Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132302e302f32342d3234203d3e20323632383038.roa
File:                     3138392e39302e3132302e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          4rJF6iVUGgg9L1hoX0C6V/UnNzsBJ+xzj3SrHY2e0xQ=
Subject key identifier:   DD:4D:4A:98:17:06:F2:70:49:79:04:71:AE:5F:87:4A:6F:BC:F2:D2
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       120016B393EB7BE212779C9C2086B99B19B212CA
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132302e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:26 +0000
ROA not before:           Tue 10 Oct 2023 13:52:26 +0000
ROA not after:            Tue 08 Oct 2024 13:57:26 +0000
asID:                     262808
IP address blocks:        189.90.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:00:16:b3:93:eb:7b:e2:12:77:9c:9c:20:86:b9:9b:19:b2:12:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:26 2023 GMT
            Not After : Oct  8 13:57:26 2024 GMT
        Subject: CN=DD4D4A981706F27049790471AE5F874A6FBCF2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:e0:27:0a:5f:0c:90:77:da:bf:38:7a:e1:
                    cb:00:f5:f0:f1:22:96:4a:98:8d:39:60:99:b0:27:
                    5a:1a:2d:c9:69:9e:47:2a:1b:07:a7:8f:70:95:d3:
                    13:b0:f7:00:79:e7:08:0e:c3:ca:42:e2:f2:cf:9c:
                    3b:db:d1:cc:fd:eb:7a:22:08:76:57:de:3f:c3:53:
                    b0:e0:08:fa:11:f5:9d:31:96:9c:3c:68:9b:c4:82:
                    cc:d2:ae:ac:72:b6:5b:63:16:6d:77:3b:1d:40:2c:
                    f7:1b:d1:2e:27:d3:dd:56:91:ca:92:84:3e:cf:ea:
                    5f:f0:1f:db:77:ce:a5:62:5e:32:3e:48:5e:69:b3:
                    40:70:2e:4e:c4:d9:e5:20:9f:e2:64:36:c6:d7:83:
                    cf:15:79:ea:18:c6:f3:d2:7c:c1:46:d9:eb:c8:7c:
                    78:60:64:ec:c4:d6:fe:55:83:1f:84:e0:5d:57:7b:
                    6b:e6:5d:f3:d2:76:df:da:88:dd:b5:cc:c1:d3:d1:
                    d8:63:0f:53:0a:4e:2a:85:c3:f6:9b:8f:c5:13:67:
                    29:8f:89:13:ed:e4:27:66:7c:6c:4d:60:c7:ae:a7:
                    08:0d:e0:66:05:b4:fb:c5:e0:f8:26:c7:8f:13:a1:
                    7c:53:8d:36:cf:0f:76:69:8e:32:75:c4:a9:5e:23:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4D:4A:98:17:06:F2:70:49:79:04:71:AE:5F:87:4A:6F:BC:F2:D2
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132302e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:69:c1:64:c0:41:43:5b:24:00:6f:80:8a:b6:ee:ce:43:cc:
         78:a1:9c:73:46:92:b0:5b:de:33:6f:c4:a3:8a:ac:57:d5:2c:
         61:9b:18:d5:34:29:0e:01:28:05:36:f1:a9:cd:f3:a2:4a:fd:
         e1:ff:cb:6f:53:26:b3:10:54:6b:30:05:75:26:09:a6:04:83:
         d1:da:52:71:f5:59:27:74:02:b0:52:9f:de:2b:f6:8e:fd:e3:
         13:a6:84:1f:fd:eb:e8:74:b8:cf:6f:cf:1f:99:b4:f0:6e:00:
         a8:21:63:a4:5a:26:0a:04:cc:89:83:60:e1:3c:63:61:5d:45:
         60:72:a4:87:27:ef:ab:96:7a:55:3f:ca:16:f3:68:60:f4:2c:
         ac:6f:8c:cd:db:16:e9:67:e3:35:ef:29:4b:76:c1:2b:84:57:
         6a:44:bb:5a:54:29:4d:e4:eb:5d:2f:76:9a:1b:d5:aa:19:e4:
         30:71:08:85:78:79:58:9d:85:af:6a:96:22:e1:7b:7b:fb:d6:
         25:41:60:b5:ac:36:d0:0a:0c:8c:14:d0:d0:cf:46:27:7f:93:
         90:85:3a:ff:de:2e:3d:8f:c2:77:4d:45:df:c1:b3:b4:bf:33:
         39:ff:41:7c:28:0c:95:2d:0a:86:d8:ea:61:2b:93:ed:ad:68:
         e9:89:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org