Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36362e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e36362e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          5gzybZwFglW3v2Czj5gQAxeKSiAjFJF+qWibbTBymQI=
Subject key identifier:   47:0C:4B:67:D1:D5:D1:C6:F7:0A:38:16:15:B8:AB:8A:DF:ED:46:2C
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       54071B37A09760D3AA49DB7AA9090D5050033927
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36362e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:19 +0000
ROA not before:           Tue 09 Jan 2024 12:51:19 +0000
ROA not after:            Tue 07 Jan 2025 12:56:19 +0000
asID:                     28225
IP address blocks:        189.126.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:07:1b:37:a0:97:60:d3:aa:49:db:7a:a9:09:0d:50:50:03:39:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:19 2024 GMT
            Not After : Jan  7 12:56:19 2025 GMT
        Subject: CN=470C4B67D1D5D1C6F70A381615B8AB8ADFED462C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:93:98:fc:da:b4:f6:32:a2:87:03:a0:22:
                    dd:b8:e0:b1:12:36:f4:b8:42:5d:91:91:35:c7:73:
                    6a:78:6c:5f:1f:81:c0:11:93:29:98:45:4d:41:d2:
                    eb:e9:32:43:a5:74:1b:60:14:ab:b4:38:ac:e5:86:
                    f5:93:40:36:e3:2f:79:a1:82:fe:33:76:57:4e:8e:
                    14:73:f5:7f:ee:36:fa:2b:1a:32:8b:ce:0a:1f:6e:
                    25:3c:3d:c0:70:2f:c4:cb:78:31:3e:71:2e:5c:21:
                    52:9b:9c:28:3e:4f:b2:1f:94:3f:10:65:86:c6:83:
                    bb:36:6e:c3:cd:4a:32:98:d7:fa:12:af:de:07:5d:
                    80:41:c0:33:5f:3d:dd:a0:74:d3:ee:03:54:ea:0b:
                    28:77:33:87:f6:de:ca:5b:82:aa:3f:29:a8:50:be:
                    70:e2:af:1c:3e:74:b4:0c:d3:c9:d9:05:e8:f6:5f:
                    18:a1:19:8a:7e:14:e1:a0:c3:e3:e1:04:bd:a2:7d:
                    2f:ae:ad:51:eb:16:db:da:3e:8b:1a:a9:07:1f:c7:
                    b9:70:db:b3:0a:52:b9:6d:9c:5c:36:31:82:58:64:
                    6a:a8:ca:52:e3:1f:20:4f:63:82:6a:86:c5:2a:90:
                    3a:2a:b7:13:8a:d7:df:07:74:53:6a:bf:e5:af:f1:
                    ba:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0C:4B:67:D1:D5:D1:C6:F7:0A:38:16:15:B8:AB:8A:DF:ED:46:2C
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36362e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b9:91:57:44:e7:97:ba:7f:04:be:86:70:b2:64:06:e3:f6:
         31:42:2c:7b:37:18:62:9c:cc:79:34:60:a5:79:10:3c:1a:de:
         8b:c9:42:a4:8d:38:d0:f6:23:59:b3:23:9d:b9:31:bc:f1:23:
         5b:49:e9:ce:77:ac:9e:4d:40:fa:62:6b:9b:d6:78:f1:95:61:
         70:0c:7c:82:67:49:23:95:6a:12:b0:13:00:c5:60:44:40:07:
         3a:8d:78:03:44:3e:76:af:8b:a2:db:4d:c2:cb:be:8a:c3:04:
         58:5e:b4:3b:be:c9:c6:c4:f3:d4:d5:1e:3d:89:ff:65:de:56:
         6b:d6:20:87:e7:24:a3:aa:41:85:80:33:89:3f:fe:57:40:15:
         9c:5a:15:79:26:2c:9b:09:0a:80:a1:ce:01:b6:12:f5:20:20:
         0b:14:72:54:ca:4e:e6:d1:d9:a7:45:3f:d4:21:dc:62:32:68:
         0e:39:d6:5a:09:88:2f:a9:73:1a:b8:f3:41:27:3e:e1:a9:44:
         d2:1c:4e:55:c3:e5:d1:1e:1b:9c:a7:75:36:6a:2c:24:59:58:
         78:a7:6d:5d:dc:7e:23:fc:ca:ce:95:b2:b9:76:06:9c:71:7f:
         e5:e8:71:4a:7e:06:11:9c:5c:d6:4a:51:f9:19:09:6c:3a:c1:
         16:81:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org