Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37362e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e37362e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          qTX/cCgOFle+elJatCWVHnXlaMWD4qSOADg0RCmIBeU=
Subject key identifier:   B4:7A:5F:1E:5E:88:7B:12:BD:55:CA:38:46:FB:EA:06:33:E9:DC:D6
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       15CB1792E42D355DE4AB5F2ED18EF0B9289EEFF0
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37362e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:17 +0000
ROA not before:           Tue 09 Jan 2024 12:51:17 +0000
ROA not after:            Tue 07 Jan 2025 12:56:17 +0000
asID:                     28225
IP address blocks:        189.126.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cb:17:92:e4:2d:35:5d:e4:ab:5f:2e:d1:8e:f0:b9:28:9e:ef:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:17 2024 GMT
            Not After : Jan  7 12:56:17 2025 GMT
        Subject: CN=B47A5F1E5E887B12BD55CA3846FBEA0633E9DCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:6b:af:cd:3a:3c:73:9f:fe:6c:96:a5:dd:
                    3d:a2:2b:2b:e6:c1:e9:22:20:91:3f:32:7d:de:45:
                    ad:34:bc:46:2f:d3:62:bf:58:47:5a:c1:0b:32:2f:
                    10:b3:00:a9:77:07:b6:65:a9:59:05:4f:38:98:cc:
                    cd:94:1e:9b:7e:cb:2d:f6:0e:81:da:c7:fd:f8:68:
                    5c:03:41:83:1d:0e:b2:c0:c0:0c:b9:4b:3f:5e:57:
                    93:20:32:23:61:b3:8a:5d:8c:e6:14:3a:fb:c3:d3:
                    2a:5c:8d:bd:c3:e1:9f:3f:a8:99:09:60:a0:b4:b4:
                    d4:e0:d8:dc:3d:01:72:a9:07:c8:8a:20:ba:52:42:
                    b3:a2:06:fb:1d:87:39:9d:95:2c:7a:db:a6:37:67:
                    81:4f:4f:f3:b7:88:e6:46:3c:2d:64:97:21:d3:9c:
                    a5:13:9f:5b:8a:7c:45:e6:80:8c:50:03:c1:7d:44:
                    c3:e5:1c:10:d0:71:e6:44:9b:6e:a8:af:7a:f7:40:
                    b1:09:b6:44:3b:c6:5a:eb:c1:35:6b:87:60:93:70:
                    3b:a2:d7:4a:f9:9c:a9:21:13:c1:d0:54:80:0d:76:
                    ab:a7:fc:35:e3:d8:ba:86:1b:9e:16:8b:ba:df:4a:
                    97:f2:d6:bf:05:37:da:ea:07:3e:4b:34:f0:b2:31:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7A:5F:1E:5E:88:7B:12:BD:55:CA:38:46:FB:EA:06:33:E9:DC:D6
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37362e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:7a:b8:ea:cb:49:48:fb:1e:25:cf:94:02:c8:43:64:29:
         3b:cf:ea:fd:a5:44:a1:a9:90:6b:eb:4e:55:20:07:d6:f7:43:
         5b:c6:8f:3a:c1:10:15:d1:19:60:ef:9e:f5:c0:e4:10:66:fc:
         6c:02:10:18:22:0d:f5:9b:a8:09:75:65:c1:a6:5b:fd:75:72:
         9a:b4:bf:45:66:a1:ac:2f:cd:f5:01:00:88:04:17:8c:87:5b:
         10:cb:bc:37:52:68:6b:11:5c:cf:1a:a0:8f:1d:3b:26:77:b1:
         c4:c1:b2:01:f8:9a:4d:27:45:63:d9:a1:1a:98:79:68:d4:7e:
         cc:f3:44:ca:41:cc:fb:34:79:22:da:0f:6c:2b:4c:78:e5:5e:
         16:45:d9:1e:8b:7a:67:59:95:11:d4:70:0d:db:78:3a:72:e0:
         99:f0:53:cb:f9:64:c6:c0:35:be:3f:bb:1b:d9:e4:9b:73:25:
         be:19:68:45:1b:74:36:bb:b1:ef:69:cb:6f:f5:9b:bf:8e:60:
         bd:a3:ee:17:2d:cf:00:78:98:7b:5a:c8:2e:2f:6a:e9:18:58:
         71:4e:41:e9:15:19:ed:cc:bd:35:9b:ee:65:c7:0c:b1:40:32:
         5c:2f:8e:e1:f5:ba:1a:35:90:4d:31:90:d2:d2:72:1a:87:b1:
         8a:72:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org