Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36372e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e36372e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          nxZoKTMdmDECCnsowPRC9l4oPQCRwGnzHWKxn5agPHQ=
Subject key identifier:   E8:64:6C:8F:C9:5B:0B:D0:F6:5A:44:DD:C1:DD:C0:B9:E4:49:94:FB
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       616A6336989EF8A2554D641BA199C7C1C4CDCE48
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36372e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:20 +0000
ROA not before:           Tue 09 Jan 2024 12:51:20 +0000
ROA not after:            Tue 07 Jan 2025 12:56:20 +0000
asID:                     28225
IP address blocks:        189.126.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6a:63:36:98:9e:f8:a2:55:4d:64:1b:a1:99:c7:c1:c4:cd:ce:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:20 2024 GMT
            Not After : Jan  7 12:56:20 2025 GMT
        Subject: CN=E8646C8FC95B0BD0F65A44DDC1DDC0B9E44994FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:af:58:ec:87:5b:70:1e:9b:9c:e2:c1:6a:
                    45:d7:4f:f2:d3:08:4b:50:b4:97:1a:8b:d1:37:f8:
                    e3:81:e0:c3:4d:93:68:1f:24:ca:2d:06:7d:69:01:
                    b7:3e:38:bf:de:3b:1b:3f:f9:44:11:ac:6c:30:65:
                    b4:6c:20:d1:1f:45:b9:2d:53:40:99:c1:f1:61:8f:
                    e7:8c:62:77:65:b7:c7:bb:2b:61:62:8c:a0:79:b5:
                    e1:0e:cb:6e:0e:83:0f:ce:00:1d:d4:03:ec:1b:9f:
                    f9:9c:4d:d7:52:a1:50:a3:34:e0:6c:f6:13:b9:70:
                    f0:74:f6:f9:82:17:cb:b9:ea:5c:5e:98:1e:bd:fa:
                    5e:6f:58:71:d7:c9:4c:19:11:d5:cd:63:c0:97:5c:
                    f3:73:f9:b0:56:51:34:6b:cd:c4:ca:ad:a7:88:ba:
                    ee:75:de:af:4f:12:b8:63:a9:dc:b3:0f:d7:84:77:
                    ee:1b:2f:d3:36:91:70:45:7d:e0:e8:c1:75:46:d2:
                    7e:93:b4:e8:ae:a5:de:b1:2f:5b:18:b9:52:e9:65:
                    a4:d7:22:00:5d:1f:fb:59:f7:06:b9:07:74:2d:73:
                    76:c9:b8:a3:89:6d:fb:dc:70:75:be:49:d1:16:cd:
                    cc:f9:89:48:d1:cc:70:d4:a6:64:c4:6b:2d:2c:93:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:64:6C:8F:C9:5B:0B:D0:F6:5A:44:DD:C1:DD:C0:B9:E4:49:94:FB
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36372e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:4c:be:9f:89:72:75:75:0e:f2:2b:b6:96:bc:0e:8d:44:f0:
         c3:fb:1d:a4:be:e9:42:a3:16:24:69:88:11:6b:2e:e0:da:fa:
         54:33:9f:18:93:1d:48:e5:bb:a2:bc:e8:0c:6b:80:27:ab:10:
         f7:60:08:d2:b1:4e:95:52:1b:c9:6f:f9:04:ba:a0:b8:3d:6d:
         20:15:76:bc:3a:e4:38:03:93:82:0e:74:13:f8:7e:2d:6e:95:
         52:d6:92:87:44:48:03:8f:2f:9f:67:e4:fb:57:c0:40:98:62:
         a2:52:2a:85:8c:f9:78:d8:34:20:45:2f:da:0d:51:2d:b5:93:
         c4:ff:9c:23:ae:40:34:ee:60:9d:5e:fa:7a:1b:5f:0f:91:0e:
         cc:a2:55:7c:12:2e:df:71:34:1b:24:43:c3:b0:58:37:6f:ed:
         83:79:f9:61:ac:f5:b6:fc:71:c3:e4:6e:ec:a5:1d:66:6b:7f:
         3b:8d:e9:0e:e5:74:6e:99:b5:a6:c4:c6:d3:13:3a:05:48:5b:
         8d:a7:d4:6b:fc:76:49:42:3d:6e:9d:75:a7:a8:07:38:b1:36:
         0f:c9:d7:e9:d0:22:61:0c:2f:d7:17:35:1c:fd:25:cf:82:17:
         e1:aa:18:b0:d2:1d:cf:91:3b:9b:d7:b6:58:6d:ec:68:bb:9d:
         37:ba:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org