8:ff:8a:c9:b6:29:0f:0d:ce:8b:bf:e5:fb:2e:
                    2a:b1:71:69:e2:ab:6c:dc:a7:82:f7:6f:c4:ff:8a:
                    5f:7f:55:38:b0:4a:2f:24:ff:24:18:6a:55:55:32:
                    36:2a:c7:22:3d:75:d7:15:ff:a6:72:cf:ae:4f:6e:
                    63:9b:d9:ed:ab:61:2f:8e:5f:68:3c:36:41:a7:69:
                    e1:5b:32:bd:9e:da:b5:66:b1:2f:f4:f9:ce:bb:3f:
                    6e:01:9f:79:c6:78:65:d2:ab:13:3a:a9:c9:a6:b6:
                    c1:f9:f9:c2:db:e9:53:9a:51:b5:31:82:32:59:d9:
                    fc:da:11:45:dc:b4:7a:11:c3:4d:51:10:52:1c:83:
                    10:6f:0c:9c:c8:7c:4b:e7:99:63:86:3e:69:a3:77:
                    60:6e:95:c8:1d:33:43:75:7b:13:6f:4e:60:23:c0:
                    e2:c7:3a:da:07:c4:a3:0a:00:4e:a8:36:4a:9a:cf:
                    24:a6:3c:4c:73:d5:f8:a8:bf:cc:3e:41:63:64:d0:
                    7e:9c:57:db:18:de:b4:2b:d3:41:97:a5:2b:db:c2:
                    44:57:f4:b3:d6:70:4f:60:11:31:ce:c4:e6:39:91:
                    d7:72:e0:19:f6:11:63:44:94:2d:e6:f8:bf:ca:74:
                    17:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5D:70:B4:B2:9B:1A:04:38:C7:25:37:E4:12:E8:BF:57:BE:E5:56
            X509v3 Authority Key Identifier:
                keyid:E1:05:AB:76:EC:1E:15:9F:0B:8C:63:6B:1B:58:62:91:53:C4:3F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/E105AB76EC1E159F0B8C636B1B58629153C43F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E105AB76EC1E159F0B8C636B1B58629153C43F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/1/3138392e312e33322e302f32302d3234203d3e203238363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:da:2d:d0:7d:e3:48:86:2e:66:be:00:13:31:54:df:24:9a:
         c5:9b:30:7e:04:53:d5:48:52:4a:c8:c0:78:42:7f:06:a1:a6:
         f3:12:9a:dc:73:64:fb:b8:72:de:58:db:08:61:fe:53:ef:aa:
         09:16:55:65:34:68:ce:9c:74:9b:0c:c1:88:d1:cc:c0:8c:32:
         73:9d:1b:49:c6:24:fe:67:f6:15:ba:9b:cb:c8:58:7d:46:6d:
         36:d3:3d:79:b2:0e:3f:55:14:c9:b9:6a:b4:cf:c4:2e:7b:fe:
         b7:1f:94:c4:da:00:5f:4e:25:74:36:aa:ac:f0:7c:05:a0:b5:
         25:b3:c8:2e:e3:a4:c6:0d:d4:75:13:ff:f1:5a:41:05:61:4c:
         94:ee:bc:49:85:0a:c8:1a:ca:11:e7:ea:a7:92:ea:cc:49:7e:
         55:f9:37:ec:fa:ab:4d:11:73:73:22:c9:e1:55:44:e7:f3:d8:
         55:a7:7d:42:14:85:3d:93:52:84:5d:bb:3d:e8:17:a0:51:cf:
         c4:15:56:74:ff:ad:44:1a:8c:ed:e8:e8:4c:a1:6c:af:d0:a9:
         ff:a8:f8:e5:12:6c:bf:89:8b:02:16:ed:8c:a4:ed:e1:ca:c9:
         6f:2c:57:18:4f:3c:e9:d4:ad:e4:78:41:4c:4a:9d:e1:34:13:
         11:39:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org