Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa
File:                     3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa (raw, json)
Hash identifier:          /ozOpYzqVIKnvdZ0lIX7TZI3SfRCpwJxHIF2yv8TmoI=
Subject key identifier:   64:88:F6:12:2F:A5:4D:D1:FF:0F:60:B0:47:27:D7:A5:73:8E:FA:76
Certificate issuer:       /CN=5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B
Certificate serial:       2432A2E527CDAB58B0AA2065A514BE77517429AE
Authority key identifier: 5B:5C:B7:C7:5B:FD:D6:8A:C8:3C:42:B2:D1:4B:32:5F:C0:3D:B3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa
Signing time:             Sat 20 Jan 2024 05:21:46 +0000
ROA not before:           Sat 20 Jan 2024 05:16:46 +0000
ROA not after:            Sat 18 Jan 2025 05:21:46 +0000
asID:                     270711
IP address blocks:        189.127.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:32:a2:e5:27:cd:ab:58:b0:aa:20:65:a5:14:be:77:51:74:29:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B
        Validity
            Not Before: Jan 20 05:16:46 2024 GMT
            Not After : Jan 18 05:21:46 2025 GMT
        Subject: CN=6488F6122FA54DD1FF0F60B04727D7A5738EFA76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cd:14:99:52:65:6c:f6:67:ef:55:35:77:d5:
                    39:73:58:27:c5:4f:35:44:86:59:c9:7b:f5:f0:bf:
                    39:b1:99:7f:c7:61:d3:d2:43:54:e3:e3:72:e8:72:
                    df:77:5b:d2:c4:f2:78:7b:60:fe:cf:58:e8:5c:07:
                    d7:07:f5:2e:71:68:48:07:4d:f6:d6:6b:13:f3:7e:
                    f4:d4:a2:43:20:e7:d1:be:74:b2:4d:45:09:1c:bf:
                    80:e8:fe:ef:6f:0a:7a:9a:6e:f8:73:d6:48:4f:1d:
                    0a:70:05:f4:10:9e:ce:c5:d1:fc:0d:9c:0a:83:94:
                    43:8f:bc:0e:8e:c1:0d:da:c9:71:88:20:65:ec:ba:
                    07:95:f4:76:91:6d:8e:d4:9e:62:fb:6a:06:18:45:
                    fa:9c:76:e8:12:48:1a:98:a1:16:c3:ed:26:04:a8:
                    a9:4e:cb:79:17:62:02:fd:63:c0:85:f2:6e:08:da:
                    a0:0f:b8:fa:d3:65:43:bc:f8:ea:0b:98:dd:a0:75:
                    a8:f0:8c:4b:82:5f:6a:13:cf:5f:b9:f4:c3:84:30:
                    e1:5b:f6:10:9a:f9:07:f8:99:ac:58:a3:26:ef:d6:
                    28:b2:f5:28:d6:50:91:87:3d:67:08:f3:67:84:c1:
                    cb:1c:be:c7:81:4a:f0:be:82:34:7e:89:cf:07:7a:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:F6:12:2F:A5:4D:D1:FF:0F:60:B0:47:27:D7:A5:73:8E:FA:76
            X509v3 Authority Key Identifier:
                keyid:5B:5C:B7:C7:5B:FD:D6:8A:C8:3C:42:B2:D1:4B:32:5F:C0:3D:B3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:4a:78:97:7a:d4:57:8b:31:0f:f3:cf:97:de:38:09:be:
         d2:fb:ec:5a:e5:10:1a:b2:c9:96:df:7d:ec:e5:da:99:c3:2d:
         37:52:80:a4:6e:d9:94:82:c0:a3:18:1a:2b:70:b9:11:68:74:
         4f:48:02:8b:14:12:f5:43:b5:1c:81:ce:29:a5:a9:06:5c:64:
         2b:21:ec:be:b6:79:38:03:87:19:2f:3e:65:aa:38:4f:1a:7e:
         be:99:20:1d:e2:8f:49:7f:7e:a6:14:92:c5:0a:43:f4:be:ee:
         01:2a:f0:56:27:44:8b:03:85:69:91:2b:45:98:bf:93:95:90:
         65:9d:48:2f:9e:26:73:c1:73:d7:45:9d:4a:41:90:10:e6:bc:
         5e:f6:67:a5:ae:87:a0:74:95:60:9d:5d:b6:53:60:c4:07:69:
         35:ac:7a:a0:f3:cc:09:69:32:eb:b5:9a:bc:55:6b:fa:17:5b:
         08:67:32:8a:db:1b:21:f0:09:34:c6:98:57:b5:e7:17:4b:ea:
         f9:73:64:67:16:43:2f:c1:79:c5:73:80:24:2c:94:a1:e0:23:
         05:87:08:2a:4a:00:08:c1:30:3c:31:bc:83:e6:39:3d:0a:91:
         6f:29:ea:2e:bd:16:d2:46:5c:a3:b6:6d:98:ef:92:72:52:e3:
         f4:24:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org