Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33332e302f32342d3234203d3e20323730393031.roa
File:                     3138392e35302e33332e302f32342d3234203d3e20323730393031.roa (raw, json)
Hash identifier:          lL44GtEmE+IUWLKqSjea1YXAnPtTzt+XYqblNK48Y0k=
Subject key identifier:   F4:1E:3B:E9:3F:22:F8:69:DB:59:8D:FE:BF:3B:1A:5F:55:6E:F4:80
Certificate issuer:       /CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
Certificate serial:       4762F8AC6D01A7EB63624B75B881956A2454403D
Authority key identifier: 5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33332e302f32342d3234203d3e20323730393031.roa
Signing time:             Mon 22 May 2023 18:59:25 +0000
ROA not before:           Mon 22 May 2023 18:54:25 +0000
ROA not after:            Mon 20 May 2024 18:59:25 +0000
asID:                     270901
IP address blocks:        189.50.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:62:f8:ac:6d:01:a7:eb:63:62:4b:75:b8:81:95:6a:24:54:40:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
        Validity
            Not Before: May 22 18:54:25 2023 GMT
            Not After : May 20 18:59:25 2024 GMT
        Subject: CN=F41E3BE93F22F869DB598DFEBF3B1A5F556EF480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:6e:56:73:0e:41:30:6c:36:12:a5:32:6f:
                    f9:20:79:4e:1a:c5:e4:d0:08:2b:07:08:de:91:63:
                    ca:7d:84:67:36:8f:45:2a:6c:2d:4a:13:a5:40:3c:
                    08:d7:69:91:b0:37:9b:40:50:05:d4:b6:6b:ef:b7:
                    99:f9:b4:5b:b8:46:8d:d7:bf:a8:38:36:bf:e7:63:
                    ec:ee:3a:29:c0:6b:45:76:83:be:28:c4:f7:2b:66:
                    1f:fe:32:da:30:03:30:ae:15:8b:d5:95:d4:ae:a6:
                    a7:1d:32:24:06:fa:b3:dd:ba:3a:f0:12:85:65:e2:
                    c3:04:a6:10:19:ea:b5:e6:5d:ef:6e:6b:db:cf:b7:
                    d3:65:a8:54:1b:21:98:62:dd:c7:fe:0f:89:f2:a9:
                    58:3c:da:00:3f:12:f4:30:46:c6:e0:57:f5:5e:c3:
                    ac:f7:a8:63:47:66:70:ee:57:c2:3f:76:9b:47:bc:
                    75:73:3f:61:61:43:f0:43:19:77:7a:5b:86:e8:32:
                    06:9c:06:d7:93:be:4e:49:ef:f5:16:22:c8:82:56:
                    68:b0:8b:06:b5:c2:f2:1f:84:fb:ec:cd:9d:9f:a5:
                    99:47:8e:bf:d6:7a:c4:7c:8b:88:8a:27:f4:70:d1:
                    5f:cb:1f:a4:4a:43:49:25:68:ff:7d:06:13:96:df:
                    13:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1E:3B:E9:3F:22:F8:69:DB:59:8D:FE:BF:3B:1A:5F:55:6E:F4:80
            X509v3 Authority Key Identifier:
                keyid:5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33332e302f32342d3234203d3e20323730393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:74:9d:98:b4:e6:cb:39:ee:b2:66:8a:f3:2e:63:74:12:
         64:94:e6:0b:cf:4b:35:ed:a8:77:8c:58:63:da:ce:4b:0c:14:
         ee:88:cf:f8:71:a2:e6:ff:ac:63:07:b5:ce:8b:ea:f7:bd:0e:
         85:36:ef:96:2a:16:30:39:c2:a9:ed:50:4c:92:bf:fa:ff:10:
         f5:3c:64:fb:e6:43:56:c5:b7:fa:04:f0:26:65:4d:45:36:77:
         12:a9:b4:65:3c:56:ff:41:de:33:f3:20:dc:8b:07:4a:d3:10:
         24:39:40:a6:35:9b:6d:70:18:39:a8:03:74:a2:ea:25:fd:d6:
         a7:84:17:fb:97:c1:73:6a:ee:32:91:0b:15:a8:63:c4:84:4b:
         3f:dc:05:a7:52:ea:af:47:bd:30:22:38:e7:6f:26:e8:77:ce:
         64:09:5d:08:97:c1:1e:c4:c1:45:7a:cf:52:0d:07:d3:4d:52:
         d2:a8:7f:ca:9b:e9:b0:f9:7c:47:92:b2:58:7d:c6:73:e0:84:
         39:84:da:59:26:f3:6e:05:fa:33:d6:1f:97:c8:fb:eb:2d:b6:
         90:c0:b7:c0:e5:04:3f:6b:5f:e5:7e:31:3a:09:b7:08:e4:ce:
         a2:13:56:1c:41:e7:ee:eb:fe:d6:da:6a:8b:6e:59:e6:46:bb:
         55:8e:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org