Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3133362e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3133362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          ObMzELc092CI4oAnJzXPUTfovnKmaE/BKjnscybHf90=
Subject key identifier:   3E:1A:61:3A:DD:61:70:21:25:8B:A7:CF:B4:A8:9E:7F:FE:F4:EC:27
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       77E45362DCB32A790D20F102E73311A2358BDBBE
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3133362e302f32322d3234203d3e203238333439.roa
Signing time:             Sat 20 Jan 2024 22:14:39 +0000
ROA not before:           Sat 20 Jan 2024 22:09:39 +0000
ROA not after:            Sat 18 Jan 2025 22:14:39 +0000
asID:                     28349
IP address blocks:        189.51.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e4:53:62:dc:b3:2a:79:0d:20:f1:02:e7:33:11:a2:35:8b:db:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:09:39 2024 GMT
            Not After : Jan 18 22:14:39 2025 GMT
        Subject: CN=3E1A613ADD617021258BA7CFB4A89E7FFEF4EC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:e9:31:ab:0c:00:ce:bb:b6:fb:dd:74:a7:
                    5f:38:ad:14:e4:d6:21:27:36:03:9d:04:a7:03:8d:
                    0d:35:17:44:50:7d:56:fa:c0:cb:ba:bf:a0:37:4e:
                    22:13:8c:f9:dc:63:89:e3:33:fd:56:69:a5:a2:43:
                    8c:f6:cd:f9:0f:49:a9:48:6b:12:1e:25:b5:9d:4a:
                    12:1c:37:72:46:46:41:4e:62:a1:de:9c:01:08:6f:
                    7f:78:2c:dd:08:ff:71:25:f6:7e:db:2e:99:29:db:
                    3a:ab:fe:06:8f:da:40:6e:ae:ec:dc:61:f5:cf:97:
                    28:80:c9:ae:38:00:03:a4:48:4e:a3:71:b1:b0:59:
                    99:c6:62:f9:df:fc:13:aa:f6:68:ab:6d:1f:4e:57:
                    29:d7:24:c9:1d:8c:d0:39:9f:4c:0f:c7:33:b3:52:
                    42:db:7c:bc:54:b9:2a:53:92:84:39:9d:81:fe:bb:
                    c8:fd:f8:69:eb:6c:93:ac:8a:14:fb:6c:f0:ab:19:
                    0f:90:ca:8a:78:af:2a:85:c4:03:f5:20:1e:1d:ce:
                    2f:07:9a:7f:68:34:76:06:16:28:a8:44:9c:f6:0a:
                    f7:3a:b4:ac:d7:d2:14:30:7b:7e:9d:c9:9c:0c:d9:
                    76:b8:03:91:f5:06:0e:52:47:0e:cc:fc:ea:10:97:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1A:61:3A:DD:61:70:21:25:8B:A7:CF:B4:A8:9E:7F:FE:F4:EC:27
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3133362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:7d:dc:1d:09:6b:5e:c1:50:ed:f1:f2:74:11:43:bd:d9:7a:
         ac:99:d4:9c:fe:06:bd:04:9a:d3:b6:68:66:86:21:ca:13:41:
         b3:7c:65:aa:fc:61:2f:bc:63:f0:43:8a:19:d7:ff:c2:c6:4e:
         7a:c0:38:7b:b0:3b:df:40:b6:a7:91:c2:f2:d4:81:af:3b:cf:
         8a:cf:32:6e:66:cd:61:76:8e:48:69:12:c4:4b:f8:c4:af:bc:
         8c:54:4a:c1:a7:d8:fe:8f:a6:05:2f:74:c3:6e:75:a7:7c:b2:
         bd:e0:d2:8e:46:77:31:ae:22:cc:50:4a:81:b1:4f:6d:0f:59:
         2c:e0:d6:5a:57:c4:13:8d:86:d8:c8:b6:55:b2:6f:b2:f2:74:
         0a:75:db:75:81:f9:24:a4:65:8d:c3:61:15:7a:d1:c3:50:1a:
         a1:3f:7f:f9:a5:8d:c8:aa:84:0f:db:b1:3f:96:8d:ea:9f:a9:
         ca:f1:91:c7:a3:89:95:1c:b2:30:0a:b8:2a:a0:cf:31:4a:89:
         cc:6f:ee:72:71:c4:68:98:49:a9:26:43:8e:4f:2b:ff:ed:a5:
         67:aa:cb:6d:52:bb:4f:06:b0:96:85:47:0b:3a:44:82:fe:4b:
         00:8f:72:8c:dd:0a:9b:23:f1:c1:c4:e4:04:02:dc:91:50:5a:
         00:8e:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org