Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3132382e302f32302d3234203d3e203238333436.roa
File:                     3138392e3132362e3132382e302f32302d3234203d3e203238333436.roa (raw, json)
Hash identifier:          FAJJFUhTCLWd5wAIYa4qPn/oK/tk+s2QUo78NDVnAOk=
Subject key identifier:   CA:5E:41:2E:22:7E:B7:EE:A1:C6:D8:CB:A7:47:DC:CE:7D:1C:EF:E1
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       2030FF0C020713F764E8D0A399265B1438ADE8BF
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3132382e302f32302d3234203d3e203238333436.roa
Signing time:             Thu 23 Sep 2021 15:04:18 +0000
ROA not before:           Thu 23 Sep 2021 14:59:18 +0000
ROA not after:            Thu 22 Sep 2022 15:04:18 +0000
asID:                     28346
IP address blocks:        189.126.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:30:ff:0c:02:07:13:f7:64:e8:d0:a3:99:26:5b:14:38:ad:e8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Sep 23 14:59:18 2021 GMT
            Not After : Sep 22 15:04:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:c6:23:1d:fc:10:0b:cc:12:c3:e9:e2:ff:
                    e5:0e:50:48:d8:8c:3e:03:fa:2e:30:88:0b:c7:1d:
                    d8:cb:09:b3:a6:d8:ca:99:54:55:aa:71:bc:fb:b6:
                    fd:02:b4:98:6e:33:45:11:f9:6e:db:56:56:43:bf:
                    65:23:38:fc:e4:62:b9:1c:7e:73:d8:64:97:f0:18:
                    f1:b6:6a:81:12:e3:1b:3f:66:01:03:15:dd:b6:9f:
                    38:24:75:2d:dc:f2:3b:f5:70:fa:a9:cc:08:36:9a:
                    4a:f9:78:23:48:11:e8:4c:d6:5f:41:a9:00:7b:37:
                    bb:2b:0b:41:e9:0c:86:ba:a3:47:28:ca:bb:ca:19:
                    8c:0e:4d:0c:44:7a:11:7c:ae:68:cc:f3:8e:18:86:
                    04:39:88:7b:82:b2:c5:06:e1:39:a5:4d:b0:75:c6:
                    38:f5:92:b6:fc:0b:de:45:e9:a5:cd:bc:28:75:b8:
                    b0:39:b0:de:cc:f3:f6:64:ac:e2:77:c4:8c:e2:dd:
                    65:76:ed:33:a0:58:90:58:6d:1c:2a:02:52:38:71:
                    1e:08:eb:4c:fb:c9:c8:48:fe:ac:8a:48:66:b8:3d:
                    50:be:56:f8:8d:dc:43:64:6b:56:d6:b7:74:90:a0:
                    d2:cd:21:4b:61:6c:74:3f:b2:61:fd:06:11:e9:c1:
                    01:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5E:41:2E:22:7E:B7:EE:A1:C6:D8:CB:A7:47:DC:CE:7D:1C:EF:E1
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3132382e302f32302d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:31:05:97:44:04:d0:9c:91:3b:60:24:50:68:f0:f5:b9:75:
         53:26:e9:f6:f7:69:c4:f8:81:68:59:e0:0a:d1:a3:b4:3d:e1:
         54:00:8e:e0:3e:e6:6c:a1:30:fe:e8:60:85:a1:09:27:e7:af:
         4f:da:1e:ea:d2:e1:fe:56:ee:1c:4c:73:59:b2:44:eb:95:1d:
         43:9b:2f:7c:5b:f6:05:ac:9e:ac:20:b0:db:93:31:34:a3:fc:
         c9:84:e1:4e:4a:6c:fa:21:fa:92:c3:9f:ae:aa:7d:b6:1b:00:
         1b:c8:39:78:5e:bc:e2:30:fe:df:48:c5:2a:11:63:43:a0:2e:
         58:7e:df:fa:d8:0e:4d:0d:85:1d:26:ae:2a:af:d3:7d:ee:30:
         69:5d:e1:21:35:f3:58:fa:79:8a:c4:74:9a:e6:98:e4:76:5f:
         89:19:2b:3b:4a:c5:ca:9e:32:b0:8b:98:52:2c:6a:85:ee:64:
         00:a1:d9:17:35:43:a4:27:fb:7c:e8:01:77:be:ef:8c:4e:6a:
         ce:6d:49:9c:6c:bb:a8:1f:31:29:5f:a8:48:f5:6e:5f:50:37:
         ed:41:0a:ce:2e:2c:5f:a2:c8:1e:67:41:8e:53:c9:af:bd:e1:
         e6:6e:e9:57:5f:28:fe:9a:ee:13:11:a6:28:67:22:f1:2c:50:
         ca:62:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org