Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3139322e302f32302d3234203d3e203238363437.roa
File:                     3138392e3131332e3139322e302f32302d3234203d3e203238363437.roa (raw, json)
Hash identifier:          lqpPDSzkg9lvy/ddtne37sCu9+5I71kQTebGCJXD5dM=
Subject key identifier:   3F:B8:23:F5:05:F5:2C:D8:8E:1A:BD:9C:21:53:51:71:7D:CF:EF:FA
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       451DB3D711C98EE448AF35A0B47CB39BA8F163DE
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3139322e302f32302d3234203d3e203238363437.roa
Signing time:             Sat 20 Jan 2024 18:44:10 +0000
ROA not before:           Sat 20 Jan 2024 18:39:10 +0000
ROA not after:            Sat 18 Jan 2025 18:44:10 +0000
asID:                     28647
IP address blocks:        189.113.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1d:b3:d7:11:c9:8e:e4:48:af:35:a0:b4:7c:b3:9b:a8:f1:63:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:39:10 2024 GMT
            Not After : Jan 18 18:44:10 2025 GMT
        Subject: CN=3FB823F505F52CD88E1ABD9C215351717DCFEFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:30:b5:26:d3:04:01:06:d0:93:13:dc:e6:
                    45:36:24:45:61:1a:af:fd:72:42:80:92:d4:4a:22:
                    ba:a1:96:a7:96:5e:12:bb:16:fe:e3:2f:72:41:f9:
                    e2:08:c4:c2:61:ec:86:52:dc:ba:21:b2:93:50:6f:
                    1b:10:9f:07:55:03:97:af:5a:ab:79:96:52:a5:42:
                    af:4c:44:c0:4c:59:03:8b:ed:16:13:e4:ee:dd:6d:
                    d6:85:01:3b:20:97:d1:ab:4c:12:c0:b1:b8:52:03:
                    8e:fc:4e:f8:af:7d:d6:3d:5f:74:93:a6:ab:7e:a9:
                    05:80:4a:2f:d9:19:d5:0f:d8:13:83:d2:c1:d3:e2:
                    ed:e3:41:4a:2a:75:41:a1:32:28:a5:55:f7:8a:c5:
                    4b:14:c6:58:43:37:98:45:24:f3:6f:ea:3e:50:ee:
                    ee:42:ba:f0:85:d7:1f:70:91:a3:9c:2a:4a:93:a7:
                    e9:4d:13:f6:be:8a:51:7e:20:1f:2a:61:e5:c9:3e:
                    a4:79:f7:a6:3f:87:f7:fc:6d:e5:90:a3:eb:63:16:
                    88:c8:f9:54:d4:38:b8:a1:5f:16:d6:d5:0e:ef:0c:
                    fb:be:01:30:19:10:c8:a4:a0:e7:9e:74:ab:f5:18:
                    b1:a0:10:35:b4:88:06:99:54:be:8d:9d:2d:44:f7:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B8:23:F5:05:F5:2C:D8:8E:1A:BD:9C:21:53:51:71:7D:CF:EF:FA
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3139322e302f32302d3234203d3e203238363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:ef:6e:d0:dc:35:48:5c:f0:0f:31:f3:85:3d:d8:00:cf:b6:
         e4:8f:ea:be:96:a7:b1:22:18:b0:79:92:c2:8a:92:0c:2e:82:
         89:df:b7:1d:ee:59:cc:26:69:eb:40:ee:3e:2e:51:ca:bc:e1:
         ce:93:9a:8d:73:e9:5c:38:7c:7e:7b:92:fd:b3:cb:db:25:88:
         33:65:a4:13:e9:c5:80:1b:d6:c8:48:74:a8:22:6e:49:d4:f7:
         01:10:53:d4:0c:66:5b:93:39:7d:a0:c3:4d:ed:4c:d5:cc:1a:
         c1:b9:8c:98:c7:3d:6c:e5:ea:84:3b:0f:cf:93:0b:ee:a1:f9:
         b9:54:9e:6b:0d:0a:ff:ef:c1:95:1f:bc:e8:29:a9:57:4b:ed:
         00:d7:68:bd:fc:0b:ab:9b:e5:e5:f7:1e:94:ab:7d:9e:26:d0:
         d3:02:0e:f7:7c:b0:b9:47:89:fb:c5:df:96:46:5d:dd:31:5e:
         22:4f:8d:38:9e:a4:45:26:91:7e:d8:cc:ab:39:dd:7a:80:80:
         99:c2:38:5f:62:90:db:77:4e:0c:bf:89:3a:d8:74:0d:4a:04:
         8b:3f:ac:be:21:10:dd:3d:50:14:67:77:d2:63:f7:cf:ce:c3:
         4e:2c:a3:e1:46:a3:83:0f:c9:cb:f8:97:26:2f:f8:61:04:5f:
         10:4f:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org