Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e38342e3234302e302f32302d3234203d3e203238363538.roa
File:                     3138392e38342e3234302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          f0ZD92KpoZOuR6HU0GPlemYClq9HeqCqRHYfpzy5je0=
Subject key identifier:   DA:03:D7:45:10:66:DD:05:19:79:DF:0D:8D:B9:EA:82:01:74:DD:CB
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       1CE469AA63B3460AADE532712F7FBACA0EDE2885
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e38342e3234302e302f32302d3234203d3e203238363538.roa
Signing time:             Sun 12 Nov 2023 19:40:19 +0000
ROA not before:           Sun 12 Nov 2023 19:35:19 +0000
ROA not after:            Sun 10 Nov 2024 19:40:19 +0000
asID:                     28658
IP address blocks:        189.84.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e4:69:aa:63:b3:46:0a:ad:e5:32:71:2f:7f:ba:ca:0e:de:28:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 12 19:35:19 2023 GMT
            Not After : Nov 10 19:40:19 2024 GMT
        Subject: CN=DA03D7451066DD051979DF0D8DB9EA820174DDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:8d:0a:19:ce:90:87:59:d3:64:c3:8f:92:
                    bb:36:0d:3f:e2:bd:07:97:75:6b:64:98:7e:52:b2:
                    45:0d:76:d0:7c:fa:16:be:8d:92:d0:ec:12:cb:3a:
                    8f:65:a1:83:7c:0e:5a:44:02:7c:1f:a3:b1:7d:a3:
                    8f:62:20:c4:28:37:00:cb:da:9b:09:20:87:96:4e:
                    c4:9f:9a:0c:65:19:6c:12:bc:44:e7:c2:a0:17:6f:
                    40:a6:ea:b4:9f:cd:75:cb:31:52:d9:77:fb:60:7d:
                    09:d1:0b:61:4d:7c:00:05:ff:dd:02:77:f5:f3:c4:
                    3f:2a:11:99:65:c3:9a:34:a9:07:0f:dc:1f:b0:dd:
                    64:08:6d:a0:41:85:f0:7a:6c:44:37:e7:08:d0:36:
                    56:40:43:85:10:61:a8:c8:9a:28:b7:7b:8d:25:4b:
                    6a:15:6e:e1:bd:64:e4:e6:0c:37:40:31:4d:d5:be:
                    17:7c:c2:4e:42:35:0f:1a:69:c0:a3:8f:9d:6f:47:
                    39:03:11:b5:f3:a8:49:b8:ab:a7:71:49:2c:82:ae:
                    ce:e1:fa:be:43:bc:95:30:0d:e7:0a:34:91:8e:90:
                    e5:04:fc:04:4f:8d:02:6d:5c:00:cd:af:ad:a1:da:
                    5d:fd:b9:5c:ee:87:00:9f:6d:57:ac:49:09:e6:43:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:03:D7:45:10:66:DD:05:19:79:DF:0D:8D:B9:EA:82:01:74:DD:CB
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e38342e3234302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:04:50:a3:d3:4a:35:f5:05:67:eb:d8:87:d9:0d:6c:31:c1:
         e5:c6:39:9f:53:a3:c9:95:d7:d5:9b:2f:bb:ad:2c:e5:c4:d9:
         f3:90:1e:1c:de:ff:0d:2e:59:83:2c:2f:53:ed:a0:dc:1d:f7:
         c3:cc:7b:fb:da:f4:f2:d9:cd:6b:c1:d2:b1:72:e1:81:3c:21:
         07:34:9e:dd:28:1d:59:c7:6b:7e:7b:61:f3:ca:fe:f3:bf:0b:
         25:cb:c6:06:f6:23:75:fb:a7:f8:37:ea:71:7d:b0:fb:7d:77:
         a6:40:84:00:b8:a7:36:27:95:b4:93:84:74:54:5f:e0:56:bd:
         63:33:5d:28:70:c9:1b:ac:52:d5:ee:2e:65:24:9c:1c:23:06:
         c7:41:9d:23:88:4d:38:09:8b:f3:12:eb:a4:1b:c2:65:2b:d0:
         7a:35:ee:61:05:21:49:d2:5e:5b:f8:61:a9:3f:0c:12:21:99:
         1b:4f:c0:c4:93:4b:ea:47:12:01:82:0b:b8:9d:7f:1e:ab:42:
         a1:a0:1a:c9:3c:af:06:e0:5f:f1:4f:54:87:49:4a:a3:c6:53:
         43:94:22:ee:aa:73:c4:3e:1c:a1:0d:67:b1:38:9c:ae:cd:1e:
         c3:86:b0:05:fa:3c:2a:a6:f5:5e:d5:8b:05:84:45:4a:7f:8f:
         a0:0c:a5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org