Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37382e302f32332d3233203d3e203238323235.roa
File:                     3138392e3132362e37382e302f32332d3233203d3e203238323235.roa (raw, json)
Hash identifier:          UGizCTIbZcv0gNfkyg0DIklWaBntrUXkoz9cHYS4WJQ=
Subject key identifier:   48:92:2F:EE:F9:0D:15:9A:25:53:27:CF:2C:4B:42:FE:87:17:EF:47
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       53D783D122AFE298CB47D707285191E6EAF19F85
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37382e302f32332d3233203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:15 +0000
ROA not before:           Tue 09 Jan 2024 12:51:15 +0000
ROA not after:            Tue 07 Jan 2025 12:56:15 +0000
asID:                     28225
IP address blocks:        189.126.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d7:83:d1:22:af:e2:98:cb:47:d7:07:28:51:91:e6:ea:f1:9f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:15 2024 GMT
            Not After : Jan  7 12:56:15 2025 GMT
        Subject: CN=48922FEEF90D159A255327CF2C4B42FE8717EF47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:04:fc:8d:07:d2:09:aa:3f:a5:35:af:eb:
                    18:16:43:7e:b9:1c:0c:f9:6c:49:5b:48:2e:41:bb:
                    38:26:bd:0b:9c:ee:4c:39:de:af:2d:04:7b:09:cb:
                    53:61:95:11:86:02:9f:ee:7e:75:c6:df:40:6f:72:
                    7c:fa:43:74:0a:ce:b7:b5:af:96:a8:4c:cd:0f:c5:
                    51:5b:f5:6a:12:7c:7e:d3:2a:cf:ae:6a:8f:a7:6a:
                    29:f1:62:ed:13:5d:59:88:ba:07:5a:66:ff:01:28:
                    98:4f:7f:bc:38:5c:70:5f:d3:ec:79:df:b7:d6:23:
                    c9:2a:93:4f:0c:59:68:1d:01:b4:05:c0:e8:8a:c4:
                    73:97:67:8a:af:7f:81:89:32:c0:4d:dc:07:6a:ed:
                    f4:b7:e6:f7:a6:11:30:c6:ef:69:2b:ce:df:5a:0b:
                    ef:6c:7e:4b:99:a0:0f:48:45:bb:3a:18:07:3a:44:
                    cb:b8:5f:fb:05:b0:94:3f:a5:72:44:39:01:13:41:
                    b0:13:b0:f8:8e:53:59:e9:5b:ef:61:3d:c2:d0:ea:
                    73:64:e0:07:8d:fe:f1:6f:a2:a7:e4:c9:44:3d:41:
                    c2:a1:82:99:cf:cc:47:50:80:aa:91:fe:ce:e8:dc:
                    9c:c6:4d:f8:58:d0:7b:31:ae:26:12:1a:10:d2:59:
                    f3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:92:2F:EE:F9:0D:15:9A:25:53:27:CF:2C:4B:42:FE:87:17:EF:47
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37382e302f32332d3233203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:44:f9:37:bf:1f:0b:80:91:cd:0f:f4:f9:05:d1:20:2e:
         8b:df:3b:a8:38:ce:c0:d4:19:f2:59:2a:86:44:11:ac:67:e4:
         e8:2d:4a:d7:1a:37:d3:81:40:53:e8:40:44:16:f1:9a:3d:d7:
         3a:07:f8:a7:83:f5:f9:9c:77:0e:59:f2:ac:cf:ea:ca:bc:d1:
         8d:c3:a3:db:49:52:11:49:23:aa:59:09:ae:11:47:66:c5:74:
         d3:6f:8e:ca:61:ab:db:b7:64:61:56:48:22:9c:ca:d7:61:8f:
         1e:37:69:af:94:0c:83:50:38:96:0a:75:07:91:29:58:26:59:
         64:c6:c1:24:4c:39:30:0d:19:21:a5:63:c5:03:c5:60:02:3d:
         1a:b8:a7:3d:ad:bf:59:13:5c:48:7f:ca:cd:75:67:9c:0f:5c:
         83:56:be:ff:1e:64:40:ad:1d:f3:74:c9:d6:f5:f6:f5:e9:09:
         c1:40:09:dd:1d:b3:3b:dc:12:ef:e6:fc:f0:f0:82:43:7c:f7:
         9f:55:0e:4d:a6:56:9e:fc:82:1a:e8:93:fe:78:6b:3f:d5:86:
         fd:41:60:be:e2:a3:58:4f:85:6d:18:84:45:7b:b2:b1:af:27:
         7b:49:1d:97:98:69:32:77:5a:d2:f4:74:eb:3b:30:ce:df:71:
         4f:45:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org