Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34302e302f32312d3231203d3e203238333236.roa
File:                     3138392e35302e34302e302f32312d3231203d3e203238333236.roa (raw, json)
Hash identifier:          Z+rCPpDg39XdFVq2r4HwddtXeJSUPOFcxi9GlAGzNPs=
Subject key identifier:   B9:E1:A5:A2:6C:25:24:3F:9E:F6:D7:2C:3B:3B:AD:96:CF:0E:32:67
Certificate issuer:       /CN=D48B6B74510F8F61705D671F9A8DDD6DB21C55B1
Certificate serial:       2A34DC1A8FC7F7BC4308BA5A6F823A487B003F91
Authority key identifier: D4:8B:6B:74:51:0F:8F:61:70:5D:67:1F:9A:8D:DD:6D:B2:1C:55:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D48B6B74510F8F61705D671F9A8DDD6DB21C55B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34302e302f32312d3231203d3e203238333236.roa
Signing time:             Tue 19 Jul 2022 18:34:44 +0000
ROA not before:           Tue 19 Jul 2022 18:29:44 +0000
ROA not after:            Tue 18 Jul 2023 18:34:44 +0000
asID:                     28326
IP address blocks:        189.50.40.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:34:dc:1a:8f:c7:f7:bc:43:08:ba:5a:6f:82:3a:48:7b:00:3f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D48B6B74510F8F61705D671F9A8DDD6DB21C55B1
        Validity
            Not Before: Jul 19 18:29:44 2022 GMT
            Not After : Jul 18 18:34:44 2023 GMT
        Subject: CN=B9E1A5A26C25243F9EF6D72C3B3BAD96CF0E3267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:02:69:c4:3e:40:7d:2c:1b:fb:99:11:51:
                    9f:e9:44:d9:93:e9:54:5a:6d:47:91:63:6a:77:99:
                    8a:82:1a:27:04:8b:53:bc:e4:bb:de:35:ce:5a:ae:
                    c5:bd:4f:20:0a:26:f7:8c:5a:7b:9a:26:54:d6:75:
                    77:00:49:29:b4:9d:6c:ac:91:da:bc:23:9c:1b:d7:
                    fb:ce:75:49:eb:72:4f:94:59:82:cc:a9:fe:97:16:
                    33:10:c6:b7:13:0a:48:be:5e:b1:46:f2:19:ae:22:
                    bf:7c:88:2a:b1:0a:55:30:0d:26:29:19:8e:aa:aa:
                    4a:3c:55:4e:27:16:b6:1d:93:51:5d:ad:44:8a:43:
                    be:7b:a2:ef:16:c2:c8:c8:ca:e5:77:ab:04:58:2f:
                    66:1f:0b:df:7c:3b:c3:16:32:9e:93:38:2b:52:6b:
                    7d:b4:a1:4d:f2:68:b4:fe:76:8c:78:ad:99:41:15:
                    df:1e:ba:0a:93:78:5c:93:83:94:74:f6:9f:68:6c:
                    81:2c:cd:ed:1d:99:cb:05:f5:3f:df:02:32:69:7f:
                    11:74:88:ed:42:81:1e:61:e7:5c:f0:f4:72:1a:65:
                    89:b5:c7:cd:95:68:f9:00:22:c4:c1:00:8a:39:be:
                    3f:61:c8:5e:39:18:3b:bc:68:3f:64:d4:59:9c:84:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:A5:A2:6C:25:24:3F:9E:F6:D7:2C:3B:3B:AD:96:CF:0E:32:67
            X509v3 Authority Key Identifier:
                keyid:D4:8B:6B:74:51:0F:8F:61:70:5D:67:1F:9A:8D:DD:6D:B2:1C:55:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D48B6B74510F8F61705D671F9A8DDD6DB21C55B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D48B6B74510F8F61705D671F9A8DDD6DB21C55B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34302e302f32312d3231203d3e203238333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:11:c5:30:c3:4a:94:25:05:6b:fe:e2:e7:37:1f:47:e0:00:
         ff:1c:f2:8a:e0:1a:d6:a2:d0:ac:56:6d:a0:6b:3e:8e:0f:c5:
         21:3f:ce:e9:ba:84:cc:ac:cb:0a:27:86:42:0b:13:81:05:8f:
         6f:4e:93:fe:4a:6f:8d:b0:57:e2:0d:f9:04:46:00:a4:46:43:
         50:d6:a4:d4:6f:a3:43:58:f1:ab:a3:57:aa:23:23:2d:df:e4:
         e2:70:dc:b7:02:b6:31:47:4d:62:a6:51:a0:f1:be:74:83:0d:
         cb:8a:4b:52:9e:fa:11:c6:03:12:d3:46:fa:07:26:97:16:a7:
         0b:ec:71:94:1c:2d:87:28:0f:30:a2:8f:25:e2:25:d2:82:2d:
         0e:0b:73:35:a8:89:8f:08:26:9a:75:90:b8:19:46:59:a5:62:
         17:98:3c:f8:92:7a:9b:c1:bc:92:82:b8:9d:34:5d:af:fb:87:
         9b:22:c7:a4:81:2b:21:b1:6e:f9:7f:19:d2:a9:17:22:1a:69:
         7f:c5:97:0c:ef:83:c3:62:67:91:3b:0f:eb:be:d8:e7:66:d5:
         51:cd:9a:d3:ff:e3:2a:60:a4:4a:5c:c9:06:03:39:74:04:16:
         dd:50:0d:c8:0a:cd:d3:6e:78:8a:db:bd:27:bc:07:3d:8e:6b:
         c6:22:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org