Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37362e302f32332d3233203d3e203238323235.roa
File:                     3138392e3132362e37362e302f32332d3233203d3e203238323235.roa (raw, json)
Hash identifier:          /57DMppRok3CtJRgqDxq6yXn7gKfOS8C+FynRamnXcM=
Subject key identifier:   61:72:2B:6B:BB:8D:BB:4C:65:74:01:55:E3:38:4E:B3:10:9C:EC:A5
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       0A83F5417A7CB18D44F70424C57D2B3E5E890274
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37362e302f32332d3233203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:17 +0000
ROA not before:           Tue 09 Jan 2024 12:51:17 +0000
ROA not after:            Tue 07 Jan 2025 12:56:17 +0000
asID:                     28225
IP address blocks:        189.126.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:83:f5:41:7a:7c:b1:8d:44:f7:04:24:c5:7d:2b:3e:5e:89:02:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:17 2024 GMT
            Not After : Jan  7 12:56:17 2025 GMT
        Subject: CN=61722B6BBB8DBB4C65740155E3384EB3109CECA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:21:8c:fb:03:f6:38:4b:47:48:80:7c:29:
                    9a:29:17:5c:41:ca:04:ca:b7:b5:1f:0f:9f:cb:4c:
                    f7:a1:41:08:fb:42:ae:24:fd:63:30:eb:64:80:72:
                    12:f2:a9:bd:ea:0d:b6:bf:c7:41:92:a9:37:33:18:
                    fb:f4:15:8d:74:d6:fe:3f:49:0d:55:a7:18:c6:d5:
                    32:d7:b4:12:df:5d:ab:ca:59:03:df:2a:3e:78:aa:
                    16:13:a3:98:ab:8d:77:60:f6:9d:ee:cb:1e:15:15:
                    f4:ce:6f:7b:f6:7a:bd:3f:3e:49:3c:5a:da:6e:d8:
                    3d:75:43:d6:ab:92:53:e5:9e:4f:e5:ba:20:2d:ea:
                    f6:ef:10:75:01:60:cf:fa:a8:de:9b:da:35:13:54:
                    c6:f4:16:a7:51:9a:25:2d:5e:ff:ce:09:e8:40:6e:
                    33:fe:63:e0:58:b5:53:ea:f6:0d:3c:3e:8d:e8:52:
                    55:5f:41:a1:9b:58:2b:48:25:34:22:5d:0f:a3:90:
                    af:35:54:00:51:1a:f9:bd:8b:37:fe:30:f3:97:b3:
                    fd:1a:c7:69:9a:56:59:c7:95:d4:e7:7c:47:7f:63:
                    e0:25:c0:99:ac:4f:82:50:82:2d:3f:8c:97:ca:34:
                    37:64:f3:b8:a4:78:5e:52:84:9c:37:34:53:fc:01:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:72:2B:6B:BB:8D:BB:4C:65:74:01:55:E3:38:4E:B3:10:9C:EC:A5
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37362e302f32332d3233203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:93:64:c1:ca:19:08:e5:8b:ed:58:19:82:8e:74:5b:66:10:
         cb:12:0b:7e:74:ff:b5:ac:29:0c:20:9a:85:1d:b5:c0:d2:6d:
         9d:fa:59:6b:77:47:f0:14:64:ac:8b:13:92:b1:95:4e:23:02:
         c4:96:67:92:78:da:1c:19:44:87:dd:ab:fa:06:9d:1a:0f:0d:
         87:c5:72:50:3d:ce:5b:3f:0c:b3:26:a3:fb:0d:60:bc:7b:ba:
         9d:1c:ea:e2:78:e3:39:af:78:b8:1b:5d:9f:80:53:59:77:f7:
         88:67:f7:28:3b:74:44:41:b2:e0:dd:3b:02:21:8b:08:d6:04:
         b6:18:1f:92:26:6d:af:f2:dc:54:b1:4b:e5:22:00:c7:63:c2:
         80:51:c1:56:6d:77:54:fe:85:cc:0d:12:5f:31:5b:2f:6e:e8:
         8c:42:5f:40:a2:75:5e:b4:21:63:1b:24:51:86:02:d7:56:cb:
         73:08:cf:ff:cd:2b:d4:08:2d:f4:f9:89:55:f0:a0:a7:96:6e:
         03:35:6b:08:33:65:8d:94:87:2d:e7:06:b4:ea:3d:a5:6f:b9:
         d1:3b:f1:bd:58:46:8f:ec:29:a7:3a:bc:52:6e:b4:d4:8d:ff:
         93:6a:0a:bc:cb:cf:2c:d6:44:c7:fb:3e:ee:9a:5c:e5:0f:d5:
         9d:ac:27:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org