Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3132382e302f32322d3232203d3e20323730373131.roa
File:                     3138392e3132372e3132382e302f32322d3232203d3e20323730373131.roa (raw, json)
Hash identifier:          TeO+2SKRi2zSILKMW9c745uqANAImLi0RUo35o/ALUE=
Subject key identifier:   2C:DD:34:A5:F0:5E:DC:CD:B7:7E:A1:56:03:1B:94:69:0C:94:F3:14
Certificate issuer:       /CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
Certificate serial:       1C1A18E60EF2E2B4A177508A91E99CD5192D0004
Authority key identifier: E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3132382e302f32322d3232203d3e20323730373131.roa
Signing time:             Thu 04 Apr 2024 12:08:34 +0000
ROA not before:           Thu 04 Apr 2024 12:03:34 +0000
ROA not after:            Thu 03 Apr 2025 12:08:34 +0000
asID:                     270711
IP address blocks:        189.127.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1a:18:e6:0e:f2:e2:b4:a1:77:50:8a:91:e9:9c:d5:19:2d:00:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
        Validity
            Not Before: Apr  4 12:03:34 2024 GMT
            Not After : Apr  3 12:08:34 2025 GMT
        Subject: CN=2CDD34A5F05EDCCDB77EA156031B94690C94F314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:fb:6d:19:4b:8d:a9:21:7b:73:00:0a:0b:
                    27:a1:96:14:32:e7:4e:5b:3c:e8:f6:62:d8:42:bc:
                    d8:11:0e:ab:db:e2:2e:f3:9c:89:d6:43:8d:5a:35:
                    2d:a7:6e:b5:58:a5:be:e1:16:dd:85:8f:58:fe:fa:
                    71:ad:06:fe:54:20:76:87:b4:81:bb:ef:2f:f9:95:
                    54:01:56:aa:ac:70:fa:b9:aa:42:cf:d7:c1:11:f4:
                    2b:db:43:38:4c:cc:37:1c:a2:03:67:b4:57:aa:81:
                    9a:d3:9f:45:b3:93:69:33:c6:8e:5c:8b:47:2d:5c:
                    fb:96:31:33:86:69:91:7f:0c:27:80:95:e2:cc:44:
                    47:04:85:d7:15:6f:83:d8:2f:e6:41:b2:98:c8:f2:
                    7e:1c:3f:4b:0d:58:02:e7:6d:d3:3e:ec:29:56:c0:
                    57:ad:04:5b:d4:79:24:17:1f:4f:7b:6b:7d:bd:92:
                    41:71:78:1e:e4:f5:c0:07:4d:10:56:41:e6:cf:df:
                    78:7b:65:52:59:39:cb:87:34:56:1a:1f:50:de:50:
                    25:ce:c8:2f:05:74:05:22:f5:fc:23:29:a8:7b:22:
                    94:d7:1f:76:e1:27:0b:e3:31:c2:49:db:6a:72:72:
                    7c:9a:32:0d:3e:f2:a8:27:f3:23:10:7e:dd:e7:4b:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:34:A5:F0:5E:DC:CD:B7:7E:A1:56:03:1B:94:69:0C:94:F3:14
            X509v3 Authority Key Identifier:
                keyid:E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3132382e302f32322d3232203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:67:64:00:a3:2d:2d:3a:c9:e5:59:f2:6a:3c:00:88:fa:68:
         12:f0:6b:fe:eb:32:7d:9c:cd:51:f3:a3:89:61:e3:fe:46:c7:
         39:87:b8:e3:44:f6:9c:a6:1d:1e:80:da:48:bb:30:22:5d:2f:
         bd:27:e8:f3:2c:8c:fe:f0:5b:37:67:7a:ee:e0:e6:0a:44:79:
         cd:14:cd:ac:bf:85:c9:3c:40:dc:0d:e2:e9:9c:86:30:bf:cc:
         47:3f:5c:b5:cc:99:59:2a:07:1d:e4:34:d1:b5:03:74:af:d4:
         d4:f3:ff:94:c1:c9:18:8f:dd:06:3d:ec:a7:3e:23:cd:a7:c8:
         a7:13:e8:dd:a6:93:24:25:b2:2d:23:3e:32:5f:50:8c:26:d1:
         b0:f0:9b:23:56:97:c8:32:4f:7b:2f:2a:b8:25:47:81:8f:df:
         b9:2e:20:84:29:92:d9:0b:14:84:da:c0:85:22:ea:6d:4f:57:
         04:be:37:3d:92:e0:68:cb:97:59:f1:b1:98:a6:80:fe:1c:0e:
         1c:fc:69:9d:83:33:f1:5b:2c:d7:f1:fe:72:dd:57:74:67:1e:
         d2:7b:30:6e:c4:c8:a8:fa:80:7c:da:de:4e:46:95:9e:9a:94:
         da:c9:6e:e1:75:40:8f:3c:ff:f7:85:74:39:fc:de:6b:10:b7:
         63:f1:5e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org