Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37342e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e37342e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          q50gww85goJVL+ApOpJp6MBtbSO//UQza0ndp9L6egg=
Subject key identifier:   09:5B:88:2C:56:34:30:3D:16:FA:DD:75:0B:57:E4:BA:5B:73:FD:21
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       2448E27BEBFB09AFB92C652C4934E40374210754
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37342e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:16 +0000
ROA not before:           Tue 09 Jan 2024 12:51:16 +0000
ROA not after:            Tue 07 Jan 2025 12:56:16 +0000
asID:                     28225
IP address blocks:        189.126.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:48:e2:7b:eb:fb:09:af:b9:2c:65:2c:49:34:e4:03:74:21:07:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:16 2024 GMT
            Not After : Jan  7 12:56:16 2025 GMT
        Subject: CN=095B882C5634303D16FADD750B57E4BA5B73FD21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:e8:88:12:4b:7e:c8:df:92:30:93:e3:92:
                    07:2e:69:64:e8:d5:dd:77:ad:a1:3e:9a:f4:98:f5:
                    25:b8:24:10:32:b4:3e:c1:d2:4b:76:f9:30:6c:5c:
                    48:ee:c5:3c:eb:f5:6c:1c:b5:8d:54:aa:98:ac:ca:
                    b5:d1:f0:fb:c5:ff:01:6d:cf:18:8f:c0:5e:f4:e4:
                    59:d8:70:88:92:56:71:4d:04:d1:12:56:bd:83:c2:
                    f0:37:13:c5:1a:22:55:e7:a1:29:b2:d5:1c:9f:f7:
                    89:f7:72:37:df:61:6a:60:ac:70:22:54:35:c7:08:
                    dc:93:15:16:12:3c:34:9a:73:00:ed:d8:56:44:ae:
                    5d:10:2d:8e:15:ea:f3:87:71:d2:24:7c:22:ed:32:
                    d8:8b:cb:f6:3a:43:1b:cc:26:70:1c:80:73:05:95:
                    ca:46:05:91:fa:ef:17:fb:04:88:04:0f:4a:3a:fe:
                    bf:6b:9a:4b:78:20:41:c7:13:3e:07:a5:2e:6a:a5:
                    f1:53:4b:b9:5b:d6:53:95:fe:f7:8c:30:88:0f:8e:
                    2d:b9:b4:aa:6c:28:8b:9f:56:78:00:87:8e:85:d4:
                    e1:7c:ec:c7:98:72:7c:fb:32:cf:33:ee:ba:e3:ca:
                    a1:3f:e7:c5:d7:a3:59:bd:4d:43:f5:1a:3d:14:67:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5B:88:2C:56:34:30:3D:16:FA:DD:75:0B:57:E4:BA:5B:73:FD:21
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37342e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:0c:82:40:60:79:fe:30:a5:68:f9:de:9a:90:ba:a9:ec:
         97:c8:78:c6:2c:10:19:87:e0:70:e7:eb:35:d5:af:fc:2a:12:
         56:b3:f7:4c:42:b5:b0:da:3d:f3:74:17:b8:78:ad:23:68:f0:
         93:7d:90:d2:88:19:ae:c5:fc:ad:6f:29:72:1e:5f:dc:42:8b:
         f3:e3:7a:b3:85:16:e0:d5:6c:62:16:55:3d:62:13:85:15:5a:
         f5:3f:97:7c:46:bb:dd:f3:23:39:fe:e3:13:14:72:a1:8a:75:
         36:11:bc:a7:16:6b:eb:37:dd:49:1e:e7:53:d0:99:6e:c6:59:
         f4:58:87:f8:a1:bd:18:21:07:fd:51:be:c7:c5:5d:c7:54:3f:
         63:98:71:e9:cb:56:29:88:8d:ad:96:91:50:2d:b8:94:89:69:
         a1:bb:4c:58:12:3b:48:42:7a:51:ba:90:f6:d3:e2:3a:c2:5c:
         00:c0:99:1a:b3:81:7a:49:29:63:0c:34:3c:c1:26:f4:b2:bb:
         bb:4a:c6:3d:df:9a:17:0a:04:ad:d1:c4:59:1f:02:4f:63:bf:
         c1:f3:70:a7:38:a8:c4:1d:ba:92:22:72:2f:ae:10:42:00:05:
         e1:cd:10:f0:bd:10:e0:23:f1:19:82:ac:8b:0d:62:d0:b4:33:
         8c:cd:6b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org