Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37352e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e37352e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          FE8erDKtA9sbW4dttwyWvVQ7GySEDZWcWOpptIGNoF4=
Subject key identifier:   8D:11:AA:78:45:67:B3:2C:6A:C9:A3:74:D9:8D:72:0B:02:69:3F:98
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       5A03FF3FDBB427FF5D176635BA4FFBD61C648609
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37352e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:15 +0000
ROA not before:           Tue 09 Jan 2024 12:51:15 +0000
ROA not after:            Tue 07 Jan 2025 12:56:15 +0000
asID:                     28225
IP address blocks:        189.126.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:03:ff:3f:db:b4:27:ff:5d:17:66:35:ba:4f:fb:d6:1c:64:86:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:15 2024 GMT
            Not After : Jan  7 12:56:15 2025 GMT
        Subject: CN=8D11AA784567B32C6AC9A374D98D720B02693F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:4f:d3:f9:54:3f:51:21:45:24:ad:67:96:
                    36:b2:55:6e:c6:f1:75:de:63:6c:85:cf:09:fc:b5:
                    69:3a:6a:19:b7:d2:88:14:8d:7e:da:46:33:31:9a:
                    95:84:83:4e:db:ec:f7:d2:5a:ec:68:72:42:b9:35:
                    ca:e5:07:ff:05:b6:48:87:43:c5:73:ce:a9:c8:88:
                    c2:14:b6:75:70:f2:37:74:20:3d:82:8f:cf:60:08:
                    b8:bd:c5:f2:ad:c6:ee:1d:b0:46:f3:f7:d0:a9:81:
                    55:9d:4d:26:6b:a7:21:e0:1f:8f:cf:01:f2:01:04:
                    fa:32:57:46:aa:12:1a:80:5f:38:1f:b3:59:fe:37:
                    d6:40:59:51:cd:89:83:53:e2:1e:fb:ba:c0:12:93:
                    3b:25:20:8a:4b:80:b8:1a:f6:47:72:f7:a4:ec:a1:
                    c3:a5:a9:5a:8c:f6:36:15:eb:15:b8:60:02:7d:ae:
                    00:e2:6d:72:3b:9d:bd:b1:ac:ce:c0:d2:88:5a:85:
                    45:c8:8b:fb:d0:fc:93:11:68:3e:ab:92:c3:ab:95:
                    f7:98:f8:85:1f:13:55:52:3d:e9:35:0b:37:0e:04:
                    d9:e3:3d:81:89:74:c0:94:f0:5a:37:b7:a7:7d:cc:
                    76:ae:4c:64:fe:2b:88:f8:ef:f6:d7:31:f8:db:da:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:AA:78:45:67:B3:2C:6A:C9:A3:74:D9:8D:72:0B:02:69:3F:98
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37352e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:01:7e:6d:6f:66:bc:b8:54:59:11:52:01:cd:d5:6e:f1:6d:
         82:64:f1:db:ed:f3:d7:5d:0c:76:e5:f7:ea:a0:b1:7c:27:04:
         ad:3e:33:f8:6c:15:a4:b5:d5:e7:e2:f8:b8:f1:65:d6:cf:2b:
         0b:41:19:2a:96:42:c9:f6:07:93:0a:b6:b7:95:e1:b4:3e:ff:
         63:3e:01:95:ca:a9:1f:15:0c:d2:d7:f2:e2:5a:bd:ec:e7:2c:
         5d:8f:67:98:06:17:5f:39:ea:7a:c7:ab:75:17:dc:40:1f:93:
         ea:9b:32:c4:4c:15:16:fe:1b:2e:13:3d:8e:fe:26:d5:0b:ba:
         2f:1d:bb:f1:98:0e:b1:a6:cf:d2:db:f4:ce:ee:11:fb:12:42:
         e7:4d:09:60:cd:4c:86:51:5b:b6:02:2a:f4:10:85:36:98:a0:
         8f:a6:07:e8:2b:d3:cf:5d:fd:30:ab:e7:a7:b6:21:a9:b8:a2:
         f2:05:af:25:f9:c4:f5:97:64:df:fd:f2:12:83:4f:cb:f2:05:
         dd:6b:7e:a4:2c:2f:07:b0:a0:6e:33:17:86:8f:73:84:eb:28:
         4b:30:77:31:cb:66:26:ee:5c:ae:d9:bc:4c:fb:0d:06:85:38:
         e6:72:68:12:7e:5d:7a:29:f5:c2:7d:65:0a:e3:c3:23:d9:75:
         d0:84:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org