Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37392e302f32342d3234203d3e203238323235.roa
File:                     3138392e3132362e37392e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier:          jwGs/2vIRZsx48Xxek+sFzQO3gJ0mXd4UmY3rtJ+his=
Subject key identifier:   69:89:7E:F7:E1:24:07:AC:85:8B:25:9B:1D:75:F6:63:D5:6F:6E:60
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       11CAC0C5C76F60A45A2ECF3E9EBFA732BAA83CA4
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37392e302f32342d3234203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:18 +0000
ROA not before:           Tue 09 Jan 2024 12:51:18 +0000
ROA not after:            Tue 07 Jan 2025 12:56:18 +0000
asID:                     28225
IP address blocks:        189.126.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:c0:c5:c7:6f:60:a4:5a:2e:cf:3e:9e:bf:a7:32:ba:a8:3c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:18 2024 GMT
            Not After : Jan  7 12:56:18 2025 GMT
        Subject: CN=69897EF7E12407AC858B259B1D75F663D56F6E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:86:3d:64:66:6e:c4:d3:82:30:22:bf:94:
                    43:d2:66:66:68:16:c3:67:72:e9:ba:e8:f2:e9:3d:
                    47:c2:7e:29:73:02:4b:92:4e:e2:4c:a9:60:9f:3c:
                    0d:ea:34:51:11:ed:06:64:44:b9:a0:c7:aa:a3:2b:
                    5f:8d:31:2c:a5:c7:61:ea:f3:cb:0a:d8:d0:c7:5d:
                    b0:28:49:e8:df:bc:5c:67:80:c5:42:e4:b6:53:96:
                    c7:80:bd:25:d1:24:c1:2d:9d:a0:a6:82:b7:1f:92:
                    14:16:41:7e:d6:14:2d:f3:3f:85:be:11:3b:50:ed:
                    4e:aa:6b:92:36:77:00:87:18:c8:1a:95:3b:01:bd:
                    3f:71:31:d0:1f:05:7b:24:01:78:10:4f:4c:79:21:
                    99:85:d2:ac:e6:3b:c7:f4:35:44:91:0b:3b:11:92:
                    d9:3e:a8:f7:cd:1f:db:f1:3e:3d:b0:c3:cc:d6:f9:
                    a2:23:f3:9b:47:30:4c:11:b7:46:40:f1:e5:3b:c2:
                    f5:94:34:6a:a2:95:18:24:f6:18:15:e1:c8:e5:bc:
                    cd:f9:74:ab:49:67:d3:0a:ed:f3:6a:92:0e:62:d6:
                    c0:a9:e7:c2:4c:ef:bf:d6:00:e5:01:87:11:d4:68:
                    2b:ab:bc:2e:a5:6a:7f:c1:eb:63:1c:64:ff:98:b7:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:89:7E:F7:E1:24:07:AC:85:8B:25:9B:1D:75:F6:63:D5:6F:6E:60
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37392e302f32342d3234203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:55:24:d7:c9:a7:ac:f0:92:40:97:1d:de:dc:41:bd:1d:ee:
         4c:5b:8f:f9:8b:0f:68:73:23:64:b5:52:a7:0a:52:95:36:34:
         b5:79:b0:29:86:7a:d0:e2:8a:55:21:2b:65:f4:75:a0:ad:77:
         2e:9c:22:88:e0:a1:e6:97:e3:17:41:f2:74:06:c3:7e:b2:d8:
         92:91:37:88:50:35:79:c2:08:3e:2c:38:ff:83:61:a3:b1:18:
         e9:2e:74:72:39:f0:89:4f:4b:e8:bf:81:6f:7f:b5:b9:3f:4c:
         fd:43:37:fb:a5:cb:fe:71:8e:b6:c2:5e:92:ce:75:8e:92:3e:
         1a:b9:7a:f7:dd:ee:f4:2b:75:77:08:99:be:09:cb:a4:bd:91:
         fa:b7:ef:3b:d5:3d:e0:62:9c:9e:92:be:bc:2d:f0:4c:ac:29:
         9e:b2:4b:78:4a:ab:5c:ac:30:40:f3:aa:6b:b6:34:83:b0:61:
         ef:ec:ca:76:25:db:93:e4:6f:8e:19:4f:93:8a:72:76:f8:f7:
         8a:da:48:77:86:fe:d1:eb:26:5f:fe:93:40:c7:18:7e:e9:0a:
         d5:61:e3:54:ac:db:69:f1:b9:ad:1b:9a:d6:d2:8d:27:42:71:
         cf:46:b0:52:aa:86:40:78:64:fb:cb:05:42:9a:26:7b:90:67:
         4c:66:f7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org