Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33352e302f32342d3234203d3e20323730393031.roa
File:                     3138392e35302e33352e302f32342d3234203d3e20323730393031.roa (raw, json)
Hash identifier:          4cMF9lDsWm62H93F495011VtBeoapuqwEJSx2b2x0OM=
Subject key identifier:   2E:6E:FC:0A:F9:92:57:EB:8C:29:16:F8:29:42:0A:DD:69:33:FE:F1
Certificate issuer:       /CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
Certificate serial:       71B062580A44209A04AEF12D1CFEAEEFE8F77293
Authority key identifier: 5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33352e302f32342d3234203d3e20323730393031.roa
Signing time:             Mon 22 May 2023 18:59:30 +0000
ROA not before:           Mon 22 May 2023 18:54:30 +0000
ROA not after:            Mon 20 May 2024 18:59:30 +0000
asID:                     270901
IP address blocks:        189.50.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b0:62:58:0a:44:20:9a:04:ae:f1:2d:1c:fe:ae:ef:e8:f7:72:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
        Validity
            Not Before: May 22 18:54:30 2023 GMT
            Not After : May 20 18:59:30 2024 GMT
        Subject: CN=2E6EFC0AF99257EB8C2916F829420ADD6933FEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:cb:bb:e6:2e:7f:3f:a6:5e:21:5d:da:19:8a:
                    21:d2:7e:49:1b:c4:b2:59:57:db:d0:39:fd:9e:40:
                    fb:02:7c:28:6c:45:d4:33:34:53:47:31:a9:42:a0:
                    11:ce:13:04:c5:9c:fd:0a:72:0a:28:33:35:b5:ee:
                    f8:71:3a:13:35:fc:46:8f:47:90:86:3f:1b:13:1f:
                    2d:2c:9e:3e:63:64:06:97:75:b2:55:10:5d:3b:f6:
                    30:89:49:0b:b2:d3:86:9b:7a:4e:12:2f:bf:64:62:
                    c4:5d:a1:79:a5:48:79:dd:e4:5a:6b:0e:18:e4:4b:
                    7b:d3:58:16:18:78:05:76:d1:fc:d1:16:68:17:09:
                    e2:64:44:5d:29:e2:9c:cf:f1:48:85:3f:a4:8b:08:
                    1e:24:5a:7e:de:a9:c1:e4:05:55:1f:c1:c7:aa:75:
                    3a:0b:60:69:9b:be:53:94:16:4b:fb:bd:77:ac:84:
                    08:c8:91:82:0f:65:2a:44:a7:35:d1:73:f4:03:48:
                    84:60:be:02:b5:11:49:c1:93:b4:ca:d7:66:f8:95:
                    ee:9c:c4:01:1a:12:db:91:5c:77:d0:f4:a5:2f:d0:
                    8a:c5:d6:bb:55:20:2d:99:90:66:0e:97:2f:15:2a:
                    a8:17:4b:35:77:34:a3:2e:a0:e3:15:45:94:a0:eb:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6E:FC:0A:F9:92:57:EB:8C:29:16:F8:29:42:0A:DD:69:33:FE:F1
            X509v3 Authority Key Identifier:
                keyid:5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/3138392e35302e33352e302f32342d3234203d3e20323730393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:3a:23:0a:86:0b:a5:69:72:3b:9d:61:13:ed:24:00:a4:f4:
         3e:dd:a7:51:4e:1a:25:f6:bf:53:e0:5c:9b:07:5c:c3:e0:2e:
         12:3a:de:16:67:0d:1b:cc:a0:89:f2:9a:05:77:5e:12:21:5a:
         8c:a9:df:36:20:23:5f:98:a9:00:3c:61:56:6c:50:ac:82:94:
         45:95:43:51:a2:58:8a:ac:37:45:1e:54:fc:aa:5d:43:09:10:
         e8:60:5b:a0:79:a4:68:e9:0f:2a:ca:0b:76:76:62:9c:9d:0b:
         31:b4:14:02:0e:0c:61:57:53:6f:0c:56:81:71:fd:1b:d5:f0:
         fa:c8:e3:f8:dd:72:5d:5f:89:e8:26:29:05:a1:f5:c1:4c:e5:
         c6:29:89:16:5c:25:7a:aa:24:41:76:68:3d:e3:30:4a:8f:41:
         0b:e1:66:7e:45:e5:fc:a1:3b:c7:4c:73:a2:37:a9:39:de:ca:
         42:f8:4a:f5:42:e4:b2:11:23:86:c9:f7:fb:9f:a7:52:87:8e:
         4c:1b:f3:b6:93:eb:9e:8f:a7:89:b7:ff:ec:7d:e1:2e:f2:4a:
         15:4f:67:d0:6f:03:62:5c:ea:65:d6:f6:c4:72:c3:7a:63:36:
         8d:9e:6d:2c:2d:4c:2a:f1:55:2d:2e:6a:84:fd:6f:69:4f:93:
         11:81:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org