Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e312e34382e302f32302d3234203d3e203238363538.roa
File:                     3138392e312e34382e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          84wz6P0Gc4kv+v7D3vprxvDB7K71OwhBRjD06wYn1V8=
Subject key identifier:   BE:F8:4E:BB:6A:A8:E0:DB:18:9D:3A:F8:23:F2:A1:3B:35:09:D2:7D
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       556367587DB313CE8362F4F1A33E24705CB97591
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e312e34382e302f32302d3234203d3e203238363538.roa
Signing time:             Sun 12 Nov 2023 19:40:20 +0000
ROA not before:           Sun 12 Nov 2023 19:35:20 +0000
ROA not after:            Sun 10 Nov 2024 19:40:20 +0000
asID:                     28658
IP address blocks:        189.1.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:67:58:7d:b3:13:ce:83:62:f4:f1:a3:3e:24:70:5c:b9:75:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 12 19:35:20 2023 GMT
            Not After : Nov 10 19:40:20 2024 GMT
        Subject: CN=BEF84EBB6AA8E0DB189D3AF823F2A13B3509D27D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:62:76:34:25:98:a8:19:65:25:8a:5f:2f:
                    c0:7f:33:99:39:ee:f2:b8:cd:cc:84:58:cd:16:2d:
                    19:f0:b5:37:32:4a:6d:a5:bd:ff:a1:fa:5c:60:73:
                    ac:46:97:94:00:22:7e:a2:b6:5b:e9:fa:fb:44:60:
                    31:5f:81:af:76:f5:48:de:45:c9:b7:b7:e4:48:1c:
                    fb:c4:bd:bd:b2:5e:10:87:0a:d4:f0:08:db:e9:4b:
                    6b:3c:d5:65:c2:37:5c:b4:4f:99:f9:82:2b:29:00:
                    3f:d3:ee:79:4d:9a:ce:b6:22:94:3a:06:a4:b8:f8:
                    2d:ec:cb:e1:f7:8e:6c:4e:b0:ca:fa:7f:3c:b1:94:
                    0f:af:f8:dd:0d:8b:49:36:e0:96:99:1d:c7:6f:df:
                    85:1b:85:40:e6:9d:29:1e:12:fd:8f:5d:ec:e6:1b:
                    ef:91:62:0d:4f:cc:29:7b:be:9d:e0:2a:1f:09:df:
                    e9:3f:e0:7b:1f:ba:4a:31:d8:0b:9b:fb:32:ac:1f:
                    8c:2b:96:5b:1a:26:ec:64:f7:40:42:ea:06:0d:6d:
                    bb:60:71:52:e3:af:c4:29:7a:5e:f2:80:e5:50:bc:
                    90:ec:36:b2:fa:ef:ac:58:3c:5a:9c:ef:03:93:13:
                    7d:c1:55:40:7a:f6:db:c2:35:49:3b:29:ef:a7:e2:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:4E:BB:6A:A8:E0:DB:18:9D:3A:F8:23:F2:A1:3B:35:09:D2:7D
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e312e34382e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:e3:22:4f:1a:26:55:3b:dd:67:d0:03:93:69:48:63:c1:
         e4:6b:08:86:8c:0f:41:46:64:72:6c:a1:0f:66:6d:01:e5:1d:
         76:df:d2:d7:f8:a1:93:23:ca:88:d1:bb:6c:9b:16:29:fe:20:
         bc:40:5f:43:5f:f7:cb:f0:87:70:e5:12:f0:65:59:b0:3d:16:
         87:f9:a4:f2:79:fa:f7:9b:69:2a:da:1b:f7:43:57:3a:16:d5:
         48:13:95:56:a4:88:35:d8:ee:c2:22:ab:e8:49:5a:15:7e:b3:
         98:90:f5:22:bb:6d:95:00:43:b0:95:b2:02:3b:b3:ba:8b:7f:
         4c:47:de:5d:ef:dd:b8:94:09:db:15:7c:98:13:77:39:6f:c4:
         7a:55:1b:e1:b1:a8:d5:c0:39:62:e4:79:c5:9b:78:65:2f:ee:
         b1:90:5f:fc:d9:91:55:bc:2d:b8:aa:1c:4e:ca:f1:5e:8e:b8:
         b2:92:79:dd:7e:72:57:42:91:a0:70:f3:85:60:73:af:62:12:
         35:4e:bd:01:30:b5:fd:9f:7d:a6:42:76:ed:04:13:3d:f5:ae:
         db:e5:1a:1d:47:09:c1:11:7b:18:4e:8d:33:92:ae:dd:83:83:
         9e:01:46:63:36:07:df:24:9a:af:d7:a7:56:72:67:5c:25:07:
         1f:cf:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org