Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3133302e302f32342d3234203d3e20323730363030.roa
File:                     3138392e33362e3133302e302f32342d3234203d3e20323730363030.roa (raw, json)
Hash identifier:          x6ikaduVQ218uMBw/1jfrT0ik2rBdK/elUK5hoSPKDc=
Subject key identifier:   FE:3C:9B:38:26:96:87:C0:11:28:B3:F6:08:29:9F:48:FE:47:E9:81
Certificate issuer:       /CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
Certificate serial:       67CDF112F0658E73655F86471F7EA0AF8BE91505
Authority key identifier: 91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3133302e302f32342d3234203d3e20323730363030.roa
Signing time:             Fri 07 Jul 2023 12:30:21 +0000
ROA not before:           Fri 07 Jul 2023 12:25:21 +0000
ROA not after:            Fri 05 Jul 2024 12:30:21 +0000
asID:                     270600
IP address blocks:        189.36.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cd:f1:12:f0:65:8e:73:65:5f:86:47:1f:7e:a0:af:8b:e9:15:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
        Validity
            Not Before: Jul  7 12:25:21 2023 GMT
            Not After : Jul  5 12:30:21 2024 GMT
        Subject: CN=FE3C9B38269687C01128B3F608299F48FE47E981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:d4:b0:d7:ea:24:e6:24:89:94:79:c8:a9:
                    39:d0:89:6b:4e:d1:2f:cc:0e:4d:5d:d0:4b:a7:7f:
                    b8:fe:e1:7f:fa:be:40:50:81:36:be:57:4b:0a:47:
                    4a:1a:3a:3d:b3:fa:36:d9:ff:a6:d3:d1:80:45:a0:
                    08:f1:dc:76:35:6b:7a:e0:f7:56:3e:d9:95:50:af:
                    40:15:9b:11:4d:bd:74:81:d4:87:bf:39:73:dd:ab:
                    8c:b6:87:f4:85:3c:ba:bf:57:b3:d0:a6:b8:44:c8:
                    4d:89:2f:e7:64:02:3b:6a:32:36:67:88:8e:5d:25:
                    02:2a:b8:0a:86:df:cd:6d:f2:f8:73:0e:b6:6e:16:
                    cf:a6:29:92:61:c1:bd:48:44:f2:89:9e:87:be:55:
                    8b:49:fb:d9:1c:f8:d0:34:74:b3:25:f5:c5:99:47:
                    67:50:ac:0d:b1:bc:25:0b:d5:21:a8:42:af:26:22:
                    0a:e8:49:8d:30:bf:06:d3:84:f8:30:92:35:e6:4f:
                    56:82:41:9a:b1:41:50:2d:17:76:f6:2f:2b:d0:36:
                    cc:0f:21:63:8c:ca:a5:f1:79:9a:44:d9:c2:cb:26:
                    6e:2c:8a:34:db:2f:12:06:ff:16:2f:d6:90:71:6f:
                    0e:d3:5e:a4:ed:0c:c1:13:c0:77:10:ba:94:4f:f8:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3C:9B:38:26:96:87:C0:11:28:B3:F6:08:29:9F:48:FE:47:E9:81
            X509v3 Authority Key Identifier:
                keyid:91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3133302e302f32342d3234203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:52:58:f7:30:f8:34:c4:25:ae:12:4e:07:32:1b:bd:2d:8f:
         69:c4:6e:de:d9:d7:40:4a:0d:55:4b:90:96:02:e1:82:62:d1:
         9d:c6:21:a1:a5:7d:0a:aa:4e:d4:f6:f8:5e:d4:d8:3d:f0:b6:
         86:b3:00:c2:41:35:e8:7d:dd:6b:1d:99:2b:c7:aa:af:fc:1a:
         49:b3:d9:b8:87:e0:6b:35:74:b5:c7:c8:49:89:cc:95:10:e4:
         ff:c4:27:d6:fa:95:56:72:9a:72:99:d7:bb:93:e9:f9:a2:49:
         cf:f3:e1:4b:f8:cc:ae:68:bc:93:e5:c0:d3:19:9e:40:2e:1c:
         fb:d4:75:89:ec:48:3c:58:c7:34:18:4d:cd:44:74:5a:4c:b5:
         93:27:1c:e9:69:0d:53:ce:22:bc:c0:86:6a:58:b1:c5:f9:bc:
         91:5d:f2:0c:93:58:47:9f:21:ff:d0:cd:d1:e5:b9:29:7c:f1:
         02:58:3f:db:85:5d:eb:b9:e2:9a:85:50:f1:40:89:06:8a:27:
         aa:e4:a1:24:f9:b4:aa:82:df:8c:8a:10:74:fe:dd:71:c5:85:
         e8:f3:77:67:66:00:26:11:f5:d0:92:85:7b:06:41:cc:a0:10:
         79:33:a3:24:ef:47:1c:1a:3b:50:28:94:22:1c:8a:ce:ab:74:
         8a:bf:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org