Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3131352e302f32342d3234203d3e20323632383038.roa
File:                     3138392e39302e3131352e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          4B8HBcFtYoJBMEK6hFBqoFtiZQZASgHi0Pc4QA9LIIQ=
Subject key identifier:   00:12:09:62:07:6D:F9:A1:7E:28:EE:1F:FD:3C:0C:80:96:B1:23:61
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       31B4F81B4A93ABB6A0E19786661D71577873A445
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3131352e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:23 +0000
ROA not before:           Tue 10 Oct 2023 13:52:23 +0000
ROA not after:            Tue 08 Oct 2024 13:57:23 +0000
asID:                     262808
IP address blocks:        189.90.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b4:f8:1b:4a:93:ab:b6:a0:e1:97:86:66:1d:71:57:78:73:a4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:23 2023 GMT
            Not After : Oct  8 13:57:23 2024 GMT
        Subject: CN=00120962076DF9A17E28EE1FFD3C0C8096B12361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:f3:aa:d8:1b:76:3d:a4:7b:07:99:fb:6a:
                    05:a8:2e:ce:00:fc:46:89:0e:fe:e9:d0:76:4d:95:
                    4d:cc:c3:c0:28:3f:18:76:86:42:87:90:08:7f:b6:
                    b5:d6:77:48:9b:9f:18:a5:19:25:94:13:dd:2d:a7:
                    fb:40:df:ac:31:39:6d:13:fb:d8:0f:fc:21:d0:5f:
                    2b:6f:8b:a5:cc:16:90:b7:ba:05:d1:c0:c7:0b:6d:
                    c3:3c:d6:48:5f:0f:b9:99:db:4b:f2:6c:ae:fc:18:
                    a3:4d:45:5d:2c:be:a8:2b:6b:dc:1b:47:d7:3c:7c:
                    86:dd:0a:86:6d:01:1c:d4:03:b9:d2:8d:20:78:93:
                    fb:8c:09:1a:d2:7d:08:88:a9:4f:f2:6c:26:52:a6:
                    fc:dd:c4:28:66:7b:e0:9a:92:be:00:4d:df:a6:5e:
                    2f:0c:ea:57:f0:dd:87:81:95:00:9d:6c:a9:2d:62:
                    1a:19:0c:85:7f:d2:6d:7b:d9:9d:96:e4:70:23:c5:
                    3d:70:52:dc:98:e2:58:67:73:96:45:77:95:b6:89:
                    4a:c8:52:b3:2c:0a:56:a7:fe:d6:0b:34:99:74:57:
                    7e:45:7d:cf:59:98:95:2c:7d:dd:91:dc:9d:75:8a:
                    8c:ee:ca:d9:53:e6:00:31:a8:50:e8:f9:49:54:9a:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:12:09:62:07:6D:F9:A1:7E:28:EE:1F:FD:3C:0C:80:96:B1:23:61
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3131352e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:74:1c:bf:f6:1d:8d:6c:2a:ed:13:84:4a:fd:80:7a:21:1f:
         b5:0f:e5:c7:ea:ac:dc:32:83:a4:f9:a3:34:c6:dc:a9:3b:cf:
         d5:01:71:70:22:ce:36:f6:a1:c4:23:56:b6:8c:4b:44:7b:42:
         19:bd:08:b9:b8:55:5e:41:f3:9b:d5:51:6b:a0:13:0d:b2:23:
         79:e3:df:31:97:d6:93:b9:09:2f:b3:95:9e:3e:61:9d:04:57:
         4a:4b:23:a2:ef:af:9a:4e:29:dc:0f:11:e7:42:95:0d:91:d5:
         f3:80:31:30:47:af:ff:52:45:99:e6:be:c0:e7:f9:b1:a6:88:
         32:f5:93:8a:e8:e5:18:de:8a:8e:c1:19:ec:ea:20:63:3c:49:
         4f:d9:6b:d4:d6:9e:00:a6:1a:92:87:15:5f:01:0d:a6:54:47:
         51:4c:5e:f9:a9:0f:e1:bc:90:c0:e3:8b:65:cb:2e:c4:3e:98:
         5c:36:a0:33:ac:0e:c2:04:3f:5a:f4:2f:be:b3:fd:d7:05:a7:
         19:24:8d:47:5f:47:91:77:af:7c:45:4b:c1:d4:c3:0a:4e:11:
         6b:7c:a6:d6:12:57:a7:9b:55:39:94:11:73:84:bc:d8:b6:c8:
         5c:f5:4d:1a:d8:a0:66:5b:43:aa:1b:44:5b:6b:c5:8e:d9:89:
         0f:76:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org