Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32322d3232203d3e20323730373131.roa
File:                     3138392e3132372e3132382e302f32322d3232203d3e20323730373131.roa (raw, json)
Hash identifier:          wlqiQV9V6Y5Nlc9D3urNmsO3YTQu4GMl9kPpMLa3CYg=
Subject key identifier:   C3:E1:A2:59:74:B4:21:4C:98:54:11:98:D4:89:FF:9C:22:C4:15:13
Certificate issuer:       /CN=5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B
Certificate serial:       1F61072D7693C4302454B81FF4232B2CAE110717
Authority key identifier: 5B:5C:B7:C7:5B:FD:D6:8A:C8:3C:42:B2:D1:4B:32:5F:C0:3D:B3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32322d3232203d3e20323730373131.roa
Signing time:             Sat 20 Jan 2024 05:21:46 +0000
ROA not before:           Sat 20 Jan 2024 05:16:46 +0000
ROA not after:            Sat 18 Jan 2025 05:21:46 +0000
asID:                     270711
IP address blocks:        189.127.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:61:07:2d:76:93:c4:30:24:54:b8:1f:f4:23:2b:2c:ae:11:07:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B
        Validity
            Not Before: Jan 20 05:16:46 2024 GMT
            Not After : Jan 18 05:21:46 2025 GMT
        Subject: CN=C3E1A25974B4214C98541198D489FF9C22C41513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:5f:ca:d0:d5:07:93:83:5c:5e:e2:b8:c7:
                    9e:d8:07:13:b3:59:9c:f9:62:8e:c7:37:f2:c2:e0:
                    69:74:e8:3f:47:1d:8c:c9:6e:12:1f:b8:cc:ac:60:
                    74:b0:80:ee:19:80:da:81:ae:e8:9b:10:4c:2d:d2:
                    dd:1c:e7:7b:42:c6:a4:7d:33:c1:29:60:e3:d6:de:
                    44:e3:75:90:f7:96:03:5e:4f:c0:73:ea:af:bc:0c:
                    f3:9b:ec:b5:39:d7:08:c7:3a:a3:b5:d5:8d:40:58:
                    de:fb:97:3b:07:0d:00:e7:43:ac:13:be:e3:57:8c:
                    44:c2:11:60:08:fd:30:2b:ff:a6:6b:33:f4:af:d1:
                    e1:29:b7:2b:96:11:a1:96:87:53:35:c6:c6:e3:49:
                    27:fc:34:50:d0:34:96:7a:e8:a6:6a:23:aa:c8:b0:
                    7c:8c:60:52:f7:f7:e3:c4:7e:9b:8e:49:71:cd:ff:
                    5a:61:32:a6:ea:33:7d:82:16:d9:5e:db:2d:2e:bc:
                    48:03:67:ed:35:8d:dc:92:62:47:1d:9a:7b:56:f4:
                    0b:66:53:2c:e6:c9:9d:55:64:f3:53:df:14:8d:d9:
                    29:1c:e9:e0:19:cf:06:15:3a:2d:47:91:ab:ce:93:
                    fe:e0:8b:c3:f9:b2:cf:e8:63:0b:4c:38:3e:f4:b6:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E1:A2:59:74:B4:21:4C:98:54:11:98:D4:89:FF:9C:22:C4:15:13
            X509v3 Authority Key Identifier:
                keyid:5B:5C:B7:C7:5B:FD:D6:8A:C8:3C:42:B2:D1:4B:32:5F:C0:3D:B3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32322d3232203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:f0:c7:4c:42:8c:0c:c9:9a:c5:e8:48:8b:c2:1e:a6:b2:
         50:e8:c5:a6:fb:5a:94:4b:70:39:5a:cf:b0:7c:61:87:b4:84:
         51:64:a6:81:80:4e:27:67:53:58:a4:10:30:85:d2:a5:c9:44:
         5a:3d:2d:e4:70:84:10:fd:5f:79:86:73:42:cd:06:a4:76:40:
         2d:ce:d2:37:23:46:f4:85:dd:65:56:0a:58:f9:40:01:f9:5b:
         f9:59:f9:59:b9:8a:e2:aa:d1:0a:95:1f:42:4b:e4:c3:52:02:
         a8:cf:09:2e:36:27:90:99:6d:42:b1:47:05:87:04:84:79:25:
         50:f5:55:a8:bc:81:c3:ee:cb:76:d4:82:86:d4:a1:3c:c2:2b:
         97:aa:53:16:57:0d:a5:41:31:6c:71:0a:e2:3b:b4:4e:48:06:
         6d:5e:94:d7:44:86:1f:1b:e5:79:7a:76:6e:52:01:94:90:71:
         e1:1b:83:a8:2c:bd:d6:ce:9f:24:d8:90:12:97:e4:f7:ad:db:
         f8:15:d0:42:93:dc:cb:b6:97:f1:39:a6:07:6e:81:0b:57:73:
         79:84:c6:0e:0a:3f:ff:87:d0:84:03:d8:34:b8:ef:75:a3:f5:
         b2:f3:d0:12:11:85:76:13:01:48:d7:5b:2c:5f:32:2d:e1:0a:
         9a:6d:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org