Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e372e302f32342d3234203d3e20323730333434.roa
File:                     3138392e3132362e372e302f32342d3234203d3e20323730333434.roa (raw, json)
Hash identifier:          LayFNlzMDcherUbUq6+OVNjrtLLt8PN0ZcxAOlXsiIU=
Subject key identifier:   25:E7:75:BF:D1:C8:CE:B8:F0:DA:D6:60:C2:C7:2B:B4:E3:FC:75:BC
Certificate issuer:       /CN=CFAF54635E30C399B1A891E6118299A83518A1E3
Certificate serial:       79F921EAEB88016C09DBE4FA9B45B3A06E4F043B
Authority key identifier: CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFAF54635E30C399B1A891E6118299A83518A1E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e372e302f32342d3234203d3e20323730333434.roa
Signing time:             Thu 27 Jul 2023 13:23:09 +0000
ROA not before:           Thu 27 Jul 2023 13:18:09 +0000
ROA not after:            Thu 25 Jul 2024 13:23:09 +0000
asID:                     270344
IP address blocks:        189.126.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f9:21:ea:eb:88:01:6c:09:db:e4:fa:9b:45:b3:a0:6e:4f:04:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFAF54635E30C399B1A891E6118299A83518A1E3
        Validity
            Not Before: Jul 27 13:18:09 2023 GMT
            Not After : Jul 25 13:23:09 2024 GMT
        Subject: CN=25E775BFD1C8CEB8F0DAD660C2C72BB4E3FC75BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:36:d8:5d:1b:82:93:5d:eb:eb:ad:fa:36:85:
                    c1:6b:d9:c3:a8:2a:19:86:f0:0a:c6:52:18:45:1e:
                    4e:3c:60:2f:d2:d7:a6:96:97:e7:f1:ec:e0:a3:9c:
                    ff:61:f6:f4:20:86:ff:ba:c0:02:06:ef:dc:71:52:
                    c4:82:00:a5:b9:70:fc:35:a3:98:ce:7c:d2:8c:c7:
                    c5:8b:62:7c:4c:53:01:a7:8a:60:c1:db:dd:5d:79:
                    63:2f:1a:3f:a3:f2:21:96:69:0c:be:30:f3:6e:4b:
                    55:c7:36:f2:48:44:f8:c8:77:30:c8:72:f2:8d:3e:
                    5b:a0:08:d0:18:8b:1f:b5:91:79:38:d4:0c:e3:93:
                    a0:2e:e6:6b:da:f6:5a:ac:9a:62:16:50:4c:bc:53:
                    35:b9:e0:88:c1:2d:27:6d:96:44:24:00:83:ab:52:
                    40:79:c2:3d:3e:af:10:8a:1b:c7:7f:f2:c3:ca:a5:
                    f5:42:b3:99:7d:dc:10:06:2d:54:80:0e:e7:6a:0a:
                    f5:75:d8:56:55:1a:8d:eb:7b:07:58:41:af:4d:89:
                    1e:4d:ca:f4:22:61:c1:45:39:4b:35:27:b9:2f:e0:
                    80:66:50:4e:44:6e:f9:51:7f:c3:20:ce:ad:35:fe:
                    a9:04:a2:9c:9c:81:40:00:d0:be:3c:b3:0e:8c:32:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E7:75:BF:D1:C8:CE:B8:F0:DA:D6:60:C2:C7:2B:B4:E3:FC:75:BC
            X509v3 Authority Key Identifier:
                keyid:CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/CFAF54635E30C399B1A891E6118299A83518A1E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFAF54635E30C399B1A891E6118299A83518A1E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/3138392e3132362e372e302f32342d3234203d3e20323730333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:2e:5a:24:b1:4f:44:98:9d:ce:b4:14:35:57:3d:91:07:16:
         37:e1:ad:39:0e:7c:8c:7f:28:15:ae:47:86:a7:d6:66:a0:fb:
         65:13:0b:0c:36:df:f5:ae:6c:12:05:51:d9:c5:fb:98:75:6d:
         19:69:ba:46:fe:eb:bd:f4:39:14:cd:3d:99:9a:c8:f4:da:97:
         56:2c:7e:08:fe:39:6f:22:54:3c:fe:5d:78:f3:e2:e8:06:bd:
         3b:38:26:15:ff:9c:ef:cf:ee:d6:8d:68:a0:e8:90:64:5e:3e:
         48:29:bf:f1:d9:f8:e0:66:94:4d:38:5f:dc:df:40:fd:fb:da:
         a6:0d:57:c7:4d:f2:e2:7c:92:48:48:7d:96:e4:93:7a:b6:e0:
         90:3b:c2:7c:99:d5:ee:18:61:97:b2:b2:01:0b:31:68:bd:40:
         1d:2b:89:db:9a:e1:d2:0a:dc:64:58:69:b2:e4:58:8e:3b:bb:
         65:a2:0e:04:bf:06:90:72:50:8f:d8:b7:4d:c9:09:6f:de:d8:
         a3:af:f7:74:76:2c:e2:93:2e:37:e8:b2:8c:e6:9d:2f:71:53:
         3f:25:dc:fc:b1:98:db:54:f0:4d:cc:b3:04:60:99:82:78:fc:
         c5:0d:03:62:30:6c:89:34:08:b3:5a:78:c0:ea:fa:ae:97:a1:
         35:8f:3e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org