Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3134302e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          Po7YcuYTrsCdfkx10QTwMGmU8HDj3oxH0mnUXD0gmxs=
Subject key identifier:   D5:11:52:DA:6E:09:20:8C:3E:86:E6:28:DC:1B:C3:20:BF:71:3E:D3
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       767979DE81F45D1DE52A99729581A1BB17641B34
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa
Signing time:             Sat 20 Jan 2024 22:16:52 +0000
ROA not before:           Sat 20 Jan 2024 22:11:52 +0000
ROA not after:            Sat 18 Jan 2025 22:16:52 +0000
asID:                     28349
IP address blocks:        189.51.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:79:79:de:81:f4:5d:1d:e5:2a:99:72:95:81:a1:bb:17:64:1b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:11:52 2024 GMT
            Not After : Jan 18 22:16:52 2025 GMT
        Subject: CN=D51152DA6E09208C3E86E628DC1BC320BF713ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:51:04:48:36:7b:26:4b:e4:66:72:63:1b:
                    7f:db:96:2c:74:1b:65:64:9a:0f:4f:fd:67:02:32:
                    59:45:4e:9d:8e:22:29:ab:51:db:0f:fd:66:92:96:
                    94:07:41:b4:7b:df:90:2b:fd:f4:b8:a5:80:bd:66:
                    c8:65:2f:17:fc:2f:ec:eb:2c:42:98:00:ea:3a:16:
                    bf:28:87:7f:2b:cb:52:6f:5b:3f:b9:03:58:ca:de:
                    2b:39:13:95:fd:76:41:4d:fd:5e:dc:41:d2:72:cb:
                    3e:9f:35:94:6e:14:29:d3:20:34:c4:43:ee:a6:d3:
                    a0:59:fd:09:9d:d4:20:8d:2b:42:23:77:e8:13:37:
                    c0:d6:d6:e6:21:89:9a:66:ab:6f:3f:e7:58:e5:76:
                    c0:4b:ea:10:23:3b:4d:74:24:ff:b3:be:52:3b:73:
                    0d:3f:e3:47:2c:23:1c:2f:b8:dd:a2:c8:3c:98:00:
                    96:66:83:6e:26:02:b1:4b:8b:af:04:9f:4a:37:fa:
                    24:45:71:16:e4:3d:f9:d1:34:6d:76:bf:3f:b5:32:
                    3c:86:c6:3f:73:9a:3d:3d:dd:33:0f:9c:f6:64:6c:
                    fc:95:ab:65:f8:a6:32:2e:04:a3:8b:27:aa:5c:8e:
                    ae:b1:6e:6e:a6:1b:84:09:db:fa:f6:07:03:37:d7:
                    58:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:11:52:DA:6E:09:20:8C:3E:86:E6:28:DC:1B:C3:20:BF:71:3E:D3
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:a1:f3:39:aa:b3:44:21:01:57:4f:f1:32:bb:a0:63:9c:
         4a:19:ca:bd:9c:ca:c4:ae:5d:fd:b6:35:71:4b:11:22:2a:22:
         fd:0f:93:23:15:ad:a1:b2:c6:0c:eb:72:cd:20:f3:3c:ab:33:
         a3:73:ed:21:c3:71:a7:f2:2d:42:ce:32:02:8f:b0:d4:cb:8f:
         08:f8:af:f6:3b:a2:7c:98:97:55:da:0e:79:22:50:bc:20:da:
         02:48:55:a3:4f:39:ef:7c:95:fd:d0:29:a8:b9:f1:db:2c:2a:
         96:66:50:12:49:ee:fc:73:c2:36:33:6a:5e:78:1c:ed:ac:77:
         1a:1f:5e:86:25:ea:7e:62:41:db:c1:5e:ca:91:20:b6:20:70:
         29:8b:44:68:c7:84:d9:29:01:79:58:a9:d6:98:24:47:63:be:
         40:62:df:cb:fe:e7:b2:74:b9:8f:1f:90:5e:81:fc:bb:b8:31:
         00:23:93:a3:15:27:9c:ba:69:92:21:c3:85:72:dc:02:10:1c:
         78:a5:d9:0c:10:cb:23:2d:39:00:eb:ee:6b:39:b4:db:78:62:
         28:f3:e8:a9:1b:14:ca:0a:4f:36:71:22:b5:67:bb:80:3f:2b:
         98:0e:ba:33:53:68:9b:71:a3:86:09:5e:d7:7c:b1:aa:cd:06:
         9a:6b:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org