Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e38342e3234322e302f32342d3234203d3e203238363538.roa
File:                     3138392e38342e3234322e302f32342d3234203d3e203238363538.roa (raw, json)
Hash identifier:          0TtIdrkc1gXexW9trLK2sODGLYjULZVyI87yTARZ5Rs=
Subject key identifier:   D8:EE:3F:D8:05:C4:8D:FC:20:67:C4:44:C7:7A:DA:B0:F8:3F:D1:59
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       220B4F002CD9EFBD68E2689931E7190DDB8E2862
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e38342e3234322e302f32342d3234203d3e203238363538.roa
Signing time:             Sat 25 Mar 2023 12:07:31 +0000
ROA not before:           Sat 25 Mar 2023 12:02:31 +0000
ROA not after:            Sat 23 Mar 2024 12:07:31 +0000
asID:                     28658
IP address blocks:        189.84.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0b:4f:00:2c:d9:ef:bd:68:e2:68:99:31:e7:19:0d:db:8e:28:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Mar 25 12:02:31 2023 GMT
            Not After : Mar 23 12:07:31 2024 GMT
        Subject: CN=D8EE3FD805C48DFC2067C444C77ADAB0F83FD159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:44:8a:15:48:89:34:8b:ee:e0:ae:e1:97:
                    e5:25:a4:e2:dd:9d:99:a1:5e:6c:09:bd:b5:e3:d3:
                    4c:4f:04:f4:0d:d0:45:39:86:69:cd:ca:12:00:bf:
                    7c:1b:66:40:67:7f:53:ac:53:12:d8:ae:65:f1:16:
                    e9:3f:dd:68:09:73:ce:ff:4f:3d:db:6d:6f:1f:7b:
                    73:0f:30:66:6b:87:91:27:29:cf:4f:bb:91:9f:6c:
                    b1:dc:b5:d2:98:a6:ff:b3:c7:bf:03:93:01:e8:82:
                    53:b5:fa:af:c3:2f:d1:1d:75:78:23:32:75:70:3b:
                    2d:7a:e0:77:28:7e:94:62:84:ac:c1:d1:9c:95:16:
                    59:72:8b:a4:64:56:f6:a5:35:3c:57:a4:c9:c8:80:
                    fb:c6:af:75:c0:02:06:c8:fb:b6:82:94:f9:ec:9a:
                    65:f4:43:4b:91:ae:f0:d6:4e:c9:e5:3e:67:51:d3:
                    65:a0:dc:62:2e:38:0a:a3:2d:2e:90:bc:8d:92:41:
                    5e:60:6d:0d:bf:34:bf:d8:6a:ef:55:49:55:05:88:
                    f2:7e:63:8f:b8:0f:b8:ce:5b:16:02:f4:da:7e:6e:
                    4a:33:e9:8a:40:7c:b8:77:64:97:60:9b:ba:12:01:
                    43:63:12:b9:eb:de:ec:b4:1c:98:be:09:1e:87:74:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EE:3F:D8:05:C4:8D:FC:20:67:C4:44:C7:7A:DA:B0:F8:3F:D1:59
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e38342e3234322e302f32342d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:20:ad:f4:47:0e:fa:c5:d0:1a:a5:28:fe:b6:24:a9:12:16:
         9d:47:48:dc:0c:d4:fd:c5:d0:56:1b:d9:19:c4:0d:1c:4c:ed:
         ba:c4:45:53:9d:64:70:e8:00:ab:46:4d:74:d8:aa:0d:34:55:
         1a:23:27:e8:f8:4a:b7:a0:1b:6d:10:8c:23:94:36:31:a5:b6:
         03:b9:1d:9b:70:be:ae:f1:65:12:9c:f5:d1:bf:67:a6:bb:60:
         2e:81:88:18:59:ee:e4:d6:0c:7f:c0:63:de:fc:55:1a:43:f9:
         72:17:c9:19:83:08:5c:b2:e8:7f:62:20:7c:07:f4:4b:a8:dd:
         1b:9c:ae:79:5f:19:48:e6:53:a0:17:eb:4d:77:30:ca:ce:c8:
         c2:77:fc:92:95:ae:66:5f:80:d8:db:38:86:5a:ed:c0:a2:b7:
         f0:a1:34:1e:7f:26:3a:02:41:6d:ee:99:43:af:2b:ad:55:28:
         15:72:9a:b6:77:6a:9e:d1:e8:fe:ed:39:4e:00:1b:c9:79:63:
         bc:62:d5:dc:20:a6:ce:e8:67:9f:e0:16:a1:51:a7:4e:4c:a3:
         af:28:29:45:8c:da:a6:f7:30:19:94:43:29:54:40:61:c9:3c:
         c3:32:0d:d4:f7:bc:88:05:75:53:57:e1:62:5c:52:93:78:82:
         45:35:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org