Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e342e302f32342d3234203d3e20323730333434.roa
File:                     3138392e3132362e342e302f32342d3234203d3e20323730333434.roa (raw, json)
Hash identifier:          uTbz9S9LQ9cWHGNVTp2hzGjRqo7xSLC7MrTtgl/o8G0=
Subject key identifier:   F9:45:82:91:00:A8:9F:B3:BC:EC:3B:F9:72:62:51:04:6B:A2:14:39
Certificate issuer:       /CN=CFAF54635E30C399B1A891E6118299A83518A1E3
Certificate serial:       38555BF0E4390E1FAAC4282528DB82819C3D52C3
Authority key identifier: CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFAF54635E30C399B1A891E6118299A83518A1E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e342e302f32342d3234203d3e20323730333434.roa
Signing time:             Thu 27 Jul 2023 13:23:15 +0000
ROA not before:           Thu 27 Jul 2023 13:18:15 +0000
ROA not after:            Thu 25 Jul 2024 13:23:15 +0000
asID:                     270344
IP address blocks:        189.126.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:55:5b:f0:e4:39:0e:1f:aa:c4:28:25:28:db:82:81:9c:3d:52:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFAF54635E30C399B1A891E6118299A83518A1E3
        Validity
            Not Before: Jul 27 13:18:15 2023 GMT
            Not After : Jul 25 13:23:15 2024 GMT
        Subject: CN=F945829100A89FB3BCEC3BF9726251046BA21439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:76:33:f6:9f:44:d2:51:54:ea:c1:43:3c:40:
                    d3:a0:87:93:83:e8:13:8e:23:88:e3:d3:d5:c2:df:
                    b1:b4:66:5d:a9:b7:97:fd:01:fd:a9:10:8a:13:9c:
                    7a:58:26:b5:12:3f:a3:19:cf:c7:b4:01:ab:09:87:
                    c2:ae:2f:fa:7b:ca:df:ef:b1:dc:3b:ce:30:c6:3e:
                    24:83:2f:d2:f0:7a:46:e7:a4:d8:69:4b:6e:85:43:
                    d9:f7:67:2d:8c:ce:cc:36:1b:1d:17:0b:37:04:8b:
                    3e:1a:d4:d8:38:a4:9d:3c:19:82:f3:2f:04:64:f4:
                    97:48:6e:bb:e8:af:29:2c:cf:47:4e:c2:c0:08:c3:
                    72:2d:03:0d:ad:b7:7a:1c:6b:93:1d:23:18:4c:43:
                    e1:62:18:47:5e:0e:f4:61:f5:0c:0d:9c:77:6c:1c:
                    21:cc:2f:e8:c2:9a:c7:c4:91:73:74:28:cd:07:1a:
                    83:bf:d9:33:df:ca:3a:ad:84:4b:0e:62:db:16:d0:
                    ff:74:ae:b3:a3:5f:70:7a:14:56:49:36:2a:fb:c6:
                    8a:f8:26:e4:ee:37:41:09:ab:a3:44:5b:42:04:0f:
                    64:f8:d6:b8:52:43:d8:b2:f3:7c:15:d0:cf:f0:75:
                    33:c6:4f:14:dd:9a:ff:8c:e6:af:6c:00:99:c3:6c:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:45:82:91:00:A8:9F:B3:BC:EC:3B:F9:72:62:51:04:6B:A2:14:39
            X509v3 Authority Key Identifier:
                keyid:CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/CFAF54635E30C399B1A891E6118299A83518A1E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFAF54635E30C399B1A891E6118299A83518A1E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e342e302f32342d3234203d3e20323730333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:aa:e2:89:63:93:10:0e:2c:52:a4:47:4a:dc:e1:51:60:3a:
         bf:a2:f4:2c:c4:7d:cc:0d:8e:36:c0:9c:6a:89:53:6b:19:e9:
         05:a6:18:ad:33:ef:e5:a4:d0:b3:73:84:84:86:30:5f:d3:b4:
         13:91:10:33:b2:62:50:d7:5b:fe:41:fe:c6:49:56:97:42:0a:
         d2:50:97:2b:bf:20:cc:db:1b:36:94:19:5e:91:40:a9:74:eb:
         77:e9:f8:87:b7:f2:3c:b5:3a:0b:f2:8a:1c:72:d5:f0:7b:0d:
         b1:5a:90:99:a6:ef:d6:c0:90:b1:af:da:81:14:96:bb:df:de:
         c0:d4:96:1d:66:35:c0:93:3a:17:7e:17:b8:11:8f:f3:d5:9b:
         55:34:ba:a5:8d:9b:72:a3:17:ff:a0:a1:4a:7a:3f:af:04:41:
         13:62:86:d3:58:17:db:3a:d0:d6:e1:c6:cd:ab:6d:ab:55:97:
         a7:9c:ff:fa:85:b6:81:e6:c2:d6:b1:b1:a2:56:ef:94:36:94:
         30:f7:5b:06:7a:43:7e:be:3c:77:59:83:b3:9f:c9:13:00:74:
         43:37:dd:77:6e:cf:85:01:05:f0:f6:6f:00:eb:13:00:16:22:
         e6:28:a6:35:85:ab:b4:90:b6:ac:3a:35:23:1c:79:60:2b:d7:
         76:10:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org