Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa
File:                     3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa (raw, json)
Hash identifier:          A3E0dv7Jn9OUq67UcWuX7pkKziUC8aQy3mOmZef64mg=
Subject key identifier:   61:C9:66:72:20:DB:67:FC:96:9D:16:1F:B7:79:1B:6E:72:59:16:5B
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       52DFB617CAC77CA73EDB355FD84DD40226516B1A
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa
Signing time:             Tue 07 Nov 2023 11:44:32 +0000
ROA not before:           Tue 07 Nov 2023 11:39:32 +0000
ROA not after:            Tue 05 Nov 2024 11:44:32 +0000
asID:                     40356
IP address blocks:        189.126.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:df:b6:17:ca:c7:7c:a7:3e:db:35:5f:d8:4d:d4:02:26:51:6b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Nov  7 11:39:32 2023 GMT
            Not After : Nov  5 11:44:32 2024 GMT
        Subject: CN=61C9667220DB67FC969D161FB7791B6E7259165B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:f8:6d:14:91:61:5f:aa:95:1c:10:32:94:
                    32:a5:b5:a1:3b:af:26:72:64:08:c6:64:22:3e:72:
                    e6:36:ad:85:8e:65:57:3d:ce:4d:a5:75:84:e8:73:
                    09:da:4e:b1:ab:2a:f9:e7:58:8f:ac:87:35:d4:b7:
                    f4:fc:61:02:90:40:08:a2:8f:82:dc:33:f7:e0:5a:
                    36:a7:ad:d1:9e:0b:d2:d9:61:2a:2f:07:3b:99:cc:
                    0c:4e:62:7b:3e:16:05:28:40:2b:3c:b0:df:2e:6d:
                    b6:57:c9:45:15:89:43:d3:64:54:4a:eb:93:6d:6f:
                    99:cb:58:d1:10:e1:dc:d9:a5:5a:f9:b6:5f:8f:96:
                    c5:92:bb:2e:5e:ee:a6:76:b5:90:65:11:ff:d1:3f:
                    16:5f:0e:09:89:fd:ba:e8:f2:e5:9a:56:8f:c1:04:
                    10:fc:bb:d7:8b:02:7d:b7:68:0b:6c:c2:b2:1c:34:
                    96:62:f6:c4:fb:29:70:f4:3a:5d:9a:43:74:64:8e:
                    92:db:6a:2f:fd:c3:12:f3:57:d0:3b:25:d5:ff:fb:
                    d4:2e:c8:05:0a:77:04:ec:10:e6:a9:89:69:9d:1d:
                    35:80:87:3c:1f:d0:f3:dc:46:79:fa:f8:80:7e:70:
                    60:fb:62:31:39:94:26:c4:8c:b1:40:f0:db:e8:90:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C9:66:72:20:DB:67:FC:96:9D:16:1F:B7:79:1B:6E:72:59:16:5B
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:c5:3a:75:0a:d7:6d:a7:fa:99:2f:b0:ea:5e:c8:a5:b8:47:
         4d:39:c1:56:c6:d2:eb:ed:ed:f4:cc:59:70:31:b7:43:a2:31:
         bc:03:0d:a8:a7:72:b3:fb:bc:9d:7b:5f:45:ea:b2:a6:ee:84:
         20:89:11:07:8b:5f:df:cc:9c:09:94:bb:c7:11:d2:d3:5c:50:
         ab:2b:32:b5:68:97:bd:d1:3f:e9:32:32:a0:65:27:d3:0f:f9:
         d1:2c:1a:82:a6:e3:c7:14:78:a4:fd:00:14:37:27:87:03:63:
         cb:37:9b:3e:5b:98:7c:a1:26:e7:0d:29:bc:a8:71:30:70:9c:
         1d:9e:8f:61:7a:13:2d:27:01:e8:94:9c:d4:52:da:c2:b9:7c:
         64:93:4c:5b:0a:bc:3d:16:46:9c:84:c6:f4:f4:b9:e6:37:de:
         ce:f4:f8:5d:e9:87:64:05:08:dd:b8:1e:2f:b1:24:07:05:92:
         cd:53:09:6a:40:36:1f:7c:29:fe:ac:46:a2:e4:7f:db:6a:bf:
         60:12:a2:d4:18:fb:95:20:56:38:c7:19:f1:9a:4f:ea:6d:ba:
         2d:b9:ec:cb:5e:cb:38:84:4f:d5:a1:f1:9e:d0:ab:7a:be:e6:
         3c:a4:2e:57:f1:1d:15:20:55:bb:77:9d:5e:ce:77:83:71:f9:
         6a:9c:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org