Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132332e302f32342d3234203d3e20323632383038.roa
File:                     3138392e39302e3132332e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          AoT3iAm06eEurVqqY2Qphb81jCn1hcrFnKDYJCxv2FM=
Subject key identifier:   94:9C:81:7D:AC:BA:17:77:F6:F9:7B:B7:D9:7B:D6:AE:25:21:43:7B
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       688FC7EB6B1E83C92D34D8DA88D7CD04323CD1BC
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132332e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:30 +0000
ROA not before:           Tue 10 Oct 2023 13:52:30 +0000
ROA not after:            Tue 08 Oct 2024 13:57:30 +0000
asID:                     262808
IP address blocks:        189.90.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8f:c7:eb:6b:1e:83:c9:2d:34:d8:da:88:d7:cd:04:32:3c:d1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:30 2023 GMT
            Not After : Oct  8 13:57:30 2024 GMT
        Subject: CN=949C817DACBA1777F6F97BB7D97BD6AE2521437B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:ea:e5:32:21:42:f5:35:50:d6:10:c9:8c:
                    0f:30:a9:de:b9:59:98:3f:1c:50:1f:c1:96:49:e2:
                    83:5e:2f:21:bc:fd:6b:a6:28:3f:16:30:11:79:07:
                    02:eb:fc:5f:ed:65:ee:d5:d0:79:d9:2e:3e:25:2a:
                    d7:9e:4f:54:0f:f6:c5:2a:28:b0:fd:26:5b:3f:b6:
                    ed:99:49:bc:17:c7:a1:b9:d0:5b:db:5d:cb:6e:9b:
                    09:3b:84:1e:98:1d:3f:6e:d3:24:7d:d5:da:bb:31:
                    ac:11:59:c6:03:5f:81:7b:23:e9:c6:fc:b9:9e:7e:
                    f5:30:1a:e9:b3:bb:7a:81:83:1e:cc:ab:aa:9e:2d:
                    77:91:88:b9:89:24:8f:b7:4d:dc:33:87:69:e9:65:
                    e0:bb:5c:cc:fb:79:54:10:f1:f8:27:a4:ed:ad:56:
                    c1:3c:9b:9c:f2:75:7d:3e:bb:b3:25:ee:db:ec:b4:
                    32:9e:a6:18:27:ff:f1:0b:c0:a0:7d:19:c9:3a:bc:
                    8d:3f:2f:3c:40:11:f2:f4:de:47:fa:2a:34:21:f8:
                    50:19:49:87:ef:25:50:eb:4c:2c:37:90:61:1d:30:
                    d4:ed:db:d8:43:9a:7f:2b:74:bc:91:af:56:29:52:
                    89:94:39:80:ad:d8:7a:ef:a6:ba:4e:67:5c:07:66:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:81:7D:AC:BA:17:77:F6:F9:7B:B7:D9:7B:D6:AE:25:21:43:7B
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132332e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:73:a7:8b:5d:73:19:1f:8d:2b:eb:27:2b:b6:fb:c0:2c:fd:
         bf:51:2e:6b:0e:17:5f:5c:52:20:f9:ca:59:33:ad:83:31:8e:
         8e:6c:54:6a:57:03:8c:de:65:d8:5a:ad:d4:2f:dc:78:54:e0:
         92:bb:e1:af:92:d1:9b:12:b7:78:5d:69:7c:af:c4:de:c2:db:
         e0:ed:b9:6b:37:94:f7:09:2c:69:48:8d:aa:ef:f0:f4:b2:0e:
         e2:1a:46:66:a3:ef:1a:ff:ec:4b:b4:4f:be:3b:f4:58:a1:54:
         c7:0a:d3:4e:be:68:cd:dd:42:73:8d:5b:ea:67:33:d6:1d:61:
         1f:71:92:7f:f5:ff:58:15:88:51:a7:2e:e3:ef:2d:1c:32:2b:
         75:94:92:87:61:eb:f2:2b:79:28:99:0b:19:1c:82:66:81:d1:
         1c:03:88:08:7c:5f:30:0e:da:0c:04:e9:24:41:7e:6a:79:0d:
         6e:f7:67:82:42:c4:04:d6:d0:74:0a:0c:ad:eb:f7:64:d2:9f:
         1e:7c:d1:0a:7e:8b:63:78:38:ce:89:ec:c0:e9:f6:05:00:ca:
         78:15:a1:5b:2a:40:2a:eb:54:97:b0:13:24:ef:4b:28:34:fc:
         09:82:a6:15:58:66:bd:b5:67:cb:5e:c2:b2:d6:cc:11:33:55:
         4d:df:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org