Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa
File:                     3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa (raw, json)
Hash identifier:          aEEsrGc1Wpa/0BR1mRMs3pgjZ7DZJZLBpto2W2UcldY=
Subject key identifier:   C5:67:7D:06:5C:8A:8C:C8:DC:2D:0C:E6:85:6F:D4:B8:FE:A7:D6:A2
Certificate issuer:       /CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
Certificate serial:       46684159E2BF73E34F1DE1D6E2C943E4756AA877
Authority key identifier: 6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa
Signing time:             Thu 15 Feb 2024 19:00:00 +0000
ROA not before:           Thu 15 Feb 2024 18:55:00 +0000
ROA not after:            Thu 13 Feb 2025 19:00:00 +0000
asID:                     270836
IP address blocks:        189.14.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:68:41:59:e2:bf:73:e3:4f:1d:e1:d6:e2:c9:43:e4:75:6a:a8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
        Validity
            Not Before: Feb 15 18:55:00 2024 GMT
            Not After : Feb 13 19:00:00 2025 GMT
        Subject: CN=C5677D065C8A8CC8DC2D0CE6856FD4B8FEA7D6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a8:cc:f4:bc:62:6d:50:c4:7a:a1:f2:40:a3:
                    68:1b:97:65:c1:5b:03:cb:bf:5e:ad:8b:45:c6:59:
                    ca:67:48:29:95:c1:b1:4b:5e:a1:db:11:ca:31:c0:
                    72:4b:e1:b5:cc:f4:c9:fe:ce:6b:9a:c4:b6:2c:40:
                    f1:a0:6f:ba:fd:07:6b:64:43:9c:08:b1:4e:0a:6b:
                    70:1a:88:5d:f1:e8:25:f5:27:20:71:32:8e:e8:3e:
                    65:d3:f8:62:0b:08:3e:77:66:a1:ee:43:0a:b2:0e:
                    f5:54:61:bf:62:7d:83:49:fa:da:5e:96:04:28:15:
                    de:53:30:9f:e5:a3:2d:8e:1b:7a:9b:26:9c:85:db:
                    a2:d1:34:e0:f8:f2:aa:36:95:67:5e:89:dd:47:bf:
                    24:d2:7e:ff:b9:12:36:97:b3:d8:27:9a:a5:33:20:
                    82:bb:93:28:b3:2f:76:19:e5:99:e7:c6:7c:3c:ac:
                    0c:99:1d:cf:9d:94:3f:1d:23:4a:13:50:a1:2a:91:
                    e1:4f:a2:6c:c7:d7:a0:09:8f:26:5b:a8:4e:5c:31:
                    1f:db:00:df:e7:fb:ef:4e:34:0f:e5:96:0a:30:02:
                    c7:02:8c:54:32:b5:02:b9:97:ff:e6:42:c6:a9:ec:
                    3d:df:6b:57:2e:24:5c:85:96:ca:d4:9e:a9:f8:cc:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:67:7D:06:5C:8A:8C:C8:DC:2D:0C:E6:85:6F:D4:B8:FE:A7:D6:A2
            X509v3 Authority Key Identifier:
                keyid:6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f9:4f:16:04:17:ea:4d:cc:01:da:2b:79:cf:6e:69:2d:09:
         c1:78:77:26:06:70:9d:e8:90:10:14:5f:30:ca:57:dc:f5:f5:
         2d:03:52:43:83:ca:5e:6f:cb:c6:6d:59:16:11:e2:85:69:ad:
         e7:a6:ed:d3:49:12:f4:1d:2b:73:fb:af:39:60:2e:a2:32:c5:
         d0:04:1f:39:25:01:e9:03:85:77:3c:29:e2:61:10:fe:d1:9f:
         63:83:38:ce:e9:36:7e:9c:2f:50:c9:fa:40:a4:67:94:89:8e:
         3b:d7:e0:68:a8:00:b0:52:89:ee:4a:60:74:d6:a9:b6:2d:f7:
         79:6e:b6:88:58:5c:cd:69:ac:12:c8:84:58:60:a1:7f:55:36:
         07:d7:5a:fd:35:2b:6f:ec:5b:76:f6:38:64:42:91:10:12:f7:
         2b:fd:23:d0:bb:d8:ec:50:42:ed:04:d3:b4:2c:41:37:b2:32:
         41:42:63:1f:c0:57:26:62:b2:87:e1:64:da:fb:1d:d0:b7:07:
         9e:ef:53:17:24:a7:e7:0c:bd:2e:aa:67:76:5c:03:63:69:70:
         06:c0:2b:05:0e:09:02:38:6c:dd:29:09:01:4c:5b:c4:0e:88:
         04:5e:42:56:7a:a4:f8:d9:6a:da:b2:fd:16:cb:cb:02:3a:77:
         73:3d:4b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org