Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e34352e3234302e302f32302d3234203d3e203238333436.roa
File:                     3138392e34352e3234302e302f32302d3234203d3e203238333436.roa (raw, json)
Hash identifier:          3wHqkvjPaM3RTyAC/OJbfPv5Ye5w7uyEP7Pe1zhsUQc=
Subject key identifier:   15:CD:EF:BA:26:35:23:3B:3F:2C:A6:44:78:EE:78:91:5B:6A:23:2A
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       74ECCCE204B344A5F612B365623AE682E8A063F8
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e34352e3234302e302f32302d3234203d3e203238333436.roa
Signing time:             Thu 23 Sep 2021 15:04:11 +0000
ROA not before:           Thu 23 Sep 2021 14:59:11 +0000
ROA not after:            Thu 22 Sep 2022 15:04:11 +0000
asID:                     28346
IP address blocks:        189.45.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ec:cc:e2:04:b3:44:a5:f6:12:b3:65:62:3a:e6:82:e8:a0:63:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: Sep 23 14:59:11 2021 GMT
            Not After : Sep 22 15:04:11 2022 GMT
        Subject: CN=3082010A0282010100D3D209496822B5599AE50CF513AD9A282A4D6732965035D8707A430A8B7BA2E945558769132917073FB841199BDA6DA96E9008DCCB3098CA34B14A3314DB4A04497B508D324EB3E25A001D8C8D61B95D7EF909D438ED9DC9A04BF86C2860ECAEB2BE123C4D8BEEA80146DEE795514CBC2D6E5E98BF615C1AF784263886896C2639661A0813525EB484A61784BEC57ADD10556A985C7EA484851498CC3628F274180E1A925F7EFF7EF2E036FF1A703C7CF4E052EE59A6EA824DB7A266A42C133E6EBF84E23DB35CB6058A8766468EB667AEDD03793DE10FD3E8F9DA2920BDEEC78893210C88E21A04B7E4489698021A6FB3E5DB5476B811211E5954EACFFB44690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d2:09:49:68:22:b5:59:9a:e5:0c:f5:13:ad:
                    9a:28:2a:4d:67:32:96:50:35:d8:70:7a:43:0a:8b:
                    7b:a2:e9:45:55:87:69:13:29:17:07:3f:b8:41:19:
                    9b:da:6d:a9:6e:90:08:dc:cb:30:98:ca:34:b1:4a:
                    33:14:db:4a:04:49:7b:50:8d:32:4e:b3:e2:5a:00:
                    1d:8c:8d:61:b9:5d:7e:f9:09:d4:38:ed:9d:c9:a0:
                    4b:f8:6c:28:60:ec:ae:b2:be:12:3c:4d:8b:ee:a8:
                    01:46:de:e7:95:51:4c:bc:2d:6e:5e:98:bf:61:5c:
                    1a:f7:84:26:38:86:89:6c:26:39:66:1a:08:13:52:
                    5e:b4:84:a6:17:84:be:c5:7a:dd:10:55:6a:98:5c:
                    7e:a4:84:85:14:98:cc:36:28:f2:74:18:0e:1a:92:
                    5f:7e:ff:7e:f2:e0:36:ff:1a:70:3c:7c:f4:e0:52:
                    ee:59:a6:ea:82:4d:b7:a2:66:a4:2c:13:3e:6e:bf:
                    84:e2:3d:b3:5c:b6:05:8a:87:66:46:8e:b6:67:ae:
                    dd:03:79:3d:e1:0f:d3:e8:f9:da:29:20:bd:ee:c7:
                    88:93:21:0c:88:e2:1a:04:b7:e4:48:96:98:02:1a:
                    6f:b3:e5:db:54:76:b8:11:21:1e:59:54:ea:cf:fb:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:EF:BA:26:35:23:3B:3F:2C:A6:44:78:EE:78:91:5B:6A:23:2A
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/3138392e34352e3234302e302f32302d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:08:39:e3:b3:d4:6c:8a:ae:eb:74:5a:37:8f:c2:71:70:81:
         d0:af:ad:f4:a7:8d:d6:88:a7:78:74:22:12:33:cd:c8:f6:27:
         9c:38:6b:12:6f:2d:9b:c6:f1:8d:73:0b:7b:54:c8:33:df:58:
         62:d2:b0:fd:d7:3a:22:f8:84:eb:bb:2a:99:f3:90:47:ce:56:
         dd:f5:1b:89:73:e0:59:a0:b5:90:82:f6:b7:e4:c3:be:f4:d9:
         a7:c0:f1:3d:8a:05:20:6e:37:4b:f2:2a:54:79:a7:17:09:33:
         e8:b6:cc:d4:c0:f7:60:52:4a:dc:cd:5b:4d:f7:aa:19:d3:f8:
         86:55:65:ce:7f:26:46:b9:33:0b:f0:0d:2d:44:08:0f:f6:82:
         f3:9d:94:fb:57:ff:ab:5a:da:68:04:43:99:4a:12:f6:99:56:
         b0:c9:fa:48:06:58:96:54:0a:a4:4d:38:dd:96:12:bf:2d:19:
         58:81:ee:c8:13:82:3e:dc:3e:23:17:ce:3c:fe:b7:60:f4:4f:
         6c:e7:bf:aa:b0:23:05:0d:ba:bf:70:dd:f6:eb:48:9d:8b:7e:
         b3:77:45:fa:35:5d:3c:89:dd:05:b6:97:1d:ec:6f:ab:e8:27:
         c2:25:94:c4:f3:66:14:ac:9c:58:df:84:a0:82:3d:4b:f6:46:
         65:42:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org