Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36392e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e36392e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          9sjrpcTN3oTL0k17l4maN7qWCAqgYUoRBD6z64iDAgA=
Subject key identifier:   9F:AA:B8:71:7C:8A:A3:71:4A:7D:8D:BF:DC:49:F9:96:96:FD:2A:81
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       15CFD0E711C201C1DD98409C0E59FA14CB50C7E5
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36392e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:15 +0000
ROA not before:           Tue 09 Jan 2024 12:51:15 +0000
ROA not after:            Tue 07 Jan 2025 12:56:15 +0000
asID:                     28225
IP address blocks:        189.126.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cf:d0:e7:11:c2:01:c1:dd:98:40:9c:0e:59:fa:14:cb:50:c7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:15 2024 GMT
            Not After : Jan  7 12:56:15 2025 GMT
        Subject: CN=9FAAB8717C8AA3714A7D8DBFDC49F99696FD2A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:88:ff:c1:ff:40:34:a4:5c:13:50:54:65:
                    4d:9e:aa:2b:7a:37:e5:c5:32:74:56:eb:55:30:36:
                    e6:04:36:02:c2:ad:7e:69:25:fd:38:eb:3f:78:8d:
                    e7:07:99:4f:e4:08:74:41:58:d9:da:e0:8a:93:2e:
                    7c:f2:f8:dd:ec:08:df:3e:fd:5b:84:3d:c0:08:47:
                    3a:1a:f4:ec:a1:f7:89:6d:4b:cf:4b:2b:4a:44:10:
                    b4:08:fa:11:bc:3f:a7:99:8d:ea:3f:8f:d9:bf:92:
                    71:fe:b0:6b:b6:c4:44:5d:ee:6a:83:3b:92:2a:c7:
                    ea:aa:20:9f:5d:31:a4:51:58:97:e8:50:81:05:2f:
                    12:08:c5:e9:94:f0:66:28:e8:0e:09:ca:4d:69:cd:
                    d3:fa:79:40:b5:f8:a0:0b:02:b9:60:d3:ea:f4:de:
                    19:bd:ab:78:ec:41:9c:86:66:32:63:a5:ea:bb:a0:
                    0a:5e:11:98:96:a0:cc:5d:f3:b1:3a:0d:f4:5a:11:
                    32:49:5e:be:2e:97:8e:d8:43:f0:eb:c8:0e:c6:a0:
                    a0:6e:4c:21:df:af:33:b5:92:e1:fc:5b:3c:01:6a:
                    04:74:d1:8f:f4:f6:c5:47:56:91:76:bb:23:0b:ec:
                    33:a0:4e:55:1e:61:d6:3d:2e:ea:a2:d3:9f:3b:50:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AA:B8:71:7C:8A:A3:71:4A:7D:8D:BF:DC:49:F9:96:96:FD:2A:81
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36392e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:99:7f:1f:eb:bb:f6:08:23:cb:6b:d6:82:e6:02:dc:87:
         15:9e:89:09:92:4c:b7:f3:dd:a6:c6:63:e3:6e:52:d2:e1:9e:
         69:3e:8f:a5:c6:18:2a:16:3d:90:b5:a5:42:73:e4:65:94:c7:
         45:7d:da:99:6c:84:17:16:4e:d9:8f:52:7b:9f:8d:ac:e1:0d:
         92:23:77:fc:c2:2c:f4:88:71:2f:fc:50:bc:90:ce:58:82:60:
         db:fc:05:da:99:fe:9b:be:4d:84:ae:1c:e1:f3:25:f2:25:b9:
         b2:eb:15:9d:4d:99:86:aa:7d:fd:2c:b4:b2:17:18:d8:25:1a:
         19:e0:7c:30:f7:b1:0e:e1:e2:6a:a7:9b:de:84:9b:bb:1d:8d:
         d7:fa:9b:10:59:4a:d4:50:d9:c4:4e:86:54:4e:05:57:36:c0:
         61:12:09:d4:63:ec:63:91:e8:36:5f:8f:e8:8c:94:26:72:44:
         c9:7c:35:29:89:a4:32:8f:50:55:3f:d9:3e:03:8f:7b:bc:9f:
         2f:f7:22:61:8e:f8:96:22:77:40:60:a9:5e:d6:37:95:f0:b4:
         84:07:9b:06:e6:05:ac:76:05:9c:8e:ab:42:68:cb:6a:7e:87:
         f9:b7:f0:e5:89:39:8c:dc:c1:ab:ec:0b:64:9c:0b:64:9b:ba:
         da:6d:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org