Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36362e302f32332d3233203d3e203238323235.roa
File:                     3138392e3132362e36362e302f32332d3233203d3e203238323235.roa (raw, json)
Hash identifier:          5vG0pf02ckSnVrm1C4w12BgbzX1LZENeMNeZcClqAT8=
Subject key identifier:   62:E7:0C:01:4C:21:33:73:CF:6A:10:02:70:E3:FD:C7:34:08:EA:AA
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       3DCAB9A1C466D10DD9B837D4859BEDC1282688A8
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36362e302f32332d3233203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:17 +0000
ROA not before:           Tue 09 Jan 2024 12:51:17 +0000
ROA not after:            Tue 07 Jan 2025 12:56:17 +0000
asID:                     28225
IP address blocks:        189.126.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ca:b9:a1:c4:66:d1:0d:d9:b8:37:d4:85:9b:ed:c1:28:26:88:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:17 2024 GMT
            Not After : Jan  7 12:56:17 2025 GMT
        Subject: CN=62E70C014C213373CF6A100270E3FDC73408EAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:d9:f1:dd:0d:12:fc:d2:89:86:27:c7:42:
                    6c:6b:6c:ba:28:e8:1b:63:50:3b:39:f6:3a:9f:6a:
                    a6:47:78:9d:14:b2:d3:2d:ae:83:1a:76:c9:53:4d:
                    0b:c6:82:95:bf:89:c7:fb:32:6a:d7:4a:74:28:28:
                    51:64:3b:64:d7:ba:d5:0b:33:4f:ed:33:3e:89:41:
                    7b:17:a1:5b:5b:b9:d0:ec:ef:8d:36:99:40:66:37:
                    62:84:97:f1:1f:97:b6:d2:74:95:a5:53:67:33:a0:
                    67:26:d6:e8:ab:fa:cd:91:42:d0:23:da:dc:f7:a3:
                    56:e6:0c:62:e9:45:01:3a:ab:09:49:75:e5:9a:46:
                    19:3b:cd:40:b2:9c:4a:cd:48:c6:1e:50:8c:8c:9a:
                    68:56:d9:76:e5:ec:27:be:95:3b:9b:02:8e:52:fa:
                    a0:42:46:3a:49:ef:39:9b:82:87:6e:b9:9e:20:ea:
                    2e:20:11:49:6d:72:d4:d5:27:17:3d:0e:50:e7:1b:
                    32:b3:be:22:1e:68:7d:84:db:c3:f8:11:03:9c:9f:
                    91:4c:77:56:d8:93:27:dd:4c:69:4c:9f:c7:01:c7:
                    ef:01:06:07:39:24:4a:da:fe:be:a5:d2:b9:b9:71:
                    10:0c:21:75:5d:9d:38:5f:c3:c4:3f:0d:5d:c0:80:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E7:0C:01:4C:21:33:73:CF:6A:10:02:70:E3:FD:C7:34:08:EA:AA
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36362e302f32332d3233203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:41:f2:c2:44:4f:b5:26:c2:12:5d:df:d7:0c:32:98:ee:1b:
         79:b8:e2:b7:58:c6:bc:8e:d7:05:9b:6a:8c:51:ef:a3:a8:b8:
         45:0d:87:d6:8e:05:7b:45:1e:48:0b:32:53:a1:b1:03:00:44:
         58:2a:bb:c6:a3:2e:1d:83:1e:7f:d7:6a:10:43:20:b0:3e:50:
         0f:88:19:d5:dc:c1:e9:f5:13:5b:c4:45:8f:38:a9:60:32:db:
         08:31:41:47:5d:89:c1:16:2e:63:6f:98:0d:1b:8b:24:7e:6f:
         10:d7:03:98:19:b6:7b:76:37:4d:13:78:75:88:60:ba:24:af:
         0e:d0:12:b8:03:ad:7a:8f:07:84:48:21:84:2c:fc:a2:9a:f2:
         ae:50:de:19:8a:5b:3b:af:ff:66:f0:61:9f:a9:af:1b:87:fe:
         77:03:c2:69:49:91:17:67:b3:98:d6:03:10:94:2f:33:de:1f:
         8e:65:79:e1:5d:55:87:1a:1e:0c:cd:db:3c:bc:bb:9b:9b:74:
         cb:1e:b3:51:6a:9d:be:2b:3a:95:e0:a7:0a:31:2a:98:ce:6d:
         c4:cc:29:06:48:24:e2:c1:12:46:56:08:20:25:3d:6b:e0:2c:
         19:1f:4a:34:fd:8b:e7:d9:73:ef:87:71:a6:4f:4d:d2:5a:54:
         ff:b2:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org