Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37302e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e37302e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          JHJm5orTV5otzfgir51pTwApK/DQAf0CZNJKUovERYg=
Subject key identifier:   62:A4:06:3F:A1:AD:4D:69:43:2C:04:48:C1:25:3C:E6:D1:CC:EB:28
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       7CC5777855BB20772CB12C56648863B0629B0C47
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37302e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:19 +0000
ROA not before:           Tue 09 Jan 2024 12:51:19 +0000
ROA not after:            Tue 07 Jan 2025 12:56:19 +0000
asID:                     28225
IP address blocks:        189.126.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:77:78:55:bb:20:77:2c:b1:2c:56:64:88:63:b0:62:9b:0c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:19 2024 GMT
            Not After : Jan  7 12:56:19 2025 GMT
        Subject: CN=62A4063FA1AD4D69432C0448C1253CE6D1CCEB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:09:17:e4:ca:11:0c:6b:34:e2:f1:54:f5:
                    f3:ed:8b:5a:9f:18:7a:9f:1d:bd:9b:4c:f3:46:77:
                    e5:b7:5d:be:42:07:83:b2:61:10:13:dd:e7:14:09:
                    de:c7:cd:6c:a5:f1:95:2c:20:71:54:c5:d8:3e:b6:
                    48:46:d6:42:c6:ae:d4:32:44:e9:e6:28:b7:82:dd:
                    c4:6e:d9:80:06:90:23:e9:dd:0c:e2:24:fd:c4:5c:
                    bc:c2:0b:9f:2e:40:b3:8b:0f:1c:a7:70:86:74:bf:
                    53:be:7a:b9:1e:08:09:7b:82:b1:9a:9a:22:49:8c:
                    48:f5:c8:71:8c:7b:ee:11:2a:2c:63:01:72:1c:1b:
                    88:cc:3f:a6:94:c6:2c:1f:f0:54:9b:ab:dc:06:86:
                    30:71:eb:1b:bd:78:4b:72:d5:40:b2:ce:b5:2d:84:
                    8a:c4:f4:89:50:eb:5c:f2:57:59:35:73:17:cd:09:
                    eb:a0:40:a5:1b:f6:a4:4e:a3:06:c1:a2:98:ae:3f:
                    68:33:91:02:85:65:22:b4:8a:47:55:1b:95:e4:ff:
                    6d:a4:6c:5d:66:74:de:02:bc:15:0f:ad:4e:2b:40:
                    9e:7d:3a:94:47:87:65:09:cd:6b:df:9b:53:3c:09:
                    0c:6c:a4:24:ee:d1:b8:ff:03:43:7d:f9:87:8a:d4:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A4:06:3F:A1:AD:4D:69:43:2C:04:48:C1:25:3C:E6:D1:CC:EB:28
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37302e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:1f:98:be:d4:23:0e:d9:80:82:ef:ca:89:8c:24:8b:db:95:
         be:07:d0:78:b6:64:0d:72:29:d8:ff:a4:aa:68:e5:ee:e6:8f:
         ed:f0:46:ef:5a:e5:25:4d:2b:e6:b8:93:ea:52:a8:93:4b:3c:
         16:e9:07:a6:b3:3e:0f:fa:f4:b9:6a:0f:6c:d9:36:7c:0a:22:
         14:25:a2:d3:ec:bf:fa:5d:39:9b:d8:08:c6:33:80:9a:a5:19:
         a9:02:e2:e2:bd:e0:80:a1:e6:3f:b1:4f:4e:84:f7:fd:22:e9:
         9c:44:4c:79:16:64:4d:29:65:6b:15:bb:df:43:5a:ed:d0:b3:
         5f:51:90:77:b6:03:85:be:33:49:0b:6b:a1:28:17:bf:07:62:
         39:66:c8:76:13:26:14:b6:0e:7d:d9:f4:c8:b0:66:0e:a5:d0:
         35:44:20:4f:6b:3a:4a:75:29:30:fd:4b:54:67:b8:7f:6c:61:
         d3:2d:0c:10:a1:ae:e1:d2:9f:fe:bb:fc:42:43:0d:e4:57:91:
         f9:90:2e:37:8d:3d:95:14:12:ff:cf:bb:33:fb:a2:ec:39:53:
         09:dd:19:13:a8:90:7b:d4:78:1c:e1:1d:b5:6c:b9:88:bc:1f:
         fd:8b:bd:0e:97:e3:ce:1e:42:bb:a4:02:1f:a4:b9:14:2c:b7:
         4f:38:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org