Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230302e302f32342d3332203d3e203238313732.roa
File:                     3138392e38342e3230302e302f32342d3332203d3e203238313732.roa (raw, json)
Hash identifier:          lSvOV4vbva1J6IWV4up6KntrxjSal5W0molJGhW3ja8=
Subject key identifier:   6B:3A:1A:7F:F8:66:9E:E6:13:C9:CC:87:B7:BC:2E:46:5E:C3:AE:76
Certificate issuer:       /CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
Certificate serial:       5905ACFDB9FA4F8FA2F21A149715DC0F01AB4DD8
Authority key identifier: C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230302e302f32342d3332203d3e203238313732.roa
Signing time:             Fri 28 Jul 2023 18:37:35 +0000
ROA not before:           Fri 28 Jul 2023 18:32:35 +0000
ROA not after:            Fri 26 Jul 2024 18:37:35 +0000
asID:                     28172
IP address blocks:        189.84.200.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:05:ac:fd:b9:fa:4f:8f:a2:f2:1a:14:97:15:dc:0f:01:ab:4d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09
        Validity
            Not Before: Jul 28 18:32:35 2023 GMT
            Not After : Jul 26 18:37:35 2024 GMT
        Subject: CN=6B3A1A7FF8669EE613C9CC87B7BC2E465EC3AE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ef:ff:e8:75:88:db:1b:02:d6:6a:b9:9f:82:
                    89:9c:15:46:0d:a0:96:d0:62:47:cb:7d:7f:75:ac:
                    c2:7a:83:f1:9a:5e:50:22:ff:b7:1e:1a:6f:a2:20:
                    7d:c5:7c:b7:5e:72:0c:90:2e:4a:21:b6:72:b8:5c:
                    57:f0:48:90:4e:a3:41:12:ef:75:14:87:aa:76:e4:
                    ac:fc:0f:39:d7:30:24:01:3b:b0:06:05:c8:2e:9e:
                    4b:a9:80:ad:8f:17:6b:35:b5:09:2d:0a:41:c8:32:
                    da:50:50:01:d6:a2:a4:b9:b1:52:bf:f0:16:4b:df:
                    90:74:99:3b:18:70:f3:ab:9d:9c:26:dc:10:32:a7:
                    ed:27:22:27:48:ef:16:da:1b:ed:14:93:fa:19:d8:
                    3d:66:95:2d:a9:8f:75:5b:b3:ef:fc:c6:cb:61:86:
                    73:bd:aa:e2:58:0a:b0:38:b4:df:53:ff:48:81:48:
                    9a:f2:7e:81:4a:b2:a4:26:ae:71:70:cf:99:b5:46:
                    7d:72:17:16:65:74:b8:11:05:16:ff:15:f7:f6:5d:
                    26:9c:8b:26:d3:8b:f9:ef:e3:e1:c1:f2:86:06:80:
                    81:94:96:58:51:31:8f:47:b8:85:ca:a5:bd:95:10:
                    07:f8:d8:bf:a9:ee:f9:53:f0:86:e6:66:51:95:97:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3A:1A:7F:F8:66:9E:E6:13:C9:CC:87:B7:BC:2E:46:5E:C3:AE:76
            X509v3 Authority Key Identifier:
                keyid:C6:E1:CF:38:59:27:FD:5D:6C:9D:3C:98:87:3A:96:D6:EA:E2:2A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E1CF385927FD5D6C9D3C98873A96D6EAE22A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3230302e302f32342d3332203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d3:29:c2:89:62:26:ab:c7:3f:92:6b:d2:e7:06:69:20:11:
         6e:8a:13:bf:db:9c:93:a3:f0:6b:64:0b:a3:be:9a:5e:71:79:
         32:55:b3:68:ac:10:6b:72:ab:d4:40:32:6b:92:b1:b7:b1:d8:
         40:31:5f:d9:3f:88:3a:8b:9c:2c:ce:b6:22:14:d3:84:fe:a4:
         90:b2:bc:6d:65:5e:7a:15:33:9a:1e:04:b3:07:46:51:89:12:
         24:88:5d:a2:ac:e2:c3:ba:13:0d:01:9d:da:83:41:34:97:bc:
         a5:31:1e:20:99:e5:22:14:75:4e:1f:90:af:6d:6f:76:b2:0d:
         d7:a7:03:b1:09:38:1c:90:a1:04:66:9c:1b:74:6e:2f:79:1a:
         3a:0a:ed:5c:fb:09:9e:9b:b9:9a:6e:42:a9:04:06:ad:93:56:
         9e:ef:1c:0f:cc:b7:d9:5e:00:34:9b:b5:93:1e:ad:b6:90:52:
         b1:44:ed:93:74:a8:22:19:c5:25:83:39:30:c3:b4:b5:86:5b:
         f8:0e:cd:51:57:00:d8:fa:c0:0f:2d:05:42:3c:ac:6d:6f:4a:
         f1:5e:94:96:62:cf:98:cc:be:c3:37:a3:fb:e9:50:e8:e9:1e:
         46:80:4f:3f:16:9c:a5:8f:2b:5f:32:a0:3c:c7:03:da:57:89:
         5c:1b:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org