Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37322e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e37322e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          XQ1WBlrXLUO5M7UGoURpTnhuZD5QMQ8zwrDN9zADDdU=
Subject key identifier:   5C:B5:96:57:A5:1D:8F:E5:B4:2B:55:78:9E:85:8C:D1:64:19:7C:1C
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       205EA02F7932324C8A33E4E75CF824572BA9342D
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37322e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:17 +0000
ROA not before:           Tue 09 Jan 2024 12:51:17 +0000
ROA not after:            Tue 07 Jan 2025 12:56:17 +0000
asID:                     28225
IP address blocks:        189.126.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5e:a0:2f:79:32:32:4c:8a:33:e4:e7:5c:f8:24:57:2b:a9:34:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:17 2024 GMT
            Not After : Jan  7 12:56:17 2025 GMT
        Subject: CN=5CB59657A51D8FE5B42B55789E858CD164197C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:cb:56:a1:fa:e6:99:54:69:4e:b7:9f:40:
                    31:5d:37:da:44:05:47:56:d1:0d:d1:ac:3b:f7:e8:
                    dc:c0:25:8b:67:aa:48:2e:31:f8:83:a0:50:71:0a:
                    f7:29:a9:fe:32:52:15:9e:9f:ef:b1:af:ea:7d:44:
                    91:5a:ef:b2:03:fd:e8:4f:76:99:ee:3e:3b:df:b8:
                    24:e0:6e:39:ee:2f:60:1a:c1:3a:9a:a4:12:3d:88:
                    bd:13:27:54:35:ec:e8:6d:99:91:a8:8b:01:5c:66:
                    bb:23:90:f8:be:ab:8d:c9:94:7a:13:d4:94:d0:a2:
                    e3:de:0f:5a:4f:57:b7:eb:c4:4c:5f:83:70:dd:78:
                    cc:ea:24:39:c7:34:61:b1:b7:4e:e6:20:a5:13:dc:
                    73:06:0d:9a:0d:98:89:92:47:e3:35:67:9b:b5:54:
                    10:74:d0:05:12:9b:4f:0d:60:05:6a:0a:b8:d3:fc:
                    90:a8:23:99:73:0d:7a:0e:17:e0:07:f5:30:d8:75:
                    93:4d:85:2e:f7:2a:8e:8b:cf:8f:41:61:ac:93:ad:
                    f4:b1:02:44:20:b6:5d:79:5b:70:82:bf:12:b8:05:
                    06:1f:0d:59:de:91:4f:09:03:77:41:6b:e3:79:79:
                    47:99:cf:21:88:cb:63:81:52:c8:af:2d:77:27:70:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B5:96:57:A5:1D:8F:E5:B4:2B:55:78:9E:85:8C:D1:64:19:7C:1C
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37322e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:88:74:bd:55:c1:07:7d:ac:14:27:17:f7:f0:39:fd:1a:86:
         ae:4c:a9:22:f2:32:a5:04:83:68:1b:1f:0c:4e:85:9d:ad:97:
         b1:4f:6d:53:2f:9a:e7:8a:76:c4:0a:84:c5:2e:cc:fe:5f:cb:
         77:91:a1:ba:77:15:35:38:d1:10:7e:2d:19:8e:67:86:8d:bb:
         23:4a:f1:23:3c:e4:eb:cc:7c:3f:f7:0c:6b:94:c7:ba:a4:69:
         d8:2e:b7:d0:aa:b4:69:a9:ad:35:c5:f3:91:33:ac:cc:ba:25:
         d4:ab:e8:08:25:1a:c6:23:ec:dd:7f:96:d0:76:37:d7:b7:bc:
         9e:df:1e:68:fd:2e:59:32:01:fd:52:7a:d1:e5:dd:9f:a9:26:
         1b:d9:87:16:da:9c:e5:72:0d:d9:50:42:3c:21:15:31:e4:b4:
         9b:25:b2:3c:66:a4:be:61:78:0f:d7:23:f6:1b:f6:5d:1e:fc:
         75:88:ca:18:3c:51:52:a9:cf:af:7b:0e:e8:fd:ef:ea:c9:d2:
         a1:17:83:a7:6d:20:ef:be:b2:13:18:26:ae:5f:9b:57:74:53:
         38:e1:aa:8f:8b:f5:27:de:be:f9:4d:b2:0b:8c:e6:79:b2:56:
         e0:b8:df:bc:c8:25:c4:65:3f:f1:c2:ed:c8:cb:35:ad:ff:49:
         3e:ec:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org