Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138342e302f32322d3234203d3e203238333439.roa
File:                     3138392e3132362e3138342e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          F8Hczl1XCa4QpOzgSiJmOsov4c7+k+u4JqW2zPgvTow=
Subject key identifier:   F2:53:99:CA:63:EA:DE:3B:78:E0:36:08:3D:A1:63:BF:F6:38:A8:57
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       1D59B2AF289D5A15AF7F626439041DCB1B534342
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138342e302f32322d3234203d3e203238333439.roa
Signing time:             Sat 20 Jan 2024 22:16:11 +0000
ROA not before:           Sat 20 Jan 2024 22:11:11 +0000
ROA not after:            Sat 18 Jan 2025 22:16:11 +0000
asID:                     28349
IP address blocks:        189.126.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:59:b2:af:28:9d:5a:15:af:7f:62:64:39:04:1d:cb:1b:53:43:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:11:11 2024 GMT
            Not After : Jan 18 22:16:11 2025 GMT
        Subject: CN=F25399CA63EADE3B78E036083DA163BFF638A857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:83:3a:2d:6a:f8:6c:f9:1e:b4:58:47:7e:
                    b1:73:1f:ab:23:ca:12:f9:5e:3e:b7:54:38:a0:b0:
                    8d:1e:ac:69:bb:1c:f1:f8:67:d8:7c:d7:a0:ca:1e:
                    42:d6:a6:4a:1c:fa:be:49:36:a4:bc:2d:f6:ff:44:
                    5e:fb:0a:25:69:52:49:a4:3e:06:73:3e:d0:62:e9:
                    e4:13:39:71:d4:36:2e:98:dd:23:a2:3d:e4:a6:43:
                    29:08:48:fd:ad:80:5b:62:56:15:24:48:8a:48:69:
                    93:49:7e:95:9b:e4:6f:b1:fa:8a:de:8c:ee:08:9d:
                    b2:55:a0:a6:a3:03:e0:87:90:ee:d9:8f:f3:5c:c0:
                    0b:25:31:c7:a0:94:be:5c:91:49:b5:33:e8:b9:cd:
                    bb:0a:cb:82:c4:4c:c8:76:c3:e3:e0:a8:1e:2d:70:
                    60:86:0a:ef:e9:9c:35:a1:34:d6:11:d7:be:1a:e4:
                    df:cc:1a:6b:05:97:8c:d8:d0:6e:9c:2b:3d:ca:95:
                    11:99:95:d8:b7:19:85:9a:5e:fd:82:da:6f:1d:fd:
                    9d:fc:eb:fd:32:d9:4d:ac:a3:84:46:7f:fa:7f:16:
                    93:dd:e3:7c:66:a3:ac:d3:ba:f8:b5:34:4b:cd:6e:
                    b5:04:c9:b5:98:64:4a:d9:ab:5d:56:2f:4c:28:1b:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:53:99:CA:63:EA:DE:3B:78:E0:36:08:3D:A1:63:BF:F6:38:A8:57
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138342e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:f0:ae:ac:f3:7f:71:16:23:44:6d:f3:f9:5b:e8:5e:22:
         73:4c:ee:39:ec:a5:89:43:97:7e:58:07:36:d6:b2:72:fc:d0:
         58:ca:d8:49:4e:05:4f:ec:43:39:b2:ff:3c:3b:af:df:59:74:
         83:29:ec:c8:29:07:3e:aa:68:a6:9c:3c:94:ac:b1:fa:ba:d3:
         82:92:50:f5:a0:e3:5a:63:b0:e2:c8:4c:54:59:c9:43:63:93:
         64:2b:46:61:dd:29:ba:a2:99:ef:4a:9a:a5:fc:ab:0c:71:95:
         ac:83:17:15:e6:d7:16:ce:c8:7a:ca:85:f8:60:64:0c:c2:ff:
         26:ba:92:64:44:ec:2d:84:50:8d:eb:80:e8:0b:95:a7:56:8c:
         76:83:09:04:c4:05:45:ba:8b:12:5c:33:c6:03:f5:65:c5:06:
         83:5a:d7:46:7a:ed:7b:43:37:c9:1f:02:47:5b:b5:64:85:3f:
         9b:4f:f5:34:03:95:bc:a1:4f:14:23:75:81:0b:da:e4:61:8c:
         43:f9:4d:4a:99:67:85:24:e7:9f:51:fb:ed:a2:46:f4:be:d7:
         ed:40:af:cc:7f:10:8e:da:bd:09:4a:3f:3f:ff:fb:fc:6f:03:
         0f:9c:7b:ca:be:a9:75:dc:68:54:4e:23:c4:71:c8:76:90:c1:
         19:a1:c5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org