Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3134342e302f32312d3231203d3e203137323232.roa
File:                     3138392e34352e3134342e302f32312d3231203d3e203137323232.roa (raw, json)
Hash identifier:          4Y4NYQM84wHCGKTKqIMUQNb9PQCwTtRAVZwB01NGc6c=
Subject key identifier:   27:D8:69:05:34:B4:8F:18:D4:2A:E0:A1:C9:34:FA:32:C2:5B:3D:7E
Certificate issuer:       /CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
Certificate serial:       63FA4B8D5C9F0DB659060CF8D85EBC77006A88ED
Authority key identifier: F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3134342e302f32312d3231203d3e203137323232.roa
Signing time:             Wed 12 Oct 2022 17:46:31 +0000
ROA not before:           Wed 12 Oct 2022 17:41:31 +0000
ROA not after:            Wed 11 Oct 2023 17:46:31 +0000
asID:                     17222
IP address blocks:        189.45.144.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:4b:8d:5c:9f:0d:b6:59:06:0c:f8:d8:5e:bc:77:00:6a:88:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
        Validity
            Not Before: Oct 12 17:41:31 2022 GMT
            Not After : Oct 11 17:46:31 2023 GMT
        Subject: CN=27D8690534B48F18D42AE0A1C934FA32C25B3D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:25:83:4e:13:0a:ab:f7:bf:9c:d6:b7:ce:
                    2b:d4:56:dc:e6:05:2a:37:4e:dc:6f:7e:d5:7c:a0:
                    35:c5:e0:f0:1f:72:9f:f2:c5:c3:83:2e:3b:24:56:
                    28:97:b5:b8:3a:84:6d:ec:57:58:ef:65:53:3c:07:
                    cf:26:b0:ae:6a:61:52:d3:cd:2b:90:fe:2d:03:27:
                    47:01:ad:2d:55:46:ea:59:05:0a:6f:d6:0f:b5:6c:
                    ee:a2:58:6c:76:ff:25:c6:57:4c:53:9b:2c:a1:fd:
                    c6:a3:7a:70:8d:4e:60:e0:7c:64:7d:88:d0:fb:14:
                    95:86:e9:62:c4:e2:6b:40:b4:e1:84:04:89:30:f9:
                    67:fd:67:49:dc:7f:69:5e:49:36:22:bb:36:93:ba:
                    21:70:50:bb:d3:7a:94:cd:bc:28:0c:93:19:ca:7b:
                    25:cd:90:b5:c9:4a:ce:c3:0b:40:68:6d:b5:31:32:
                    4a:18:c1:66:fe:8d:b7:36:62:e2:20:07:8d:72:f4:
                    16:b9:a0:a8:63:77:6a:29:44:2f:72:4d:6d:78:09:
                    7b:90:54:5a:1d:cb:cd:c8:59:75:9d:dc:f4:fc:83:
                    88:9f:81:3d:13:cb:84:d0:96:4a:d1:0f:44:f8:f3:
                    35:62:59:07:47:8c:2d:fe:03:02:cc:e6:14:19:a8:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D8:69:05:34:B4:8F:18:D4:2A:E0:A1:C9:34:FA:32:C2:5B:3D:7E
            X509v3 Authority Key Identifier:
                keyid:F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3134342e302f32312d3231203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:32:8b:cb:0d:6b:d2:c1:7d:86:b4:da:74:50:c3:30:8e:
         18:31:62:87:f3:7c:21:a7:b8:d2:8a:9e:38:02:b6:07:0b:b9:
         97:42:5b:fd:c6:7a:6f:d6:c8:59:32:a9:41:91:94:57:83:35:
         6e:9b:b0:ab:0e:27:51:dd:d2:b3:f7:75:f0:e9:b1:04:28:7e:
         19:a8:89:8f:f9:c2:94:9d:ef:9a:68:b2:c1:a9:86:24:6c:1f:
         47:72:9c:7a:7f:d1:5f:6a:f4:4a:a6:dc:68:bb:10:17:e4:b8:
         01:9c:04:ce:e8:64:dc:2b:74:b4:1f:fa:54:48:50:cc:3c:2b:
         a5:4f:9c:ef:fa:ca:f8:f6:d2:33:3c:49:f3:97:87:e5:07:e0:
         7b:14:21:a7:39:5f:f6:f7:e7:be:65:80:70:e1:4b:92:5b:21:
         9e:7b:6b:a3:bc:24:22:04:5f:05:1a:8e:38:58:96:0f:fa:90:
         43:1b:2d:f2:86:1d:b8:7e:eb:61:92:ec:06:36:a0:98:d7:b3:
         74:23:5f:d2:a2:15:dd:27:70:5a:8d:4e:cc:d1:fc:26:5f:71:
         2b:67:5b:ea:49:ce:bb:07:76:4c:8b:de:f6:8e:81:8a:ab:39:
         96:82:93:f6:ed:6a:0c:ec:4a:c3:48:74:8a:96:da:e4:98:da:
         8f:16:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org