Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3138392e38392e3230382e302f32302d3234203d3e203238313837.roa
File:                     3138392e38392e3230382e302f32302d3234203d3e203238313837.roa (raw, json)
Hash identifier:          fybBOkbMOFK4JDN4csBxoB8nP5k0tua7qRYCWFdHxLo=
Subject key identifier:   A5:D4:A0:34:EB:18:98:24:93:72:F1:EC:26:1E:27:C8:43:62:B8:23
Certificate issuer:       /CN=37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0
Certificate serial:       5ADB06319D36F5A8BFFD2F5F88109CFF3BFE7588
Authority key identifier: 37:76:1C:1F:1A:6C:B7:9B:A8:AA:12:FC:BF:F4:F0:7B:FB:CF:A7:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3138392e38392e3230382e302f32302d3234203d3e203238313837.roa
Signing time:             Tue 03 Oct 2023 15:37:15 +0000
ROA not before:           Tue 03 Oct 2023 15:32:15 +0000
ROA not after:            Tue 01 Oct 2024 15:37:15 +0000
asID:                     28187
IP address blocks:        189.89.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:db:06:31:9d:36:f5:a8:bf:fd:2f:5f:88:10:9c:ff:3b:fe:75:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0
        Validity
            Not Before: Oct  3 15:32:15 2023 GMT
            Not After : Oct  1 15:37:15 2024 GMT
        Subject: CN=A5D4A034EB1898249372F1EC261E27C84362B823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ad:c4:f2:44:db:d8:ee:39:ab:fa:de:bc:0a:
                    4b:c4:21:f3:2f:d7:98:42:bb:a0:95:01:83:c8:f7:
                    18:d4:cb:3e:f4:4f:b8:bf:af:9d:90:62:98:95:3c:
                    20:f2:de:0d:60:21:29:2a:41:dc:fb:14:de:b5:8d:
                    d4:b3:02:a1:72:96:df:df:70:8f:1a:75:06:ea:51:
                    23:d8:98:06:27:10:0f:1f:ef:ab:c7:ce:d2:b9:e5:
                    f6:0e:72:a9:1c:c0:b7:0a:ea:6f:a9:56:b6:e5:16:
                    37:ea:c4:4d:f8:50:26:98:5d:aa:e6:d5:78:9e:19:
                    3b:f6:ef:13:bb:bf:44:30:e8:93:2d:3e:c9:79:9c:
                    4b:2e:5b:ca:93:da:58:18:fb:15:61:c8:56:2a:de:
                    1b:93:b3:92:7d:85:62:a4:34:e6:bd:b1:17:74:c4:
                    08:f8:67:4f:c7:2f:44:ff:02:16:78:b6:7a:d2:5a:
                    9f:ec:b2:10:4c:dd:a6:c0:c6:f8:41:81:f8:4c:9e:
                    79:cb:a2:6a:3d:a1:a6:ef:c9:7d:c7:9e:7c:dd:26:
                    78:a4:22:e6:e0:af:65:65:a0:45:54:fd:32:f2:18:
                    2e:dd:50:e0:3a:60:0b:cc:d7:70:8d:af:0f:34:68:
                    88:12:cd:a8:95:22:e1:d2:31:87:e8:13:bd:cd:52:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:A0:34:EB:18:98:24:93:72:F1:EC:26:1E:27:C8:43:62:B8:23
            X509v3 Authority Key Identifier:
                keyid:37:76:1C:1F:1A:6C:B7:9B:A8:AA:12:FC:BF:F4:F0:7B:FB:CF:A7:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3138392e38392e3230382e302f32302d3234203d3e203238313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:72:d2:55:ce:d3:8b:52:a0:91:75:1c:e8:a5:97:c4:42:25:
         fe:6e:3b:34:94:a8:ef:c5:6e:57:7e:16:21:b6:c1:4f:5f:c1:
         82:d0:d8:b7:cb:c6:94:3a:fc:f8:cb:61:ec:cb:81:a1:b7:f9:
         d6:fa:aa:06:d5:22:e5:4d:a5:f5:5b:07:2d:c0:3f:de:35:9d:
         a4:26:eb:4b:11:a6:21:f8:a2:42:8c:1f:50:cd:2f:c1:75:48:
         93:e1:ca:82:5a:5a:73:97:9a:13:22:fc:19:3b:a9:14:14:3c:
         27:cf:33:fa:e6:65:1a:f5:58:cc:5b:f4:46:0a:f2:75:bc:2e:
         5c:ba:6a:3a:e5:4a:73:8d:df:13:10:2b:6b:6e:e4:63:8f:6a:
         e2:5c:1b:a9:4d:57:50:a8:9b:07:2f:1a:58:d4:b9:01:15:ee:
         fe:d2:97:4e:e8:8f:d8:23:03:9c:f1:57:dc:ec:e3:0c:54:d8:
         23:1e:c8:f0:43:6f:91:fe:ee:c4:ae:77:66:f3:1b:dd:67:d3:
         1b:1d:16:64:13:aa:ad:70:0f:02:1d:01:fa:c9:17:20:58:49:
         7e:d2:33:5b:0c:74:31:c1:02:0c:b8:40:aa:d4:e2:ca:4d:db:
         4d:21:7f:fd:b3:9e:b8:10:d1:5b:0c:70:eb:42:88:18:37:49:
         02:3a:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org