Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132362e302f32342d3234203d3e20323632383038.roa
File:                     3138392e39302e3132362e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          RGcuH9c382nNk2MlDqQ5pooHqTuBbPqWV8TWiNO9kg0=
Subject key identifier:   0E:91:AC:39:03:FD:D4:70:2F:B7:12:FE:7A:C9:F9:53:B1:E0:2B:64
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       25F271C88E0672F6A7822DA0E58610C428D967FB
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132362e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:25 +0000
ROA not before:           Tue 10 Oct 2023 13:52:25 +0000
ROA not after:            Tue 08 Oct 2024 13:57:25 +0000
asID:                     262808
IP address blocks:        189.90.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f2:71:c8:8e:06:72:f6:a7:82:2d:a0:e5:86:10:c4:28:d9:67:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:25 2023 GMT
            Not After : Oct  8 13:57:25 2024 GMT
        Subject: CN=0E91AC3903FDD4702FB712FE7AC9F953B1E02B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:c6:b9:ec:78:46:d2:89:4b:aa:bd:42:30:
                    aa:50:1c:fd:72:3d:1c:98:95:71:97:3d:08:07:28:
                    7c:77:ec:f3:c7:d4:ed:b1:af:72:82:17:01:55:61:
                    11:b1:0a:77:e3:04:a5:18:3b:33:2a:5d:d3:64:1e:
                    1d:5e:72:e8:67:1e:d1:fc:1f:7a:f0:55:63:62:a6:
                    ea:ec:08:f5:91:65:cb:b4:af:37:07:80:d7:b1:7c:
                    87:3f:d5:b0:41:05:b1:3d:68:af:60:9d:65:55:3d:
                    bb:7a:77:66:05:9c:3d:16:51:79:e4:c4:24:ca:01:
                    21:e1:c2:cf:c4:ff:c1:85:5f:c6:4f:b3:34:73:43:
                    22:10:d1:43:c0:17:1d:97:5f:51:2a:14:e2:09:29:
                    21:8f:cc:ad:e1:2d:1c:c0:a2:fc:3a:d8:3a:c9:ad:
                    99:59:1a:74:ec:e9:77:92:04:e4:a0:6b:25:1a:f4:
                    43:94:57:3c:38:04:40:c5:5b:dd:ba:56:54:7c:23:
                    60:d4:8f:c6:10:15:ea:9a:f2:86:91:1f:24:be:84:
                    cd:bc:dc:84:39:e7:5f:50:c6:1c:b5:6b:70:4d:47:
                    41:c9:ba:2c:1a:49:be:36:c0:c3:e9:15:ce:42:e2:
                    bd:34:71:0c:07:a4:74:d9:57:25:56:66:65:34:16:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:91:AC:39:03:FD:D4:70:2F:B7:12:FE:7A:C9:F9:53:B1:E0:2B:64
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132362e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:e0:70:9a:16:e4:84:ec:df:e4:c5:8f:13:7f:77:79:d7:2f:
         d4:c2:11:95:4f:31:3e:0e:db:f6:eb:2a:1b:7a:86:86:ce:ae:
         27:e4:61:9e:31:74:0d:e5:84:d5:89:48:f8:7d:95:4c:f3:8d:
         6e:ea:44:22:10:3d:06:39:60:6d:50:24:3e:bf:6c:cb:bf:5b:
         9d:fc:bc:c8:20:64:81:41:87:d4:57:c6:7d:f6:1b:e3:9a:9d:
         58:f8:51:7a:93:d4:79:31:e4:f0:d4:bd:c6:ba:7b:db:50:f0:
         2b:df:8a:ce:f1:f1:fc:79:34:12:51:05:ef:69:da:66:d0:18:
         b3:77:ed:ae:7c:91:a0:fa:8f:c8:f9:04:f7:1f:3b:35:6c:a0:
         08:6b:40:61:27:28:ef:e4:03:6c:ba:3a:62:ad:4e:fc:c8:40:
         ab:6d:3c:a4:fe:15:b1:c0:53:9b:e2:f4:b1:e3:54:1a:d8:83:
         44:31:d7:b6:29:f6:a0:2d:86:e5:41:f0:28:36:84:3c:38:85:
         b5:0c:13:27:d7:0f:c2:7f:e1:64:4a:49:97:bb:d4:3d:27:7f:
         60:a6:b0:47:3c:0d:ac:38:3b:f4:8f:6d:af:a0:b0:2e:d0:88:
         3a:a7:1a:9e:a7:bb:01:9f:94:43:07:b0:4f:3a:61:2c:28:e8:
         f9:14:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org