Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33342e302f32332d3233203d3e20323730393031.roa
File:                     3138392e35302e33342e302f32332d3233203d3e20323730393031.roa (raw, json)
Hash identifier:          iRmuYxhvR8rDphh3otJzOmtlDuv9L72SPbFrucnSMPA=
Subject key identifier:   66:65:F8:3C:D4:6D:FE:E1:B6:33:5D:F2:24:F3:E0:1D:07:EE:55:63
Certificate issuer:       /CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
Certificate serial:       7C8EB88108D59471695397524F1DCE664DEB24A4
Authority key identifier: 5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33342e302f32332d3233203d3e20323730393031.roa
Signing time:             Fri 02 Jun 2023 14:04:31 +0000
ROA not before:           Fri 02 Jun 2023 13:59:31 +0000
ROA not after:            Fri 31 May 2024 14:04:31 +0000
asID:                     270901
IP address blocks:        189.50.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8e:b8:81:08:d5:94:71:69:53:97:52:4f:1d:ce:66:4d:eb:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
        Validity
            Not Before: Jun  2 13:59:31 2023 GMT
            Not After : May 31 14:04:31 2024 GMT
        Subject: CN=6665F83CD46DFEE1B6335DF224F3E01D07EE5563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:3d:42:b1:5f:75:2b:c3:e4:9b:1c:d3:b5:
                    33:f6:ba:0d:d7:6e:8c:70:92:69:8c:75:ba:3a:93:
                    e7:8c:6d:71:5f:56:b9:f1:03:cf:0f:5a:27:47:46:
                    28:65:8d:11:58:e5:67:bf:ab:ad:7a:8d:8a:2e:82:
                    13:f3:fd:c2:96:de:3e:78:a6:54:77:b7:a3:72:c0:
                    81:96:90:86:81:b3:ce:a6:6c:cf:08:de:75:62:d6:
                    64:b2:91:0c:88:e7:4e:67:d7:aa:a7:8e:9d:88:ac:
                    c6:8d:b5:33:c7:de:af:91:9c:ab:6e:19:b2:60:e6:
                    ac:1b:5b:b0:2a:4b:1d:c0:4b:00:a5:39:0d:c4:4e:
                    68:4a:b0:c1:fa:75:a6:99:f0:8c:d4:91:ce:60:48:
                    f1:96:6d:fc:2e:51:96:af:98:05:72:86:2c:b5:b6:
                    dd:2b:d6:b8:38:d4:4b:7a:3d:95:b1:44:67:28:91:
                    9d:7e:64:07:36:0f:45:ae:34:ad:18:f7:1b:ab:55:
                    02:a7:95:84:70:6a:85:7e:6e:be:9b:ec:b2:e0:39:
                    71:6a:79:28:32:ce:c4:e8:65:84:f6:9b:ed:45:d9:
                    f3:22:8b:75:f9:f5:fd:35:7c:dc:2a:b8:aa:5c:1b:
                    16:af:04:28:dc:fa:09:bc:37:ef:72:f8:df:64:43:
                    c2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:65:F8:3C:D4:6D:FE:E1:B6:33:5D:F2:24:F3:E0:1D:07:EE:55:63
            X509v3 Authority Key Identifier:
                keyid:5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33342e302f32332d3233203d3e20323730393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:a5:2c:b3:d1:96:f3:20:db:d0:50:c5:41:45:31:e5:b7:
         6e:67:94:fb:1d:e3:4c:94:37:db:69:5f:43:a2:3a:2e:73:99:
         b4:4b:18:0a:34:b7:fd:0f:23:f4:26:87:93:cb:64:1b:3c:a8:
         68:c3:ea:cc:0b:37:51:78:d1:b4:f9:4f:d3:cc:5e:6e:43:63:
         4d:ee:25:49:58:ef:61:31:6e:64:79:fa:1a:7e:04:fa:12:34:
         d1:7f:d7:9f:32:98:19:ae:f1:09:df:19:72:e7:de:c6:4c:5e:
         6a:b5:9c:89:25:9b:bd:b9:42:d3:23:e1:ae:89:15:be:4c:4d:
         74:31:21:3d:4f:d2:d8:c7:42:18:75:32:58:52:7c:8f:84:66:
         ad:e8:1e:29:ac:61:e0:f7:b4:7d:f9:7d:73:70:05:fc:be:da:
         19:8d:21:cf:e7:51:aa:7a:9e:c1:05:d9:9d:7e:4a:35:3c:90:
         2a:80:66:12:fe:6a:71:99:90:51:bd:f9:60:e3:69:b4:0b:3e:
         65:f6:84:1e:3a:29:bb:5f:85:c6:03:b5:ab:a6:9c:4d:d8:96:
         67:39:35:4a:a1:39:e4:41:6c:3b:8f:a0:01:87:eb:a0:6d:75:
         70:29:73:d5:25:ea:0c:a6:ea:a7:62:aa:85:80:7d:e3:11:e5:
         b8:f2:6f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org