Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133362e302f32312d3234203d3e203238333436.roa
File:                     3138392e3132362e3133362e302f32312d3234203d3e203238333436.roa (raw, json)
Hash identifier:          qhLoaNQFSRjyMtlq94FV9afmMSZ/qm4eV6lluZ7c8Z8=
Subject key identifier:   78:9D:31:C0:D0:F4:9B:AD:8B:D7:AD:E5:55:04:62:E3:41:A5:8D:FB
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       1FC7EB865CE55C366CAB214C99B35CDC8C1853C4
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133362e302f32312d3234203d3e203238333436.roa
Signing time:             Tue 22 Mar 2022 16:03:51 +0000
ROA not before:           Tue 22 Mar 2022 15:58:51 +0000
ROA not after:            Tue 21 Mar 2023 16:03:51 +0000
asID:                     28346
IP address blocks:        189.126.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c7:eb:86:5c:e5:5c:36:6c:ab:21:4c:99:b3:5c:dc:8c:18:53:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Mar 22 15:58:51 2022 GMT
            Not After : Mar 21 16:03:51 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:60:f8:c8:7e:a4:c9:13:63:19:0e:29:6a:
                    ef:30:07:4d:a8:ec:f0:32:e1:a4:8b:2b:df:3f:6b:
                    7b:6e:db:af:6b:fb:01:f6:d8:8e:da:87:b0:e0:1f:
                    b7:e3:b6:de:cc:47:a8:e6:bd:1e:0a:f5:fe:ec:44:
                    9d:5a:92:a0:b7:1e:48:ca:46:8a:09:50:19:73:de:
                    89:10:b5:a1:b8:ef:d6:06:ba:cf:cb:e1:dc:fc:c0:
                    f7:fa:f2:8e:68:6f:fb:f0:36:ac:26:a8:3f:78:95:
                    89:a5:04:3b:a4:53:d4:ec:28:63:72:a8:e7:60:a7:
                    3d:2e:b6:66:02:d4:d8:58:d2:2b:ff:79:0d:36:77:
                    6c:3f:88:4a:ce:0d:33:e6:51:76:e0:89:56:f2:4f:
                    51:49:4c:74:27:79:19:94:09:47:1b:19:49:56:8b:
                    79:4c:54:a9:d4:8d:7d:35:39:d2:95:ba:fb:6b:4d:
                    e3:d0:10:92:44:75:23:7b:da:5a:08:f6:a9:11:ce:
                    df:4e:ab:07:68:6b:cc:52:e6:0a:31:08:ba:ca:b2:
                    f6:6f:a9:60:3a:dc:78:84:5e:82:70:60:e5:28:da:
                    ee:21:0f:c8:48:0e:07:24:cb:d4:99:11:90:24:7f:
                    fb:7c:92:3b:98:19:3a:10:70:3a:82:22:7a:0b:76:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9D:31:C0:D0:F4:9B:AD:8B:D7:AD:E5:55:04:62:E3:41:A5:8D:FB
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133362e302f32312d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:11:32:e8:e2:e7:07:46:f4:b8:f8:53:15:61:54:be:8c:
         7a:63:50:be:ce:d3:3b:c1:6f:89:4f:3a:28:95:33:f7:a1:85:
         7c:a0:32:e6:76:9f:21:36:33:33:5f:2b:0d:3a:e4:27:7f:cf:
         54:de:88:d7:a3:35:e7:6a:c6:e6:72:bd:27:71:4f:a2:8d:a0:
         e3:c5:ff:6d:2c:2d:12:c1:5b:c4:63:22:1c:94:96:87:c4:84:
         5c:1b:d4:91:e2:2e:24:5a:2e:54:fc:b3:7c:0a:e7:4a:99:dd:
         2d:63:f3:32:02:b3:19:01:e6:79:40:ab:92:1e:ef:0f:b3:63:
         f2:50:c9:54:51:3a:53:4c:c7:14:b1:7d:73:03:73:57:ee:d5:
         7b:70:1f:be:c5:db:e8:a2:57:9d:4f:c4:d1:2d:79:fe:90:33:
         50:a3:78:5d:87:19:7a:27:44:56:69:ed:2b:09:d3:d3:d3:ee:
         e0:25:ca:11:d7:f6:69:c4:7e:d3:81:48:e5:cd:9f:c7:33:21:
         80:74:20:85:8f:c5:56:b6:e5:17:92:4b:30:3d:c9:89:ab:8a:
         38:76:70:62:83:a8:6f:d1:83:f0:a6:8c:00:d1:24:d4:41:e2:
         f1:07:e1:b3:8b:2e:3c:d5:80:60:25:aa:6d:8e:75:cc:ee:fc:
         93:52:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org