Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3133362e302f32312d3231203d3e203137323232.roa
File:                     3138392e34352e3133362e302f32312d3231203d3e203137323232.roa (raw, json)
Hash identifier:          CzlZj3C52kPdTvDhzQQ0TVtQCfiSqh1fuj61QiZa+Vo=
Subject key identifier:   5C:DF:7F:CD:A8:C5:9B:9B:D2:8A:10:02:15:8F:DB:DB:54:B5:A4:B3
Certificate issuer:       /CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
Certificate serial:       1A68E8B9404662479FBE3972BA6A6248562D0273
Authority key identifier: F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3133362e302f32312d3231203d3e203137323232.roa
Signing time:             Wed 12 Oct 2022 17:47:01 +0000
ROA not before:           Wed 12 Oct 2022 17:42:01 +0000
ROA not after:            Wed 11 Oct 2023 17:47:01 +0000
asID:                     17222
IP address blocks:        189.45.136.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:68:e8:b9:40:46:62:47:9f:be:39:72:ba:6a:62:48:56:2d:02:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
        Validity
            Not Before: Oct 12 17:42:01 2022 GMT
            Not After : Oct 11 17:47:01 2023 GMT
        Subject: CN=5CDF7FCDA8C59B9BD28A1002158FDBDB54B5A4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:12:c2:d9:36:56:ce:78:d2:36:ab:3d:a6:
                    61:07:0e:a9:4c:07:45:6f:fb:c9:91:21:97:7c:28:
                    95:f3:13:64:c0:bf:c2:e2:77:c4:ac:db:87:fb:be:
                    5c:b6:75:46:ba:c6:f6:bf:60:7a:a3:9a:9b:aa:37:
                    14:6c:b1:98:06:20:0c:95:7f:b4:00:87:7e:8c:c8:
                    e9:d3:ed:6a:77:d5:a2:44:2c:a0:0d:1a:a7:1c:89:
                    46:87:95:05:06:5c:df:b7:f7:2e:54:e6:2b:80:8d:
                    73:fd:6e:ae:bc:49:0a:ee:3c:40:c7:a7:2e:d6:20:
                    0c:05:a2:fa:75:eb:4f:6e:6a:7d:0c:91:9f:6f:16:
                    6e:72:60:68:d3:44:31:da:b6:be:1a:be:fb:b7:a3:
                    64:ca:22:4f:66:50:09:18:2d:62:12:ae:61:08:ee:
                    f3:6c:32:06:53:47:f6:8b:e7:33:47:8f:11:7a:be:
                    3b:91:7d:e0:e7:b8:d7:9f:96:8e:13:e5:1d:b3:44:
                    7d:25:20:be:9f:c8:d4:2e:f9:28:2f:4e:2a:92:9b:
                    a7:f2:2d:fb:73:4e:9e:b9:d2:d3:71:c2:bf:96:85:
                    3f:07:66:82:42:4b:e8:58:b8:c5:75:ba:7a:da:28:
                    67:b7:b8:0a:cc:2d:23:20:9b:d7:05:5a:4c:65:98:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:7F:CD:A8:C5:9B:9B:D2:8A:10:02:15:8F:DB:DB:54:B5:A4:B3
            X509v3 Authority Key Identifier:
                keyid:F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3133362e302f32312d3231203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:27:28:cd:d7:ab:38:69:b5:d5:73:88:61:45:a8:3d:65:7f:
         96:fb:8e:78:cb:01:3d:cf:ad:8f:a3:f1:75:91:7d:a4:3a:a2:
         a0:d0:3c:c5:3f:1e:7d:f6:7e:38:b2:25:e3:38:33:2d:9a:7c:
         c2:e0:5f:ec:62:96:d3:d2:be:70:15:30:52:46:e2:e1:d0:9e:
         06:1c:35:75:f6:39:a9:25:cc:11:94:6e:3e:fa:48:bd:a6:8b:
         01:03:01:f8:8d:a2:e4:b9:fc:12:ee:46:81:9c:8d:59:3c:86:
         c5:8d:1e:3a:dc:f2:69:d7:2b:f5:87:a7:56:88:90:de:20:c4:
         d1:97:ef:ff:c6:c1:df:0a:9d:a1:80:5b:4a:32:49:c8:76:7a:
         13:ec:7f:da:b3:6e:03:28:8c:26:3c:a7:2f:d4:d2:db:27:1f:
         f0:f8:4c:9b:c4:93:cf:86:ed:26:fc:f5:79:ed:cd:ee:b1:83:
         dc:cc:ba:a0:8d:19:e1:65:ec:ba:b9:65:8b:9f:04:65:f4:6a:
         c3:7b:0f:b3:03:52:a9:8f:e9:4d:88:ae:f6:9f:d4:4a:35:40:
         6c:a4:7f:82:22:b3:e5:a0:45:3d:e8:c9:b5:5d:09:07:72:e7:
         2e:22:50:e2:93:e0:1a:a7:15:71:d2:1d:db:30:3b:17:d3:e5:
         ae:ae:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org