Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3231362e302f32312d3234203d3e20323632343230.roa
File:                     3138392e3131332e3231362e302f32312d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          txHnp+QSvEVhhUuDLQo9A+FBUoWhBv268TurLPVTwgo=
Subject key identifier:   39:4D:FF:65:95:5A:5D:3F:6D:9E:4F:2D:5D:4B:F0:DF:E5:6F:FD:86
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       6E89A1C110D2D5C2A9C9FF90090BE0C8A65DAC5D
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3231362e302f32312d3234203d3e20323632343230.roa
Signing time:             Sat 20 Jan 2024 18:43:34 +0000
ROA not before:           Sat 20 Jan 2024 18:38:34 +0000
ROA not after:            Sat 18 Jan 2025 18:43:34 +0000
asID:                     262420
IP address blocks:        189.113.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:89:a1:c1:10:d2:d5:c2:a9:c9:ff:90:09:0b:e0:c8:a6:5d:ac:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:38:34 2024 GMT
            Not After : Jan 18 18:43:34 2025 GMT
        Subject: CN=394DFF65955A5D3F6D9E4F2D5D4BF0DFE56FFD86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:b5:82:21:e1:bf:69:14:76:b0:0d:0e:f8:
                    6c:6a:e3:a1:34:dd:52:9c:03:da:e5:4c:fe:d2:35:
                    6b:4f:2a:e2:77:cf:bb:49:0d:b2:2a:d1:0e:d9:41:
                    6b:90:89:c4:7a:e1:b5:28:e0:93:2c:eb:44:e0:59:
                    6a:e9:28:fc:35:52:f6:49:eb:62:d4:fb:d1:a2:0b:
                    18:0a:e2:c4:3c:7a:68:c2:c4:81:52:cd:8e:2a:11:
                    46:13:05:46:00:c9:9c:e5:ad:01:da:7a:21:f8:df:
                    df:4a:c4:9d:1c:3c:01:66:e6:26:70:c2:d7:46:6f:
                    71:fd:e3:ba:85:01:11:ce:a3:a4:88:78:06:92:16:
                    c8:1f:12:b6:dd:72:ed:83:b2:ec:37:c0:21:5b:15:
                    c6:0e:26:e9:10:ee:5a:b2:da:4e:ef:62:f4:1d:93:
                    3e:89:75:77:a9:05:a4:e3:60:a3:63:89:09:59:ba:
                    db:67:ed:bc:f9:61:fe:52:92:de:35:58:77:4c:12:
                    2d:6e:98:aa:d6:00:94:ac:fa:87:1e:82:2d:61:0d:
                    ab:7c:9a:94:b4:b9:61:26:90:96:22:2c:30:e6:01:
                    44:c9:aa:5e:2f:28:48:6b:61:bb:70:e5:3f:21:96:
                    7a:49:ed:4e:1a:b3:34:e6:89:90:98:ed:9d:a7:a9:
                    15:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4D:FF:65:95:5A:5D:3F:6D:9E:4F:2D:5D:4B:F0:DF:E5:6F:FD:86
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3231362e302f32312d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:3d:71:91:66:65:fd:44:e8:fe:c9:8e:5d:c5:52:99:60:03:
         68:eb:8f:04:c4:7b:ab:e1:fb:c2:d7:fd:8f:62:7a:a4:33:94:
         b2:37:8d:38:35:1f:19:a8:42:88:10:a4:48:28:55:04:ae:db:
         27:a2:91:e3:69:e7:d2:5c:9a:b9:90:e5:c8:d5:e1:1b:6a:86:
         2c:ad:fe:2b:09:1f:7b:0a:86:36:7f:0d:89:c1:24:d6:87:08:
         a1:dc:d5:68:97:82:7c:2d:81:d9:c0:2a:a1:ae:68:50:f2:fe:
         63:61:e0:23:37:0a:7e:70:23:8a:2d:bb:6e:95:f0:2b:bd:9c:
         f4:4f:dc:ef:c7:9b:d4:34:8b:ca:3b:55:ef:4f:2b:87:1b:3a:
         73:b2:4b:7b:ca:71:02:06:ee:66:e3:65:3b:a0:0e:5d:9c:f4:
         43:53:ac:fb:b9:62:ca:22:4d:34:2e:ad:98:38:ae:b2:a7:8c:
         3e:e7:b6:76:66:ab:18:8b:98:37:4f:5d:20:db:93:9a:a2:5b:
         39:fb:08:20:1d:70:e4:ee:43:10:5b:ea:4d:c3:7e:2b:ef:e3:
         7a:ad:7a:0d:0c:46:21:ac:81:d3:62:e8:3b:b6:87:af:f9:4b:
         53:a4:69:e8:67:99:4f:c0:2b:f3:eb:5e:82:00:8c:bb:5c:b3:
         93:d5:07:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org