Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e352e302f32342d3234203d3e20323730333434.roa
File:                     3138392e3132362e352e302f32342d3234203d3e20323730333434.roa (raw, json)
Hash identifier:          V5/4bYxLUKF2i2Kur7uJ+Li9AMCQKVkwdkYVdCSmWUc=
Subject key identifier:   4E:D0:FE:FF:65:23:65:05:FC:7D:39:DF:E2:E4:49:EA:79:DA:65:37
Certificate issuer:       /CN=CFAF54635E30C399B1A891E6118299A83518A1E3
Certificate serial:       35ECE4B2DADE4E628ED79D5AE09A56250B62DB83
Authority key identifier: CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFAF54635E30C399B1A891E6118299A83518A1E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e352e302f32342d3234203d3e20323730333434.roa
Signing time:             Thu 27 Jul 2023 13:23:18 +0000
ROA not before:           Thu 27 Jul 2023 13:18:18 +0000
ROA not after:            Thu 25 Jul 2024 13:23:18 +0000
asID:                     270344
IP address blocks:        189.126.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ec:e4:b2:da:de:4e:62:8e:d7:9d:5a:e0:9a:56:25:0b:62:db:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFAF54635E30C399B1A891E6118299A83518A1E3
        Validity
            Not Before: Jul 27 13:18:18 2023 GMT
            Not After : Jul 25 13:23:18 2024 GMT
        Subject: CN=4ED0FEFF65236505FC7D39DFE2E449EA79DA6537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:e8:08:80:52:e2:87:72:aa:63:f6:03:a8:
                    39:85:40:57:bb:3f:07:3e:98:0d:96:7b:05:80:a4:
                    aa:a2:b4:48:af:2c:45:d1:52:13:7e:0f:30:15:ec:
                    62:b7:31:a2:1a:f5:d2:1e:02:4a:10:89:a5:2a:da:
                    eb:3c:1a:50:79:58:44:c5:79:8b:ed:3b:f3:38:65:
                    81:96:94:a7:a8:4e:35:a3:ad:22:06:db:3b:22:8b:
                    5f:b5:95:a6:76:6c:b2:cc:8f:e8:c9:1a:47:16:99:
                    06:8c:fe:e4:32:a3:8e:90:52:fa:a1:b3:e1:80:49:
                    2f:cf:61:57:9a:a6:0e:4c:2a:03:b5:93:d8:10:f8:
                    44:0a:ad:36:79:23:27:74:83:66:be:1b:92:13:0c:
                    d2:b3:da:e9:a6:6d:21:41:76:02:b0:a8:4f:16:96:
                    32:ce:d2:43:75:9d:39:9a:57:fc:98:a6:80:f9:46:
                    cf:21:59:aa:df:eb:f9:ea:c3:8b:63:b7:86:2b:ee:
                    2b:9c:51:22:1b:06:04:b6:02:5c:9d:56:ec:a4:94:
                    f7:9d:29:81:72:29:0f:76:ea:9b:f5:bf:76:11:8a:
                    a5:63:87:e1:70:c8:35:39:de:07:8f:e6:9c:ad:cf:
                    f8:d9:47:f2:c1:30:20:c9:ce:f9:98:2f:7a:1b:82:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D0:FE:FF:65:23:65:05:FC:7D:39:DF:E2:E4:49:EA:79:DA:65:37
            X509v3 Authority Key Identifier:
                keyid:CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/CFAF54635E30C399B1A891E6118299A83518A1E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFAF54635E30C399B1A891E6118299A83518A1E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e352e302f32342d3234203d3e20323730333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:61:ca:b3:d3:2b:38:a0:a3:d7:19:90:57:7a:6e:3b:f5:
         77:d0:65:48:7f:0b:f2:85:42:a3:60:3d:2f:84:99:23:69:e7:
         27:e4:fb:57:2f:58:3e:c9:23:fc:14:a4:90:e4:db:27:2e:fc:
         8b:85:fb:5c:bd:2b:81:de:83:67:b4:f9:48:2c:4e:b8:10:7f:
         d6:e7:66:27:f2:4a:e0:d2:aa:8b:c8:1c:f7:2d:88:09:2e:a3:
         57:81:dd:0c:70:4a:f8:83:15:56:81:26:1b:e9:0e:6f:c1:73:
         85:5e:69:66:bd:f4:e4:e2:8d:0e:5c:7e:d0:0f:bf:86:e9:dc:
         5b:ca:4f:eb:55:a8:ac:d8:bc:db:88:a3:6a:0a:e6:ea:69:98:
         4d:69:21:c0:61:d1:ba:e2:b3:a9:f9:04:ee:46:bb:7f:21:94:
         05:5d:90:3a:42:1c:d9:42:66:a2:8f:32:fe:27:ea:3b:02:a7:
         52:63:9a:1f:f8:14:a9:76:7a:69:fd:bf:52:fa:e9:e5:f1:da:
         4d:a1:9e:6d:15:5b:0a:93:f7:0e:5b:67:7e:21:c1:58:3c:13:
         3e:e8:f8:89:6d:03:4a:7f:c4:0f:5e:d0:54:8d:70:84:23:bc:
         7e:df:2a:95:10:37:57:76:df:39:6a:60:fb:57:9b:84:3c:5f:
         43:84:cd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org