Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32332d3233203d3e203238323235.roa
File:                     3138392e3132362e36342e302f32332d3233203d3e203238323235.roa (raw, json)
Hash identifier:          FM/UW7UK1Q3V9AodvRw7v/33fgbahArrdfSr+sLuYd8=
Subject key identifier:   94:3C:2E:27:88:F6:B3:BF:8A:FB:30:C1:51:AD:EE:E6:F7:F4:0F:32
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       6340163369F0FA724279E8C9BC606DE10C8A8CC2
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32332d3233203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:16 +0000
ROA not before:           Tue 09 Jan 2024 12:51:16 +0000
ROA not after:            Tue 07 Jan 2025 12:56:16 +0000
asID:                     28225
IP address blocks:        189.126.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:40:16:33:69:f0:fa:72:42:79:e8:c9:bc:60:6d:e1:0c:8a:8c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:16 2024 GMT
            Not After : Jan  7 12:56:16 2025 GMT
        Subject: CN=943C2E2788F6B3BF8AFB30C151ADEEE6F7F40F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:df:ab:fb:5e:8a:be:2c:dd:44:b9:ff:bc:
                    41:60:fd:a4:2a:d6:17:32:f2:9d:1c:cd:f3:aa:ac:
                    5c:cc:ea:4b:68:2d:59:4f:dd:15:b6:d4:8d:6b:e1:
                    8b:68:79:dd:25:9c:04:51:c4:3f:ec:7e:d0:b7:e9:
                    4e:c1:b8:8b:57:a5:9d:b4:78:1c:7c:f0:a5:14:f1:
                    91:b3:64:1e:11:23:50:07:06:68:c3:d5:d5:e1:a6:
                    f1:79:d4:35:b4:74:d0:e1:b3:9d:3c:16:ae:5b:49:
                    28:5e:2d:7a:8e:bd:c9:3f:ba:e3:05:7a:8f:90:36:
                    2b:4f:23:e7:ac:4b:09:44:d5:e4:c3:55:1e:7e:f0:
                    bb:7c:8b:d0:0e:33:38:b4:da:a6:c5:bf:33:99:f7:
                    49:fb:2b:33:2e:02:b7:ec:0a:f6:76:d1:86:cd:a2:
                    7e:5b:c4:ec:27:59:e7:59:7f:6b:f7:bd:5f:5e:e2:
                    56:dc:eb:18:ae:ff:4f:9a:34:7a:45:31:49:f1:07:
                    e4:32:e5:b6:3f:48:8a:cc:5e:cf:c8:6b:85:e4:82:
                    37:a1:ac:d5:e0:18:79:df:8f:61:97:5a:24:24:c2:
                    8d:f4:4f:84:d0:a8:5d:56:9e:25:86:d6:09:ae:4d:
                    ca:8f:36:78:1e:04:d2:a5:37:ba:51:a9:85:12:5b:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3C:2E:27:88:F6:B3:BF:8A:FB:30:C1:51:AD:EE:E6:F7:F4:0F:32
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32332d3233203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:a0:24:b1:d0:7d:f1:71:f9:71:e2:11:49:22:61:b8:f9:27:
         b3:54:be:79:e5:df:8e:da:9e:c9:da:12:11:75:4f:6f:33:22:
         7b:b8:7a:08:36:fd:b1:de:dc:b8:8a:1d:d9:8d:f0:d4:bc:82:
         ef:68:21:d5:93:ba:44:1f:2e:0e:86:d9:d1:22:f6:cc:96:04:
         c7:5d:96:69:29:e1:ff:27:56:06:5f:96:5b:0d:6c:d7:6b:05:
         68:b7:8e:49:2c:7d:33:f2:87:8f:74:91:1a:76:b1:c6:e3:18:
         39:ff:e1:b4:04:bb:49:1d:50:d3:41:01:17:dc:ec:d5:66:8e:
         c5:54:89:3b:42:58:d2:74:46:34:68:46:c2:cb:34:c1:3e:c3:
         d9:08:50:1a:c7:a6:bc:f5:55:97:d4:dc:e8:1b:56:59:49:83:
         09:54:17:38:03:7d:96:8a:33:a7:cc:c8:eb:93:f1:25:b1:53:
         92:31:65:58:c7:09:c9:ab:70:eb:a0:3c:2d:2f:c4:8d:04:57:
         29:e6:d4:46:20:ed:07:d8:4d:12:6b:ff:0c:09:79:b0:44:ae:
         6c:71:2e:f8:4d:ae:37:0b:69:20:8e:bb:5e:7a:ff:0c:f0:18:
         89:60:64:44:fc:0a:fd:bc:eb:e6:04:1c:9c:d9:18:f6:f0:38:
         24:fd:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org