Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3134342e302f32302d3234203d3e203238333436.roa
File:                     3138392e3132362e3134342e302f32302d3234203d3e203238333436.roa (raw, json)
Hash identifier:          O3kwGByePcLzsDqpH3fmoOblf0yW8UJoJbQHfr2WRI8=
Subject key identifier:   F5:B0:A0:BB:79:3A:D0:A2:42:64:C8:26:85:D5:8E:65:84:C3:89:42
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       7FEB72A472F931521BB854D4FA45C560C806FA79
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3134342e302f32302d3234203d3e203238333436.roa
Signing time:             Thu 23 Sep 2021 15:03:52 +0000
ROA not before:           Thu 23 Sep 2021 14:58:52 +0000
ROA not after:            Thu 22 Sep 2022 15:03:52 +0000
asID:                     28346
IP address blocks:        189.126.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:eb:72:a4:72:f9:31:52:1b:b8:54:d4:fa:45:c5:60:c8:06:fa:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Sep 23 14:58:52 2021 GMT
            Not After : Sep 22 15:03:52 2022 GMT
        Subject: CN=3082010A0282010100B78B4374EC87CA9BA73A958FBD13A739A178EAA362FF816A594329EB6A6A9058C59FF8D4C4C286F7EDD0024163F6B1F04DBFAEB6A8A7096CD1B6AB6B369A52DF8A3CA1963F441619E3B589A1FE1490F25B9FC601A08DD060D0B59000452B003D222CFA86B6790566A74D088CBFAEBD672173AD65BDC3F45C56C6A173C7EC25B101C682C049D8F8B6081156DA5E2442E41A4674FA41CEFCA386F05A22C392EB1EA42F783051E4B75C17CB09B4CA42684BD626944695EB46101DF0B376B61E1A844EAD46A3955091BBDCE1C5EF5A9A56469ADD4C3AA09723F219880656C388068046A81F76F78861F94BE60652120B2D643C711D7BE29E5DC46E20033D4A7CFAD50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:43:74:ec:87:ca:9b:a7:3a:95:8f:bd:13:
                    a7:39:a1:78:ea:a3:62:ff:81:6a:59:43:29:eb:6a:
                    6a:90:58:c5:9f:f8:d4:c4:c2:86:f7:ed:d0:02:41:
                    63:f6:b1:f0:4d:bf:ae:b6:a8:a7:09:6c:d1:b6:ab:
                    6b:36:9a:52:df:8a:3c:a1:96:3f:44:16:19:e3:b5:
                    89:a1:fe:14:90:f2:5b:9f:c6:01:a0:8d:d0:60:d0:
                    b5:90:00:45:2b:00:3d:22:2c:fa:86:b6:79:05:66:
                    a7:4d:08:8c:bf:ae:bd:67:21:73:ad:65:bd:c3:f4:
                    5c:56:c6:a1:73:c7:ec:25:b1:01:c6:82:c0:49:d8:
                    f8:b6:08:11:56:da:5e:24:42:e4:1a:46:74:fa:41:
                    ce:fc:a3:86:f0:5a:22:c3:92:eb:1e:a4:2f:78:30:
                    51:e4:b7:5c:17:cb:09:b4:ca:42:68:4b:d6:26:94:
                    46:95:eb:46:10:1d:f0:b3:76:b6:1e:1a:84:4e:ad:
                    46:a3:95:50:91:bb:dc:e1:c5:ef:5a:9a:56:46:9a:
                    dd:4c:3a:a0:97:23:f2:19:88:06:56:c3:88:06:80:
                    46:a8:1f:76:f7:88:61:f9:4b:e6:06:52:12:0b:2d:
                    64:3c:71:1d:7b:e2:9e:5d:c4:6e:20:03:3d:4a:7c:
                    fa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B0:A0:BB:79:3A:D0:A2:42:64:C8:26:85:D5:8E:65:84:C3:89:42
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e3132362e3134342e302f32302d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:81:b5:9d:7e:c0:2f:7e:74:d5:df:ce:da:4f:6b:56:61:7a:
         86:f9:81:f9:40:ab:e7:79:7d:ed:28:77:ee:3b:01:6a:2f:4d:
         0e:5e:eb:03:68:20:78:3e:af:6f:ac:a3:ea:2c:be:d4:1f:37:
         dd:8f:06:07:bb:e3:b9:2c:33:4d:c7:e3:3f:a2:4e:15:07:d4:
         28:97:34:2a:e2:11:37:39:a0:66:bb:69:31:ca:f0:bb:d8:f6:
         58:a3:25:f8:e1:61:43:45:42:ce:97:5f:d1:40:76:a1:d2:8f:
         8d:59:4d:7a:9a:bb:72:8f:40:bf:4d:40:ef:cc:57:d2:53:be:
         3b:82:40:49:b0:7f:9c:77:18:0f:c5:dd:c0:7f:e8:70:50:06:
         58:b7:42:43:96:61:4f:3e:46:93:58:52:6f:68:c3:c8:ef:cf:
         09:21:60:83:48:92:1c:ab:e4:44:21:46:1d:3d:12:b5:b6:e7:
         57:24:70:7e:74:89:b5:47:05:dd:c0:c2:0c:5c:a1:4e:84:43:
         b1:87:61:ce:c1:bf:71:e2:0c:ec:aa:23:80:12:a7:f4:11:47:
         47:28:29:d8:30:bc:4d:7b:b1:c2:e4:fc:f7:40:cc:b1:44:d7:
         6a:0b:28:f7:b8:e4:b8:a6:4a:1f:71:3e:f8:27:f3:71:cb:ee:
         a5:0e:c1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org