Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134342e302f32312d3234203d3e203238333439.roa
File:                     3138392e35312e3134342e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          Wsh5G8FaX7LTg7wDr9i4IjI2/rSLqdrGXlmNe2JE1yw=
Subject key identifier:   04:A7:E8:3C:A0:50:63:40:E7:A3:6C:D4:25:DC:0B:60:FC:9E:6F:41
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       0E27E0583A73A9AB9100AAF4DD38F550BF0E724D
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134342e302f32312d3234203d3e203238333439.roa
Signing time:             Sat 20 Jan 2024 22:15:08 +0000
ROA not before:           Sat 20 Jan 2024 22:10:08 +0000
ROA not after:            Sat 18 Jan 2025 22:15:08 +0000
asID:                     28349
IP address blocks:        189.51.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:27:e0:58:3a:73:a9:ab:91:00:aa:f4:dd:38:f5:50:bf:0e:72:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:10:08 2024 GMT
            Not After : Jan 18 22:15:08 2025 GMT
        Subject: CN=04A7E83CA0506340E7A36CD425DC0B60FC9E6F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:79:ef:63:68:e0:61:fe:b1:0e:c8:be:71:67:
                    20:24:fd:c1:22:68:c5:da:67:4c:84:ee:84:68:91:
                    75:9e:8e:6b:a8:1b:92:e1:79:ad:b5:a4:7d:1a:cb:
                    66:39:1e:1d:81:96:4f:be:ed:2f:64:b9:28:b7:66:
                    87:23:55:14:c2:9b:88:78:86:f7:96:45:1e:1e:c4:
                    78:8d:9a:22:bd:3f:6a:1f:91:58:55:34:17:d0:c0:
                    47:8c:df:f4:37:35:ad:1c:c8:d7:7f:b9:3f:e4:6f:
                    e6:46:ac:65:4b:0b:50:4c:99:7f:6e:8a:fe:69:5f:
                    b1:57:99:d2:55:37:a8:bd:80:e8:c1:ed:8c:f8:3c:
                    72:20:e8:69:fe:39:96:59:49:95:da:d3:a1:8c:37:
                    27:46:ac:72:1e:53:02:c9:2d:1b:f4:bf:a1:eb:bb:
                    95:25:8c:fd:07:3f:5f:9f:61:6c:6b:85:fa:b6:de:
                    34:36:37:87:6e:2f:67:5b:9d:66:5d:37:5b:ed:43:
                    01:17:9f:3c:69:7b:bc:bf:f6:9c:df:d0:ac:d7:d5:
                    0d:06:01:c4:12:81:c2:73:e7:d4:38:a6:15:1a:7d:
                    24:4d:ce:c7:d7:32:85:e1:34:10:47:99:2d:79:4d:
                    00:72:54:7b:43:f3:58:ec:b4:a3:c0:98:4d:a7:4b:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A7:E8:3C:A0:50:63:40:E7:A3:6C:D4:25:DC:0B:60:FC:9E:6F:41
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134342e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:8f:ff:9a:44:25:0e:ee:ba:29:5a:f9:04:68:ed:88:f5:
         20:cf:e4:b2:5d:6a:18:39:89:4f:8e:36:43:3a:39:41:02:2e:
         50:cf:63:61:b4:52:d1:23:2e:2b:cd:0e:9d:6d:0d:15:d4:00:
         23:b7:08:63:41:e6:0e:06:b7:7a:9a:91:9e:1e:02:23:17:31:
         b8:5d:fb:17:ae:2e:6a:14:43:cd:63:04:59:05:ab:be:08:e0:
         6a:5b:5e:65:37:59:c9:39:d4:d2:81:d2:53:81:36:a7:8b:22:
         ab:cb:79:99:76:c7:d4:d2:4a:5b:60:a5:1a:bc:64:f5:07:6b:
         de:e1:49:26:f1:87:17:b5:d0:bb:a7:17:9a:5e:45:a6:96:d6:
         39:13:ef:d3:2a:2a:96:a4:d0:ee:d5:95:ee:58:12:62:66:b8:
         e3:f2:74:03:12:ef:b7:93:a1:c7:38:a1:aa:c8:0b:81:c8:ac:
         b9:b1:65:fa:2b:40:65:9c:ac:59:41:3e:f9:b4:08:8b:51:a8:
         ce:e1:88:be:63:d2:27:00:f9:04:d5:1b:a7:b0:d3:6e:ac:68:
         42:ce:d7:98:60:00:ca:0a:41:ed:95:16:cf:fd:87:fc:42:89:
         b0:cb:c9:73:31:61:74:5d:ba:b6:ff:17:9a:3f:b6:de:df:f5:
         4f:be:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org