Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32312d3231203d3e203238323235.roa
File:                     3138392e3132362e36342e302f32312d3231203d3e203238323235.roa (raw, json)
Hash identifier:          0exL4qiCS07BEPDzPO9eyOzU1XIHssoe/rxV9hbpuWs=
Subject key identifier:   68:71:77:6C:39:DC:5F:37:E0:6B:58:F0:F7:44:A8:9B:C1:4F:D7:F0
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       01B364540FB427831F8E39FD988386538F486FE9
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32312d3231203d3e203238323235.roa
Signing time:             Wed 10 Jan 2024 14:41:00 +0000
ROA not before:           Wed 10 Jan 2024 14:36:00 +0000
ROA not after:            Wed 08 Jan 2025 14:41:00 +0000
asID:                     28225
IP address blocks:        189.126.64.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b3:64:54:0f:b4:27:83:1f:8e:39:fd:98:83:86:53:8f:48:6f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan 10 14:36:00 2024 GMT
            Not After : Jan  8 14:41:00 2025 GMT
        Subject: CN=6871776C39DC5F37E06B58F0F744A89BC14FD7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:b6:49:71:1a:da:e5:a4:70:d8:d1:29:c5:
                    21:ed:da:66:9e:fa:e1:15:66:01:a7:06:20:f2:89:
                    f5:44:db:24:93:2b:9d:b2:0d:9b:dd:39:fd:f1:b0:
                    00:ba:8e:10:fd:3a:d0:ee:89:bc:64:e1:0f:3b:59:
                    02:d9:12:47:a9:fd:de:c4:23:41:51:88:e4:ec:a9:
                    de:31:2b:ed:3b:6d:1a:7a:47:14:fc:db:c4:5a:84:
                    67:40:dd:de:3c:17:e6:13:be:38:df:0e:59:40:50:
                    59:a3:b7:77:ce:25:9c:51:19:d5:d5:b4:75:d7:c6:
                    3d:6f:21:4d:c3:08:47:00:a0:2d:3d:40:4a:38:ed:
                    5e:26:e9:e1:05:4b:32:82:b9:5e:00:e5:f6:24:82:
                    df:4b:19:44:b6:42:69:19:17:13:c2:3e:e5:e3:4f:
                    8e:e6:98:e3:74:71:c3:d6:22:e9:f9:e0:5c:b1:89:
                    19:3c:57:54:25:58:ad:a5:6a:c8:f3:ea:6b:5d:78:
                    0a:1f:da:f8:b4:ee:fa:b5:87:d0:dc:1d:1a:b5:2f:
                    89:7e:e7:c9:67:66:3e:27:06:e4:54:f2:f3:5b:10:
                    88:3a:6b:64:26:2c:01:a8:00:1b:84:6a:03:a2:b7:
                    52:57:ea:79:f5:39:be:03:67:31:aa:ff:56:eb:c6:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:71:77:6C:39:DC:5F:37:E0:6B:58:F0:F7:44:A8:9B:C1:4F:D7:F0
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32312d3231203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:26:df:5b:1f:44:b8:98:35:79:fa:c3:6a:78:7b:ce:ac:d5:
         b0:2f:49:59:ea:a2:83:02:d2:ce:38:49:ec:15:d5:aa:18:bf:
         25:94:db:4a:49:f4:ee:0c:a1:e8:db:04:83:fa:48:2d:5f:b3:
         51:c1:e0:7b:96:13:39:7e:f6:84:b4:cb:2b:f4:3d:4b:a5:68:
         2f:fc:c6:12:60:f9:58:00:f5:ab:51:56:0c:50:4c:88:c6:47:
         ac:6e:42:15:54:8b:d7:d0:4e:0c:49:71:76:89:93:be:a9:8e:
         2c:78:02:37:c2:35:d9:22:81:40:92:6b:6f:b1:7d:b3:fc:8f:
         aa:0f:f8:b8:0e:49:6a:2a:0e:6b:b4:d4:f6:5b:10:c4:5d:f9:
         ac:d9:19:9b:9c:b4:0c:86:f5:4b:d3:7b:e9:10:e2:69:1c:b7:
         0b:ae:53:12:c3:ca:f3:47:70:6d:00:e2:9e:5f:6e:a9:27:f2:
         6f:60:a7:25:1d:0c:43:2b:e5:2d:c2:6c:ce:5f:21:35:b3:cd:
         60:84:47:4b:3f:fe:34:5f:06:74:e6:cd:47:6e:71:39:d7:8e:
         7e:47:7f:6d:be:54:e2:b0:2d:75:c8:df:85:46:ea:1c:ea:05:
         b8:65:2f:1b:90:99:43:48:b4:b2:c7:21:e7:c9:39:44:bb:1c:
         3e:19:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org