Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32312d3234203d3e203238313834.roa
File:                     3138392e38392e37322e302f32312d3234203d3e203238313834.roa (raw, json)
Hash identifier:          LaN3us0cj2/mYxHS1qNbzhCt0GoqN7Ef2AeudtgVVF0=
Subject key identifier:   B1:AA:4F:13:91:1F:B9:0D:35:38:4C:CB:61:C1:F2:D1:73:58:8C:38
Certificate issuer:       /CN=F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577
Certificate serial:       0FD1D59A0343538D57043F124E22FA3D59EE880C
Authority key identifier: F6:D4:E2:27:9E:7B:BC:B2:D6:C1:43:AA:A6:D4:BD:35:42:60:45:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32312d3234203d3e203238313834.roa
Signing time:             Tue 05 Dec 2023 11:53:06 +0000
ROA not before:           Tue 05 Dec 2023 11:48:06 +0000
ROA not after:            Tue 03 Dec 2024 11:53:06 +0000
asID:                     28184
IP address blocks:        189.89.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d1:d5:9a:03:43:53:8d:57:04:3f:12:4e:22:fa:3d:59:ee:88:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577
        Validity
            Not Before: Dec  5 11:48:06 2023 GMT
            Not After : Dec  3 11:53:06 2024 GMT
        Subject: CN=B1AA4F13911FB90D35384CCB61C1F2D173588C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:56:a5:b1:b8:4b:dc:72:06:ac:fa:50:b7:
                    99:42:5b:a5:75:f2:b3:aa:59:34:57:d6:58:22:92:
                    55:db:aa:59:51:6f:0a:7e:a6:f0:8f:91:39:5e:15:
                    8f:11:d5:9d:c8:29:90:95:c9:8f:cc:b8:7b:91:8b:
                    fe:15:23:4a:ef:ba:c7:82:92:12:26:e3:3b:21:f3:
                    66:06:92:f9:83:8d:a5:57:2d:98:cf:4d:e0:83:f6:
                    fa:ee:57:dd:d2:68:35:31:5a:10:57:f9:0f:5b:ad:
                    57:a7:fb:a3:58:98:65:cc:5a:97:ec:68:2c:68:e0:
                    4f:bd:79:3a:e0:ab:c3:bd:53:cc:ab:67:57:4d:ef:
                    85:19:fd:f8:68:44:22:2c:8b:be:60:0c:0a:31:6a:
                    bb:3e:6f:ce:46:7e:9a:0d:53:64:8e:b0:5c:ca:c8:
                    1b:96:c9:55:0a:db:8e:70:7f:d6:ae:9b:05:36:6f:
                    0f:24:8b:82:54:5f:db:77:57:4b:e2:55:41:bf:81:
                    71:3b:6a:27:ef:84:aa:8b:20:bf:66:f3:02:a4:ba:
                    10:78:8a:21:ca:ac:85:e0:81:59:ac:ad:f3:f3:0b:
                    5a:0b:95:7d:ed:f2:fb:77:e8:74:9f:95:d8:a0:9a:
                    fe:39:61:f1:97:95:ef:55:32:71:62:e0:42:dd:26:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AA:4F:13:91:1F:B9:0D:35:38:4C:CB:61:C1:F2:D1:73:58:8C:38
            X509v3 Authority Key Identifier:
                keyid:F6:D4:E2:27:9E:7B:BC:B2:D6:C1:43:AA:A6:D4:BD:35:42:60:45:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6D4E2279E7BBCB2D6C143AAA6D4BD3542604577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32312d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:c1:5f:4d:6c:a8:f8:b3:c2:eb:a9:c0:ab:25:70:57:d9:39:
         9e:c3:43:87:d8:e9:de:9f:45:67:cc:b4:90:0b:86:a1:d2:fe:
         f9:ac:01:01:d3:4e:89:c2:de:f9:4f:7d:c7:a6:81:d3:0c:26:
         88:fa:a4:53:10:82:2f:15:36:cb:8a:a2:03:e2:82:1b:37:07:
         fc:91:5b:3b:42:b3:76:c3:7a:6d:4f:fb:c6:c2:5d:08:ef:57:
         c2:3f:6c:aa:ec:a7:b3:1b:57:98:5b:1c:f6:f6:5c:56:0b:ed:
         9d:17:3e:63:86:61:ce:05:06:08:a5:69:14:d8:ed:91:6b:78:
         17:4a:67:b1:85:29:e1:c2:ce:e3:d0:b7:85:87:c3:41:52:fd:
         ee:b0:44:1c:27:6a:c9:f9:7f:36:8c:a9:47:1a:b3:d1:e9:ab:
         7d:b0:7c:cb:5b:01:4e:ef:6e:e4:02:42:29:e3:a9:a8:f9:37:
         d5:4e:68:17:88:23:50:fa:48:5b:c0:25:f4:02:b3:bc:d9:1b:
         4c:5c:92:d0:25:73:ee:a5:5a:f2:15:c8:1d:0b:4a:a0:fd:d9:
         96:7c:20:af:60:c3:4a:9b:b8:95:a5:8c:13:7c:dc:6a:46:e2:
         c8:fc:83:af:5c:d2:a3:3b:e6:46:b8:f8:88:2f:70:30:60:19:
         ad:6f:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org