Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa
File:                     3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa (raw, json)
Hash identifier:          aDXwIBM5Q3tmzkRGAcuzKcrtVB5PxhgVDi97e4DVKWg=
Subject key identifier:   E5:D7:3E:30:18:57:62:8C:9A:C5:B8:B6:21:49:4F:F0:78:3A:BA:E0
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       5C9CE1AE1DA4FC6FB9ED26BE7B4207C3FBA87A27
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa
Signing time:             Sat 20 Jan 2024 22:17:18 +0000
ROA not before:           Sat 20 Jan 2024 22:12:18 +0000
ROA not after:            Sat 18 Jan 2025 22:17:18 +0000
asID:                     28349
IP address blocks:        189.126.188.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9c:e1:ae:1d:a4:fc:6f:b9:ed:26:be:7b:42:07:c3:fb:a8:7a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:12:18 2024 GMT
            Not After : Jan 18 22:17:18 2025 GMT
        Subject: CN=E5D73E301857628C9AC5B8B621494FF0783ABAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:6b:8e:93:15:da:9e:93:26:44:55:9b:e1:
                    08:f3:73:18:d9:a1:38:42:4e:51:0e:d8:eb:b0:19:
                    54:16:b8:14:80:8b:7d:b0:17:a7:fe:07:4c:92:af:
                    4d:e7:ac:a6:2f:f7:cd:a4:a1:27:04:29:d8:cc:8d:
                    a6:5d:2b:9e:3b:17:c6:e4:93:31:82:6b:09:d3:f8:
                    dd:f3:e3:e8:5a:b0:52:fd:4a:59:1f:7a:d8:40:72:
                    7a:d7:cd:b2:5f:7c:88:ce:85:3d:c5:2f:8b:f7:83:
                    b6:77:f0:c7:c3:4c:eb:ae:6d:ef:f6:db:fc:11:1a:
                    4f:41:ad:30:2d:82:55:c6:9f:71:29:b1:aa:b0:63:
                    1f:05:18:1c:81:5a:a2:37:db:28:5d:6c:34:47:7f:
                    b8:50:dd:c3:7d:3a:0d:7d:85:e9:c6:32:73:d8:c3:
                    6b:03:0c:41:b8:c0:03:5d:82:8c:dc:d0:dc:08:d2:
                    42:33:26:73:f6:1d:fa:65:3b:05:37:58:36:1b:33:
                    d1:70:78:5d:2f:4d:d0:f0:42:86:9d:26:2a:ce:2f:
                    d4:c8:c7:52:96:60:4a:d2:89:56:f8:a3:3b:a2:03:
                    d9:2b:c6:77:5a:42:92:df:d6:75:41:de:ac:1d:ef:
                    73:f3:39:24:88:cc:71:a6:90:78:81:72:7e:ec:36:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:3E:30:18:57:62:8C:9A:C5:B8:B6:21:49:4F:F0:78:3A:BA:E0
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:ec:e4:60:db:30:a3:78:8e:81:e5:e1:a3:34:7a:36:d0:
         1d:6f:2b:71:cf:87:79:a8:43:60:07:2f:5d:7d:06:e7:fb:e1:
         2c:af:18:5d:d6:e4:8d:db:9b:fb:48:4f:13:e4:3c:10:cf:bc:
         b1:af:14:b4:e0:6e:75:ae:5e:2c:df:5e:21:6d:1a:f5:7e:5f:
         28:e5:b1:90:44:95:a0:53:e8:9f:09:09:09:47:93:cf:b4:f7:
         7b:93:15:8b:24:65:cb:74:8b:1b:db:81:63:57:cd:41:ef:98:
         77:30:87:72:ca:25:80:a7:8a:f0:0c:4c:3c:7c:a6:a4:39:b2:
         8c:d7:08:ae:43:e7:4b:0e:a7:38:eb:86:aa:4e:66:b9:c1:e7:
         7f:91:f9:7e:e9:f0:dd:29:e5:7d:8b:52:85:66:f4:bb:6a:73:
         11:63:60:97:b2:f7:0f:6c:78:13:20:65:85:52:21:fb:a7:56:
         97:6d:1f:8c:36:c9:5d:fa:75:cf:fd:2f:8a:2e:42:22:e5:9c:
         da:4b:a3:bd:0b:6f:63:2d:d3:c9:91:5f:19:a7:d5:82:99:01:
         5f:13:d7:b1:a2:ee:b7:74:4b:09:0c:f3:22:cf:6e:f1:3f:a0:
         c0:58:96:ff:8d:4f:bf:36:ab:d0:70:03:44:a9:1d:1e:23:6c:
         a2:f7:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org