Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3134342e302f32302d3234203d3e20323730363331.roa
File:                     3138392e3132362e3134342e302f32302d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          IQf8xoRNF5khS3CiPowrhKAmdETCnHt6kbzII2G8QI4=
Subject key identifier:   C0:3E:26:DE:88:C7:64:28:D0:CB:89:1D:52:0B:0C:5C:D2:5D:97:48
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       58B6E86378F7679EC4050F6B06247DF34610D928
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3134342e302f32302d3234203d3e20323730363331.roa
Signing time:             Tue 11 Oct 2022 16:34:50 +0000
ROA not before:           Tue 11 Oct 2022 16:29:50 +0000
ROA not after:            Tue 10 Oct 2023 16:34:50 +0000
asID:                     270631
IP address blocks:        189.126.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b6:e8:63:78:f7:67:9e:c4:05:0f:6b:06:24:7d:f3:46:10:d9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Oct 11 16:29:50 2022 GMT
            Not After : Oct 10 16:34:50 2023 GMT
        Subject: CN=C03E26DE88C76428D0CB891D520B0C5CD25D9748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:b7:86:76:9d:26:6e:f1:1a:e1:a0:02:1e:
                    6c:d5:2f:c3:b0:55:0e:97:87:f2:a6:aa:14:a3:e3:
                    37:7a:f8:ed:66:51:b9:87:22:1c:e3:37:67:25:0c:
                    0b:7d:c0:0f:00:50:1a:4b:48:84:2b:0b:c5:8f:f5:
                    0b:db:bd:33:5b:f6:ec:34:09:0e:56:7b:78:bc:cb:
                    23:24:07:12:75:d7:27:dc:f5:50:f9:58:81:9d:41:
                    2b:02:80:9d:55:15:90:54:d1:50:0e:aa:c5:49:c5:
                    65:e0:2b:ff:45:7c:82:18:d1:c9:19:e9:c7:d3:ac:
                    7d:fd:d1:43:3f:83:51:ef:3d:72:64:d8:ea:9c:e6:
                    30:24:02:b9:c9:62:bc:d9:c5:a3:6a:5b:03:3c:81:
                    6d:4c:2c:f0:08:3a:64:ec:f3:8a:b3:35:e9:2b:64:
                    06:20:5a:d4:ed:68:d0:2d:e7:6b:6a:fd:0b:23:0d:
                    2a:1a:dc:27:f7:f0:f2:87:17:21:ca:8b:54:24:6f:
                    25:0f:83:bd:82:58:7d:9f:23:95:19:f4:a4:b1:80:
                    29:d8:cf:d0:17:2a:08:b5:08:6d:a7:3d:ad:51:a3:
                    d0:f1:d6:31:62:d3:01:a7:ea:44:ed:12:8d:7a:a4:
                    f3:11:de:62:1c:59:ae:cc:b0:ad:bb:27:4f:57:1a:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3E:26:DE:88:C7:64:28:D0:CB:89:1D:52:0B:0C:5C:D2:5D:97:48
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3134342e302f32302d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:58:ea:41:bf:fa:80:d6:df:17:8d:d7:79:3c:86:6d:44:db:
         f5:ed:52:47:c3:34:d1:83:11:40:6d:ca:61:44:cd:1e:66:ed:
         31:aa:24:d1:64:30:81:f5:d7:df:48:0f:2f:b7:99:8a:ac:f3:
         eb:90:b2:ae:c7:d3:03:98:29:f3:6c:59:29:21:cd:ea:01:70:
         70:8c:b8:d7:98:cc:96:c9:38:46:2f:ce:86:ec:dc:f7:db:00:
         ed:77:3c:4d:50:fc:3b:24:3b:56:5a:1f:00:05:51:78:6f:af:
         e5:3d:5c:e4:4d:07:77:0f:f1:e1:46:b9:d2:49:ae:ee:52:5d:
         ca:87:34:80:09:43:4c:2c:7b:b4:ed:04:cf:e3:b3:53:33:50:
         e7:23:f8:b3:11:0d:e2:31:b0:d0:ba:05:a2:66:d4:3f:e2:aa:
         9d:a8:cd:da:e2:ea:37:9d:d2:28:ef:d9:0b:98:8f:b5:af:40:
         b5:e7:a5:8d:f1:b5:e1:29:71:0b:40:25:78:67:a7:17:cf:7a:
         e7:9a:be:a2:90:1e:b4:21:e3:0b:96:d1:80:f5:b4:7b:e9:68:
         f0:c5:1c:6b:08:cb:62:ec:3e:f2:c6:d4:10:32:bf:2f:8a:07:
         62:7d:c6:4c:7c:b6:bc:bc:a4:b0:77:98:2d:0f:f0:07:88:e2:
         59:ec:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:03 2023 by rpki-client on console-fra.rpki-client.org