Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3134302e302f32322d3234203d3e20323730363331.roa
File:                     3138392e3132362e3134302e302f32322d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          gKhApW9172syNnV8uWuo0AlCLVZ2Tju4FhSF60d52vM=
Subject key identifier:   3F:C7:D8:7D:52:57:5A:9A:53:9D:4C:EC:58:41:5E:D2:E8:F8:6E:F3
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       3AB1A82B33D85A2D0AE6DC683F2031FCC457C124
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3134302e302f32322d3234203d3e20323730363331.roa
Signing time:             Tue 11 Oct 2022 16:34:50 +0000
ROA not before:           Tue 11 Oct 2022 16:29:50 +0000
ROA not after:            Tue 10 Oct 2023 16:34:50 +0000
asID:                     270631
IP address blocks:        189.126.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b1:a8:2b:33:d8:5a:2d:0a:e6:dc:68:3f:20:31:fc:c4:57:c1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Oct 11 16:29:50 2022 GMT
            Not After : Oct 10 16:34:50 2023 GMT
        Subject: CN=3FC7D87D52575A9A539D4CEC58415ED2E8F86EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d1:9a:0e:d3:73:f7:53:be:6b:9c:44:55:d5:
                    f3:85:ed:bf:15:9d:e1:74:3d:bf:5a:16:49:fa:63:
                    e3:f5:ad:a7:e5:7d:57:19:7c:18:76:c8:2a:9a:23:
                    4f:d1:78:53:20:60:27:1f:6b:a6:9e:a0:cf:43:b1:
                    45:a1:01:8c:2f:f6:cd:6c:4d:34:04:56:8b:8c:84:
                    02:d1:1a:3b:26:b4:f5:a7:37:f4:f3:3f:71:5f:e7:
                    bf:99:fc:fa:db:86:7c:ea:8b:21:8a:25:eb:5c:af:
                    a8:32:d3:67:3e:52:8c:ba:63:64:7c:89:1c:a2:8f:
                    a7:0c:7b:04:43:a0:a4:f4:91:72:06:3f:0b:e4:34:
                    f2:f1:26:c9:e9:74:3a:32:e7:2c:73:4c:cc:d6:07:
                    e2:37:9e:e4:e1:02:24:54:5e:70:68:47:10:94:c8:
                    1c:fa:a5:d9:dd:07:69:36:ee:c6:cf:41:e7:22:0e:
                    07:e9:d8:bd:ce:66:d4:5e:38:62:b1:52:e2:17:ee:
                    d2:c1:e4:9f:05:fa:9e:e7:4b:3b:3f:b0:db:a7:a8:
                    c2:e8:3c:49:f4:25:8f:80:64:d2:34:cb:05:3b:24:
                    fc:12:21:95:b1:96:31:2a:00:b5:5b:18:e5:40:29:
                    66:0c:a7:f4:a0:10:40:50:5b:0b:5e:83:5a:0b:73:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C7:D8:7D:52:57:5A:9A:53:9D:4C:EC:58:41:5E:D2:E8:F8:6E:F3
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3134302e302f32322d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:11:c8:82:cd:28:73:f4:71:25:d5:96:9d:8e:aa:fc:8f:
         f3:c0:9c:ff:48:d2:51:13:e7:a5:f0:84:c3:28:01:4a:68:1f:
         7a:bd:af:a1:cb:74:b9:e1:b5:89:95:08:e4:7c:e4:9e:dc:22:
         ea:53:f3:96:cf:21:96:1d:28:e8:c0:6c:28:e3:fd:ac:8d:61:
         6b:49:9f:71:31:00:19:04:cc:49:20:5d:f6:e3:d5:71:aa:81:
         85:e6:09:9f:13:0a:10:8d:b7:ae:e3:ec:6e:db:48:7e:2c:18:
         8f:fb:d6:c8:94:c4:f5:23:18:47:27:d3:8b:76:9f:72:f5:f8:
         23:86:83:5b:5a:97:6f:52:e8:3d:4c:53:ef:a2:bc:41:0c:a1:
         c8:03:21:21:8b:a0:ef:79:80:a8:a6:a8:14:3a:e8:59:da:ae:
         b0:4a:48:14:32:c9:0f:e0:a8:51:ad:cd:24:a1:26:9c:77:09:
         03:85:a1:8a:19:53:a6:d3:4a:e6:c9:43:20:26:91:91:e4:9b:
         5d:a1:36:a9:f6:4a:b3:28:c0:4f:22:b2:1f:23:e3:69:c6:5a:
         a4:06:2a:f5:35:2d:88:41:33:c2:88:1f:b8:7b:ac:50:c6:e8:
         f1:05:75:25:f2:7a:94:48:92:90:ec:e7:98:ad:2c:46:61:ee:
         fd:a9:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org