Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34382e302f32322d3234203d3e203238333236.roa
File:                     3138392e35302e34382e302f32322d3234203d3e203238333236.roa (raw, json)
Hash identifier:          h3UrUZsTD826DvfzDICLSZbfc+tITfbxjPFcWLT8B44=
Subject key identifier:   DF:D0:02:02:47:06:99:6E:43:08:67:1E:B4:65:32:67:C1:00:6B:98
Certificate issuer:       /CN=D8DC918B29E361938B8B9F2093F104E2C3CBADB9
Certificate serial:       3E0A80B46BED53EE24F156B03800471B13AC4ABE
Authority key identifier: D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34382e302f32322d3234203d3e203238333236.roa
Signing time:             Fri 17 Nov 2023 19:15:04 +0000
ROA not before:           Fri 17 Nov 2023 19:10:04 +0000
ROA not after:            Fri 15 Nov 2024 19:15:04 +0000
asID:                     28326
IP address blocks:        189.50.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0a:80:b4:6b:ed:53:ee:24:f1:56:b0:38:00:47:1b:13:ac:4a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8DC918B29E361938B8B9F2093F104E2C3CBADB9
        Validity
            Not Before: Nov 17 19:10:04 2023 GMT
            Not After : Nov 15 19:15:04 2024 GMT
        Subject: CN=DFD002024706996E4308671EB4653267C1006B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:91:88:69:ee:57:64:42:da:2f:12:7b:53:
                    49:91:f7:dd:a6:86:33:b0:e0:6e:d9:af:01:62:1d:
                    62:6f:f0:f8:2b:ab:66:ff:5f:88:cb:46:b6:ae:05:
                    e2:53:c4:61:da:04:91:21:06:d1:df:a4:14:92:a9:
                    50:8a:28:8b:80:b0:44:d8:d4:3d:a3:59:f4:04:ee:
                    90:9e:65:6d:28:f1:db:41:19:4a:98:a5:a9:df:fd:
                    bf:cc:58:56:f4:e6:18:20:6c:3f:ef:f9:ce:ed:5c:
                    a2:44:35:8d:68:bf:90:f7:de:82:dc:ec:3c:ea:d1:
                    8c:de:47:9f:d4:54:8a:b8:45:f7:29:1a:ae:2d:f6:
                    98:02:7e:1e:3b:e8:fa:58:b9:e6:f8:68:8b:83:9e:
                    5d:d9:95:c2:a0:8b:7a:ae:42:b8:61:a7:83:fd:18:
                    01:64:05:2b:58:0d:30:6c:a1:e0:5d:66:2c:21:49:
                    1b:06:a7:20:92:ae:3d:45:67:18:39:2a:c3:60:53:
                    d7:9b:fd:6b:d9:68:33:a6:98:c1:50:34:13:09:13:
                    e2:15:a5:c4:a1:bc:51:4e:fd:fb:cd:a3:e7:f6:b4:
                    a8:af:72:f2:b8:71:de:37:e6:b4:02:9c:42:88:b7:
                    78:52:35:c4:9f:cf:4e:3f:be:ec:6b:ae:2e:ce:d7:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:02:02:47:06:99:6E:43:08:67:1E:B4:65:32:67:C1:00:6B:98
            X509v3 Authority Key Identifier:
                keyid:D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34382e302f32322d3234203d3e203238333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:3a:5b:cc:02:07:97:40:cc:e6:3e:b4:f2:02:e7:25:a2:a5:
         70:2f:1d:8d:90:bd:c5:28:68:3c:eb:64:e6:00:f7:71:7f:f1:
         23:ae:b6:00:0e:20:d6:3c:2f:a0:c0:5b:e3:50:6c:ce:0b:2d:
         43:44:86:83:6f:df:8b:ee:20:7a:ac:1a:d7:5d:dc:1f:5d:8b:
         cc:28:59:f4:a2:a8:70:40:52:b5:74:9f:62:64:f2:a1:35:0f:
         19:9f:80:91:7e:99:93:28:57:6b:22:f1:e7:6a:bb:ee:3c:e3:
         8b:fa:41:4e:44:96:22:c9:8a:33:da:a4:d9:36:f4:3f:65:9d:
         fc:02:3f:be:a4:6b:38:da:6b:e4:bd:32:37:06:6e:21:36:f9:
         cd:e8:c1:5e:18:b9:83:9a:48:71:c1:1e:ac:b1:3c:5b:24:8c:
         3c:f3:ea:67:e0:d5:74:91:53:87:70:72:37:d2:22:e2:c0:ed:
         e5:e1:47:04:ab:6e:7a:62:95:de:cf:14:d6:8e:a4:cd:74:75:
         61:7e:88:69:85:88:38:8a:ce:07:fe:05:38:54:44:f0:af:b3:
         63:41:52:4e:d4:c4:d5:8c:1d:fe:c5:93:5c:c1:4c:4b:fe:45:
         9c:36:7f:7b:c6:68:c3:ec:1d:98:a2:1a:fc:a0:bb:70:c6:e3:
         2a:e1:74:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org