Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e342e302f32332d3233203d3e20323730333434.roa
File:                     3138392e3132362e342e302f32332d3233203d3e20323730333434.roa (raw, json)
Hash identifier:          MGLwhVC83+K+CTePhxXsoJsCx4wNbD5XiSpXa038BMc=
Subject key identifier:   2F:0B:CD:18:B1:46:33:54:AE:EA:26:0F:04:0B:CB:BA:77:44:F0:32
Certificate issuer:       /CN=CFAF54635E30C399B1A891E6118299A83518A1E3
Certificate serial:       1F508FF06C6692FF5947B02CC1BBD5446EA91E50
Authority key identifier: CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFAF54635E30C399B1A891E6118299A83518A1E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e342e302f32332d3233203d3e20323730333434.roa
Signing time:             Thu 27 Jul 2023 13:22:56 +0000
ROA not before:           Thu 27 Jul 2023 13:17:56 +0000
ROA not after:            Thu 25 Jul 2024 13:22:56 +0000
asID:                     270344
IP address blocks:        189.126.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:50:8f:f0:6c:66:92:ff:59:47:b0:2c:c1:bb:d5:44:6e:a9:1e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFAF54635E30C399B1A891E6118299A83518A1E3
        Validity
            Not Before: Jul 27 13:17:56 2023 GMT
            Not After : Jul 25 13:22:56 2024 GMT
        Subject: CN=2F0BCD18B1463354AEEA260F040BCBBA7744F032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:c4:99:24:62:dd:47:42:03:be:b6:b7:a3:
                    ea:85:5c:1b:d3:fa:e1:2f:8a:e1:21:2c:c0:ca:fc:
                    99:0c:d9:47:d6:f8:53:b2:4a:fc:cc:60:02:6a:17:
                    4c:28:e7:fe:79:03:99:21:2d:b8:8d:37:06:16:df:
                    2b:f9:e1:27:9e:1f:ce:58:9b:66:e9:e1:88:d9:19:
                    cf:fe:7f:74:5b:d9:b6:c1:47:1a:f0:4c:80:42:7d:
                    1e:72:c3:e0:51:ba:02:34:57:88:d8:06:2c:44:05:
                    74:78:fc:e9:67:4c:ab:40:75:b2:ce:1f:58:cf:4f:
                    e6:79:0a:d6:d4:d4:bf:88:1e:99:17:b7:df:3e:af:
                    f6:ce:d6:31:10:1e:df:1d:f2:f0:70:06:98:07:9d:
                    6a:32:d7:73:ce:55:3f:1c:c5:3f:6d:fe:75:96:1c:
                    a9:a0:37:57:07:d0:54:00:22:54:3a:e5:77:4b:27:
                    71:6c:4d:2a:7e:aa:43:eb:81:85:64:79:7c:72:b0:
                    af:3f:f1:c5:ac:51:83:72:83:7c:9c:d7:3c:b3:17:
                    c1:7b:b1:17:b4:bc:b2:d8:11:b6:b8:e7:25:4a:c9:
                    0f:4a:25:60:54:8c:ed:97:65:96:75:ec:51:05:03:
                    fb:ef:1b:ba:9c:26:b6:0a:a4:8d:05:ad:66:5b:3c:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0B:CD:18:B1:46:33:54:AE:EA:26:0F:04:0B:CB:BA:77:44:F0:32
            X509v3 Authority Key Identifier:
                keyid:CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/CFAF54635E30C399B1A891E6118299A83518A1E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFAF54635E30C399B1A891E6118299A83518A1E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e342e302f32332d3233203d3e20323730333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:d9:93:52:a8:15:67:02:03:7a:f4:f2:57:71:cc:4d:8b:0c:
         ab:b3:ea:4e:53:6d:64:cb:1a:d9:81:5e:23:22:95:09:c3:c6:
         e1:1f:67:97:26:f5:e4:89:ae:66:06:9f:df:ab:f2:cf:6a:c8:
         3a:cc:9f:47:58:6f:bc:8d:9d:e4:48:ec:84:f1:e4:ca:d9:38:
         41:6e:26:0e:2a:e7:1b:5a:42:d7:b9:ea:7e:68:21:06:37:4e:
         ef:48:90:c0:df:47:ca:31:41:02:f9:63:01:df:e0:3b:80:bf:
         35:ab:98:ae:fd:6f:87:37:f9:fc:fc:be:08:a4:35:51:db:08:
         68:1b:73:24:65:3f:10:6c:80:c1:1a:ee:df:c4:0f:b2:38:27:
         26:de:42:ab:ab:6d:82:0f:05:76:b5:ea:95:33:e9:62:45:74:
         21:51:ba:d8:5d:da:ab:45:ab:ef:77:de:29:e6:9f:5d:69:0f:
         77:88:de:bf:8a:9d:ae:97:ca:fe:d6:78:bf:70:c6:a4:80:e3:
         67:78:cd:55:75:b9:ae:63:48:ca:4e:63:6f:2e:52:ea:27:c7:
         e1:45:5f:6a:f2:98:80:34:f0:90:f8:2f:dd:c1:db:66:51:0e:
         5d:6a:82:da:f3:be:55:0e:40:b7:12:04:d7:77:a9:74:e5:01:
         16:10:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org