Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/0/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa
File:                     3138392e32382e3136302e302f32302d3234203d3e203238333030.roa (raw, json)
Hash identifier:          wz+jWbIpmpA/DzPHTcpyvw4xFFSocFZT+s+Q1DU5WeQ=
Subject key identifier:   D5:DB:5C:8C:60:4E:F7:A2:5A:2D:8F:F9:65:A1:42:A0:0C:7E:72:D5
Certificate issuer:       /CN=FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB
Certificate serial:       520BE7BBCCA796AFCBF952773147DED68E69413B
Authority key identifier: FD:F7:E2:D6:B8:7D:7F:E7:60:69:03:8F:05:7C:18:3A:2F:D0:AB:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/0/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa
Signing time:             Tue 14 Jun 2022 12:36:06 +0000
ROA not before:           Tue 14 Jun 2022 12:31:06 +0000
ROA not after:            Tue 13 Jun 2023 12:36:06 +0000
asID:                     28300
IP address blocks:        189.28.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0b:e7:bb:cc:a7:96:af:cb:f9:52:77:31:47:de:d6:8e:69:41:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB
        Validity
            Not Before: Jun 14 12:31:06 2022 GMT
            Not After : Jun 13 12:36:06 2023 GMT
        Subject: CN=D5DB5C8C604EF7A25A2D8FF965A142A00C7E72D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:00:57:ac:3f:53:a4:44:b3:55:07:df:b4:
                    07:30:a4:27:2f:b9:9a:06:49:14:f0:20:c2:72:1a:
                    0a:62:d7:4f:2b:58:f1:77:e8:08:c1:04:1e:2a:81:
                    ac:84:d4:6a:33:fa:f1:e7:11:2d:f3:11:4c:9f:74:
                    69:fc:8e:ca:47:98:56:9b:15:2b:92:3a:73:01:70:
                    d1:11:8c:05:c9:3c:55:c4:28:a0:c9:02:e0:bf:f8:
                    18:18:f7:e7:2d:d0:3a:41:eb:11:52:08:f0:97:c4:
                    b8:aa:c2:39:a1:31:dd:f4:76:e9:a5:41:d7:7b:63:
                    ec:ed:eb:e1:0a:65:3e:24:8f:03:c6:37:0e:05:ac:
                    0a:ff:54:b4:ad:3a:7b:a8:36:76:9a:39:35:ee:e2:
                    96:45:3a:01:9b:a8:c3:dc:d1:c6:69:a1:e5:ea:0c:
                    b3:74:98:e6:b4:aa:90:0e:89:1e:26:79:a5:f9:b8:
                    2e:a7:8a:6f:fe:b5:1d:55:c6:da:bc:31:dc:ba:76:
                    08:eb:0e:d3:22:f9:a9:a4:a5:43:e6:a7:78:84:ee:
                    56:f3:33:c0:de:b6:c0:4b:21:fa:16:b4:e2:e7:67:
                    3d:3f:e8:0d:77:69:3f:da:1b:7c:a7:d1:ac:83:d1:
                    4f:a9:0a:eb:b0:48:e3:8d:58:2f:a7:a6:5c:78:8e:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DB:5C:8C:60:4E:F7:A2:5A:2D:8F:F9:65:A1:42:A0:0C:7E:72:D5
            X509v3 Authority Key Identifier:
                keyid:FD:F7:E2:D6:B8:7D:7F:E7:60:69:03:8F:05:7C:18:3A:2F:D0:AB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/0/FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/0/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:38:e6:6d:0f:89:66:a7:28:14:d2:98:49:bf:74:8d:20:b2:
         16:3f:67:00:dc:82:02:be:75:75:20:cc:b7:23:81:c3:30:53:
         ec:f4:77:a4:39:62:c3:bc:74:97:f3:f1:ac:16:eb:5d:0d:c4:
         58:c6:b7:33:d2:13:a2:45:4d:6f:6f:c2:9f:63:10:2f:7d:14:
         e1:61:52:3c:36:5e:c4:ef:ed:51:28:83:39:ce:fe:34:6c:8e:
         14:e1:15:a2:c7:c7:7b:69:c7:9c:17:c7:78:7f:b2:19:26:a4:
         3b:7f:26:27:20:f9:38:77:11:e6:39:b9:f7:94:87:91:84:53:
         be:5d:d9:e9:ce:4b:fd:83:58:c8:0f:e9:cf:aa:1d:62:af:cb:
         9f:97:ec:65:17:fc:0e:b2:5d:bb:93:82:32:24:34:a6:dd:5f:
         77:d3:15:5e:c1:4c:17:07:b1:1d:be:50:45:1b:2b:b4:54:b8:
         47:0e:77:d2:a3:24:16:ee:a6:23:ef:b4:94:f7:bd:85:5d:c2:
         0d:42:45:6c:01:4c:14:d5:be:52:cd:8d:3e:f2:58:88:d5:aa:
         cc:55:32:85:af:b7:32:66:61:bc:df:c1:83:96:06:7d:79:bc:
         98:77:3b:a1:4c:af:cf:87:07:d9:09:bd:d9:3d:36:9a:9b:6b:
         06:4e:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org