Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa
File:                     3138392e32382e3136302e302f32302d3234203d3e203238333030.roa (raw, json)
Hash identifier:          0fVUDLwHDHdGSQA6FJJlBX35UoL9yKvcsOPjVpx4WrI=
Subject key identifier:   6E:96:DE:54:4E:A4:FD:25:DB:DB:D2:F9:EE:EE:6F:DF:26:91:55:33
Certificate issuer:       /CN=34BD768B65C97BD03F40D833E018BBE743046FE2
Certificate serial:       551EDDF231A792E5B16DA9A2C8785EA2AA139BE9
Authority key identifier: 34:BD:76:8B:65:C9:7B:D0:3F:40:D8:33:E0:18:BB:E7:43:04:6F:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BD768B65C97BD03F40D833E018BBE743046FE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa
Signing time:             Fri 05 Apr 2024 01:11:06 +0000
ROA not before:           Fri 05 Apr 2024 01:06:06 +0000
ROA not after:            Fri 04 Apr 2025 01:11:06 +0000
asID:                     28300
IP address blocks:        189.28.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1e:dd:f2:31:a7:92:e5:b1:6d:a9:a2:c8:78:5e:a2:aa:13:9b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34BD768B65C97BD03F40D833E018BBE743046FE2
        Validity
            Not Before: Apr  5 01:06:06 2024 GMT
            Not After : Apr  4 01:11:06 2025 GMT
        Subject: CN=6E96DE544EA4FD25DBDBD2F9EEEE6FDF26915533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:be:2f:a7:f9:96:99:50:55:5a:a1:79:59:94:
                    f7:2e:ae:62:26:c0:2f:b7:cb:22:32:23:9d:36:20:
                    97:0a:97:59:5a:3f:c0:7e:d9:00:b6:b8:6a:e3:a9:
                    aa:e3:a7:f1:5d:d6:10:eb:b2:99:c4:a0:c1:c8:ca:
                    d8:ce:9c:8c:34:a5:3a:10:eb:d7:6d:92:3f:68:8e:
                    f6:02:8a:0c:94:33:2b:80:ce:12:c1:6f:cb:1b:56:
                    c7:c5:8c:b1:e4:71:0c:89:60:42:bc:27:76:8f:25:
                    8b:fd:01:b3:69:00:13:1c:e3:f3:5a:39:f7:4f:79:
                    2f:14:21:c4:51:be:94:89:7f:e9:f6:c7:1a:57:56:
                    e5:76:26:ce:a8:2e:e0:99:5d:09:51:eb:58:64:01:
                    36:47:96:73:2c:61:c1:4e:1a:ce:65:a0:b8:76:94:
                    b9:90:4a:f6:99:9c:36:c3:09:0a:b4:ae:5d:df:94:
                    c5:7c:6e:98:42:40:3a:b2:cf:fe:34:33:6f:dd:1a:
                    6f:14:93:64:57:c0:1c:ee:4d:2d:d5:af:81:38:88:
                    26:a7:3b:59:67:2f:a5:d9:d3:2d:c8:c1:0e:b1:9b:
                    fc:2e:45:1e:4d:12:07:ce:57:3e:1f:1f:73:cf:d3:
                    a4:f2:4d:03:d1:45:49:3c:06:14:f6:42:de:0d:f9:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:96:DE:54:4E:A4:FD:25:DB:DB:D2:F9:EE:EE:6F:DF:26:91:55:33
            X509v3 Authority Key Identifier:
                keyid:34:BD:76:8B:65:C9:7B:D0:3F:40:D8:33:E0:18:BB:E7:43:04:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/34BD768B65C97BD03F40D833E018BBE743046FE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BD768B65C97BD03F40D833E018BBE743046FE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:ec:6e:56:4c:1a:e4:0d:94:ae:f3:53:07:20:76:a4:75:c4:
         18:c1:df:f0:a8:ca:66:b2:1c:d1:7f:12:c4:71:eb:1b:8b:f5:
         e9:f0:91:90:2b:7a:26:06:c8:81:e8:ba:3c:10:3c:2a:59:f8:
         91:aa:35:a2:86:7e:fd:1a:2d:2a:20:d0:c6:6f:6a:88:50:1d:
         1f:4c:4c:99:04:d5:39:6b:e7:9b:b6:7a:15:16:2d:00:a9:8e:
         6b:1c:07:2c:41:62:3a:4a:78:23:6a:e1:e6:bb:00:07:bf:cd:
         af:6b:4b:44:55:85:0c:ad:ee:cb:be:df:f4:ca:9b:b6:64:98:
         96:e4:70:01:eb:f9:16:e3:f2:14:81:85:34:61:41:bc:f5:48:
         9e:88:db:e1:dc:98:25:c8:89:91:d8:7b:e0:09:76:15:11:15:
         c9:3f:cd:f0:15:a1:6b:bb:73:a5:fd:d2:d1:e1:af:40:c8:4f:
         a9:24:1f:cb:3c:45:3f:cd:3d:9f:68:9d:77:5d:25:b3:95:14:
         c0:10:ef:de:b4:b9:1d:eb:34:94:88:b4:3c:de:5f:ad:33:b9:
         0c:95:3f:f3:e2:83:89:ac:f8:b2:24:dc:6a:82:a9:94:94:ed:
         90:17:68:67:06:13:90:1a:04:82:ca:d5:89:37:8e:a1:15:ec:
         94:0e:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org