Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3131342e302f32342d3234203d3e20323632383038.roa
File:                     3138392e39302e3131342e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          zVvMh6WizOXn9p5Fz+D3H/Hi0l57gpSByJgVpb+I4WI=
Subject key identifier:   60:50:85:27:52:A0:CE:5F:BA:F2:65:DA:6C:00:70:F5:DC:75:60:87
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       CBA86C2F53FC96FB767DEF9D225BC9E233B14C
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3131342e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:27 +0000
ROA not before:           Tue 10 Oct 2023 13:52:27 +0000
ROA not after:            Tue 08 Oct 2024 13:57:27 +0000
asID:                     262808
IP address blocks:        189.90.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cb:a8:6c:2f:53:fc:96:fb:76:7d:ef:9d:22:5b:c9:e2:33:b1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:27 2023 GMT
            Not After : Oct  8 13:57:27 2024 GMT
        Subject: CN=6050852752A0CE5FBAF265DA6C0070F5DC756087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:18:02:04:0d:f0:6a:85:e5:27:76:65:1d:
                    fa:38:29:c7:bd:de:7d:f3:ab:c9:44:33:94:6a:2f:
                    d7:8f:a4:8a:a4:43:1c:9e:49:a4:71:ca:26:30:a1:
                    fc:2a:22:43:dc:80:f5:15:b2:54:ec:6a:40:ce:39:
                    d4:4f:52:e1:fd:40:5b:a7:69:32:d5:9c:7c:b4:5f:
                    e6:40:5d:54:ec:19:24:55:ac:9a:e5:0c:ea:37:87:
                    67:19:e4:14:66:2c:61:e8:64:7a:4d:ee:9c:3f:47:
                    73:74:ce:56:7d:d1:d6:e5:ec:58:57:7c:82:aa:e5:
                    9f:c8:a3:77:c4:f9:47:02:71:63:9e:6e:f6:bf:a2:
                    10:1b:10:8c:24:23:bc:14:ab:85:b2:59:ff:00:8d:
                    cc:89:d7:9a:a2:64:bf:04:a7:69:96:a1:b6:5a:27:
                    c1:7d:6d:f8:61:45:7c:a5:b1:ab:42:aa:74:8b:f5:
                    c1:d8:8c:84:4a:ba:f1:a5:28:fc:e9:7e:de:a9:fb:
                    17:fc:17:a4:70:c8:f1:9d:49:7e:cc:2b:20:fe:0c:
                    86:c5:28:f9:bd:9b:fa:04:0e:48:a8:34:c4:8f:f1:
                    78:f9:2c:6f:d1:65:76:03:1e:11:47:80:61:ae:2c:
                    86:21:d4:92:b7:d3:32:68:05:4f:f5:7b:61:70:5c:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:50:85:27:52:A0:CE:5F:BA:F2:65:DA:6C:00:70:F5:DC:75:60:87
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3131342e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:22:20:6a:a9:00:ad:ee:3a:a9:ca:72:47:c7:54:3d:86:
         19:72:e0:8f:5a:67:1c:96:84:10:4e:d5:b9:7b:c0:27:ca:ab:
         b7:d8:5e:1d:d6:3b:6b:50:58:36:aa:c8:46:eb:a3:b4:6d:b0:
         a1:a5:87:99:a8:c6:cf:b5:24:fa:6c:44:52:16:bf:1d:d2:bd:
         12:f8:b0:65:e6:c8:58:4a:3e:02:6b:56:0f:d8:82:48:de:6f:
         0e:e2:97:75:16:8d:71:61:6d:42:ab:44:f8:c1:b7:de:c4:36:
         10:ec:b4:70:c6:ef:6d:82:64:eb:be:b9:50:e2:99:ad:2e:b9:
         0b:6c:69:29:28:5b:49:17:26:c1:09:67:f6:b8:55:c5:4f:88:
         b9:ae:bd:0e:6f:06:81:6f:56:1c:0c:e5:bc:a6:a2:4f:1a:d7:
         78:ec:05:c4:78:ec:3b:69:24:5e:39:cf:13:37:7f:86:5b:fb:
         0e:1d:cb:69:55:62:c4:2b:38:7f:b6:fa:d3:e4:95:69:d8:69:
         69:05:9d:f3:00:b6:91:7e:03:9c:a5:4d:94:85:42:55:0c:d9:
         22:26:ac:1a:1f:ef:9f:d2:0b:24:a8:f9:06:6c:83:02:4f:a2:
         2d:98:bf:f1:da:f2:27:f3:d2:81:62:4b:40:33:83:4e:76:94:
         71:16:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org