Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37342e302f32332d3233203d3e203238323235.roa
File:                     3138392e3132362e37342e302f32332d3233203d3e203238323235.roa (raw, json)
Hash identifier:          84kF3BMj9Y+fd2IMBslT9dJAyhPpBdepRwAV+sazNIc=
Subject key identifier:   EA:0C:B1:98:BC:94:01:B4:5C:B2:E8:E6:65:4B:85:5A:96:46:E1:B7
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       79DFA62C31B1609B87FD32B4980C3FBEA900A969
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37342e302f32332d3233203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:19 +0000
ROA not before:           Tue 09 Jan 2024 12:51:19 +0000
ROA not after:            Tue 07 Jan 2025 12:56:19 +0000
asID:                     28225
IP address blocks:        189.126.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:df:a6:2c:31:b1:60:9b:87:fd:32:b4:98:0c:3f:be:a9:00:a9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:19 2024 GMT
            Not After : Jan  7 12:56:19 2025 GMT
        Subject: CN=EA0CB198BC9401B45CB2E8E6654B855A9646E1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:ba:f5:26:64:7c:44:c9:1b:e0:75:ed:d8:
                    59:3c:1e:47:2e:e6:1e:3a:52:0c:e9:d7:5d:82:28:
                    91:51:58:be:25:d4:2e:74:98:e9:f7:c1:80:06:71:
                    c2:17:96:86:de:36:47:e6:f8:c8:6c:04:a1:15:5e:
                    14:6f:bd:e1:31:27:44:24:e3:11:5d:9d:7a:09:69:
                    5f:05:89:c5:11:2e:0e:c6:0b:0a:da:c0:c8:f6:e2:
                    09:aa:96:5c:94:2e:89:b6:6f:7b:ad:7c:86:1f:bc:
                    43:88:1a:f1:ff:57:c6:29:c9:d9:53:24:eb:b2:ef:
                    f0:d7:f6:96:e5:b1:17:f7:82:69:b3:19:3f:38:00:
                    bc:0a:72:0b:4c:48:fa:ad:74:ac:f2:9c:49:04:02:
                    3c:a9:6b:64:db:46:0a:76:01:4a:2a:8e:8c:e1:eb:
                    21:5c:4f:40:dc:1a:29:55:a9:43:94:fc:79:e9:74:
                    2e:76:4c:d0:ef:d2:2e:ff:f2:5b:a2:3f:e1:a2:19:
                    a6:42:8d:c4:3d:bf:5f:72:4d:a0:b5:25:70:03:48:
                    c1:d7:fe:43:ee:a9:b7:16:ac:9c:f2:65:07:0f:b8:
                    82:93:07:32:e3:6b:20:a3:33:9a:ec:d2:64:80:72:
                    49:8f:fc:d8:cb:b3:89:c9:52:5c:7c:3b:e3:0e:7b:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0C:B1:98:BC:94:01:B4:5C:B2:E8:E6:65:4B:85:5A:96:46:E1:B7
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37342e302f32332d3233203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:3c:70:eb:21:98:7e:57:70:7a:53:86:db:36:66:f0:7d:32:
         20:c4:df:bc:2a:a4:54:96:e1:c7:51:c2:10:63:9f:10:0e:71:
         38:69:65:21:a6:fb:b9:6a:e6:03:32:69:42:78:e0:a0:a6:88:
         ae:f3:42:37:0f:08:86:f3:b7:42:09:0d:e7:2a:ec:17:ba:04:
         77:c3:af:7c:3a:bf:cb:a3:6d:96:3c:5c:56:dd:91:aa:9e:a7:
         f1:f4:d5:50:f2:06:a4:f5:ba:54:0e:43:bd:66:03:07:37:da:
         0c:72:a8:1f:5f:0a:f8:ef:7d:78:17:96:12:31:42:92:50:0e:
         49:04:7b:84:c3:8a:e6:ec:29:bb:0b:fd:ba:7a:27:5f:83:6a:
         2d:2c:45:aa:36:d8:1a:f5:10:43:3b:80:4d:52:05:54:a4:9b:
         f7:35:c5:4d:1d:6c:5f:9f:1f:cc:91:d5:b0:64:bb:10:3b:b4:
         bb:e4:69:00:e5:c8:c7:59:3f:22:64:df:8f:5b:42:89:bb:38:
         99:d4:2f:ad:f2:35:b8:bc:7a:05:61:fc:3b:29:be:b5:e5:2f:
         b4:26:79:da:78:48:65:e3:ce:39:fa:98:0e:fc:36:59:19:ee:
         2f:72:15:af:8c:09:44:ad:d2:86:de:34:7e:42:d7:f4:c2:af:
         ec:85:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org