Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3133302e302f32332d3233203d3e20323730363030.roa
File:                     3138392e33362e3133302e302f32332d3233203d3e20323730363030.roa (raw, json)
Hash identifier:          P0EpgNMMOEf4pU7bNdA4i5uK6d92PsspUPuB3UpSh9o=
Subject key identifier:   24:E7:9F:2D:C3:C5:89:9E:29:82:48:B1:DB:20:1F:98:B4:62:47:25
Certificate issuer:       /CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
Certificate serial:       01B73D1DB63595562982FAC35DB4142283B89511
Authority key identifier: 91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3133302e302f32332d3233203d3e20323730363030.roa
Signing time:             Sat 11 Mar 2023 16:47:13 +0000
ROA not before:           Sat 11 Mar 2023 16:42:13 +0000
ROA not after:            Sat 09 Mar 2024 16:47:13 +0000
asID:                     270600
IP address blocks:        189.36.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b7:3d:1d:b6:35:95:56:29:82:fa:c3:5d:b4:14:22:83:b8:95:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
        Validity
            Not Before: Mar 11 16:42:13 2023 GMT
            Not After : Mar  9 16:47:13 2024 GMT
        Subject: CN=24E79F2DC3C5899E298248B1DB201F98B4624725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:c3:ad:97:09:61:38:97:81:c0:03:bf:17:
                    ce:a7:7d:cb:09:34:ca:29:1f:04:68:58:89:61:dd:
                    d2:89:09:7e:80:24:8f:5d:c1:31:ca:c8:cc:09:6f:
                    b3:89:6e:84:e9:db:64:43:0a:df:4f:df:2e:10:9a:
                    e8:4e:ba:75:d4:9e:0c:2e:e5:ee:88:d4:ec:c7:13:
                    9a:94:dd:24:2f:eb:73:a7:e8:37:49:9b:3a:a9:b5:
                    be:a1:c9:a3:f2:bd:e8:f4:d3:fb:c5:22:97:13:be:
                    a9:19:46:82:cb:e7:66:20:f8:bd:41:9c:53:33:0e:
                    8a:11:c3:b8:17:ca:b4:0f:28:70:f3:99:4e:44:d5:
                    0e:95:1a:37:bf:0e:34:24:c6:13:9c:fd:32:01:22:
                    e6:58:da:de:35:cf:f4:00:7d:7d:4a:e4:cb:54:5c:
                    1a:fd:73:09:ff:13:63:5f:f7:e5:89:f7:b9:36:e3:
                    25:c4:16:63:e9:ca:3b:80:06:c5:97:7d:34:b1:37:
                    60:21:4b:cc:f7:55:bc:2a:70:8c:73:38:9a:b4:83:
                    60:be:26:18:f8:f2:1a:e2:b3:82:21:56:71:90:5e:
                    4a:57:70:58:7c:3d:d7:36:07:77:06:62:99:42:5c:
                    10:28:fc:00:fb:61:58:81:42:fe:81:0f:13:73:2d:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E7:9F:2D:C3:C5:89:9E:29:82:48:B1:DB:20:1F:98:B4:62:47:25
            X509v3 Authority Key Identifier:
                keyid:91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3133302e302f32332d3233203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:da:be:0e:51:e3:84:3a:e0:6d:0f:a2:00:b2:76:8f:4d:
         65:63:57:fd:e6:09:31:9d:ea:43:9e:69:58:66:4f:f4:00:54:
         77:4d:b4:ad:eb:57:09:40:1d:92:b4:45:46:09:ee:75:06:de:
         7e:44:5e:85:b0:25:52:8a:da:24:92:7b:07:11:cf:32:60:48:
         4e:b8:2f:4c:3d:9d:6e:32:90:c6:09:0c:cd:26:5e:8c:f6:95:
         0b:f3:d7:35:7a:4b:e0:c0:af:79:b4:d6:d2:77:8d:00:14:a2:
         2a:9f:08:b7:9c:d4:fa:1d:cd:cc:fb:5d:19:20:d9:7d:ae:08:
         a1:ae:42:63:b1:e3:97:90:9d:8f:ba:c3:eb:d2:e1:53:f7:a3:
         8e:e1:d7:bc:79:75:16:5d:da:e6:0c:d6:a2:26:a0:8d:6a:e4:
         50:8d:d0:76:8e:42:fd:8a:24:c1:c7:47:a5:f7:06:b6:59:2d:
         5e:20:9d:2f:70:75:c4:05:38:c5:2d:42:40:7a:ef:e3:50:67:
         c6:e1:0d:d8:f9:8d:63:e3:54:39:a2:c0:76:f6:01:1e:60:c7:
         94:cf:15:97:45:0c:84:3c:58:3d:b5:5e:8f:f4:04:05:84:41:
         1e:67:e0:27:af:08:86:a1:5e:c3:d0:92:72:5c:88:6c:15:80:
         31:dc:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 19:04:30 2023 by rpki-client on console-fra.rpki-client.org