Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/0/3138392e3132372e3136302e302f32322d3234203d3e20323730373038.roa
File:                     3138392e3132372e3136302e302f32322d3234203d3e20323730373038.roa (raw, json)
Hash identifier:          EZG0ZBm1GCH3ZKPJ8d/GYCSCi3ypNIqlsXX2JEcsDNY=
Subject key identifier:   23:88:94:39:29:F9:19:52:65:E4:CD:26:00:8F:ED:26:4A:93:BA:B0
Certificate issuer:       /CN=D1804B5355470F8216604F6E202D86BB8221A77F
Certificate serial:       4D755B46E5822F26A92579BB64E4DE0ADFEDE21A
Authority key identifier: D1:80:4B:53:55:47:0F:82:16:60:4F:6E:20:2D:86:BB:82:21:A7:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1804B5355470F8216604F6E202D86BB8221A77F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/0/3138392e3132372e3136302e302f32322d3234203d3e20323730373038.roa
Signing time:             Thu 20 Jul 2023 14:28:59 +0000
ROA not before:           Thu 20 Jul 2023 14:23:59 +0000
ROA not after:            Thu 18 Jul 2024 14:28:59 +0000
asID:                     270708
IP address blocks:        189.127.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:75:5b:46:e5:82:2f:26:a9:25:79:bb:64:e4:de:0a:df:ed:e2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1804B5355470F8216604F6E202D86BB8221A77F
        Validity
            Not Before: Jul 20 14:23:59 2023 GMT
            Not After : Jul 18 14:28:59 2024 GMT
        Subject: CN=2388943929F9195265E4CD26008FED264A93BAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:76:e1:8a:71:f2:c3:8e:cc:cb:e6:88:b7:04:
                    3b:a0:b5:43:35:45:ec:1c:0c:99:87:e3:13:2e:56:
                    82:93:27:04:31:50:e0:0b:37:a2:1e:88:a2:ac:cb:
                    87:63:91:03:3c:d4:b8:6e:bc:1e:6c:c1:6d:12:f2:
                    26:31:4d:1d:6c:7b:2e:92:66:95:c0:ca:0d:97:c1:
                    de:f6:9d:b5:ac:4a:34:b7:6e:7a:13:f5:f7:e2:08:
                    96:50:80:b1:0d:66:17:2e:2f:d5:45:10:aa:d7:09:
                    18:d6:41:f3:1b:40:4d:90:f5:c9:b7:47:d1:ad:36:
                    4d:a7:b4:3e:03:bc:36:ce:4a:2b:ff:f5:a4:90:1c:
                    b2:f2:f7:33:ea:85:e3:47:12:ef:f7:13:4f:03:7c:
                    b1:4f:3b:97:02:d1:17:b4:89:e9:4c:16:a6:db:80:
                    dc:18:f9:b0:4b:60:b9:aa:2f:3b:b6:2e:f9:3a:bf:
                    71:0c:74:11:f0:d0:bc:cd:59:6a:4e:1f:7e:33:24:
                    62:44:da:81:87:c1:54:ee:da:29:ad:16:e4:57:20:
                    63:35:78:67:a0:ff:f5:76:bd:b3:c8:9b:fc:21:a0:
                    6d:e6:93:04:37:18:0d:0f:7b:88:c4:90:53:37:6f:
                    4f:f3:ad:3f:36:e0:2a:12:d8:6f:69:3d:86:63:ab:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:88:94:39:29:F9:19:52:65:E4:CD:26:00:8F:ED:26:4A:93:BA:B0
            X509v3 Authority Key Identifier:
                keyid:D1:80:4B:53:55:47:0F:82:16:60:4F:6E:20:2D:86:BB:82:21:A7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/0/D1804B5355470F8216604F6E202D86BB8221A77F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1804B5355470F8216604F6E202D86BB8221A77F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/0/3138392e3132372e3136302e302f32322d3234203d3e20323730373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:11:22:59:e2:f1:a2:3b:2a:54:51:17:43:a7:14:42:4f:74:
         0a:6a:09:65:f6:78:83:93:96:48:0a:3c:83:a6:57:da:fe:bb:
         46:f8:05:cf:7e:76:e5:bf:58:28:f8:98:e8:ba:fb:f9:3c:0e:
         14:42:45:8c:53:f2:82:3b:31:f2:8f:4d:d0:dd:47:99:38:65:
         df:f0:eb:2e:d2:45:21:f2:47:41:82:c2:16:04:5a:c9:8d:c8:
         4c:18:a5:1a:3e:a5:4f:73:9a:8d:97:de:3a:a1:2d:6a:a6:f4:
         8d:3f:43:98:9a:f5:11:1c:ff:7a:dc:4b:3a:fe:f8:91:38:4d:
         e0:0f:ae:25:5d:6f:03:a0:20:f0:90:3a:75:b4:44:c7:f9:cc:
         10:a7:ee:d8:26:dd:98:e7:67:55:7b:12:7b:3e:ad:f9:0c:85:
         2f:dc:b6:8b:ad:f3:eb:14:72:b0:f9:7a:75:bd:8d:f1:c2:d8:
         b4:c9:ad:17:a9:1b:19:4f:7e:fa:4f:5a:95:da:ee:6c:5e:fc:
         76:fe:48:80:21:9b:f4:77:fe:1a:fe:1f:a1:11:61:e7:1b:96:
         55:69:dc:d5:9f:02:ac:81:4d:b5:5e:9d:2f:1e:04:54:44:80:
         65:60:36:59:dd:3a:ac:9e:cc:35:80:a1:aa:2e:64:54:6a:a8:
         47:6e:f9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org