Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa
File:                     3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa (raw, json)
Hash identifier:          /zn4LtmN4w3Ji+Rai8O6p4MnqPNXODGpuaga+D/HWfY=
Subject key identifier:   25:0F:46:8C:A9:74:BE:8C:03:4B:6A:D2:E2:D4:DA:A7:BB:C8:85:0E
Certificate issuer:       /CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
Certificate serial:       5726A9E530FC8D81C1A8C6ABB4887DD5D087ECC6
Authority key identifier: E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa
Signing time:             Thu 04 Apr 2024 12:08:34 +0000
ROA not before:           Thu 04 Apr 2024 12:03:34 +0000
ROA not after:            Thu 03 Apr 2025 12:08:34 +0000
asID:                     270711
IP address blocks:        189.127.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:26:a9:e5:30:fc:8d:81:c1:a8:c6:ab:b4:88:7d:d5:d0:87:ec:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
        Validity
            Not Before: Apr  4 12:03:34 2024 GMT
            Not After : Apr  3 12:08:34 2025 GMT
        Subject: CN=250F468CA974BE8C034B6AD2E2D4DAA7BBC8850E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fb:f4:4e:38:13:05:3f:da:df:9b:8b:75:5f:
                    62:62:58:8e:4b:20:7f:66:0b:90:7b:7d:6b:38:b1:
                    f9:a9:6b:21:56:05:3b:4b:7d:b2:ca:ae:74:55:bd:
                    16:53:2f:17:84:72:ce:06:82:68:38:11:9b:69:c1:
                    b1:a2:e6:5a:f7:36:ae:a0:f9:a8:1c:26:41:bf:3e:
                    10:67:b0:b4:ae:f6:4c:83:0f:8c:64:21:ea:0f:e5:
                    aa:cb:f4:06:5e:57:23:c9:dd:17:c8:56:8d:05:bd:
                    8b:02:cd:ed:ca:4e:c2:c5:86:ef:a6:88:e3:84:ee:
                    2a:3f:fa:70:1d:4a:f1:28:df:c5:c7:76:ff:b0:e0:
                    56:c3:a1:7c:08:d7:b5:87:3e:7b:4b:b0:a1:13:2d:
                    96:d8:78:0d:04:13:4f:c6:99:e8:38:14:dc:7e:09:
                    c3:99:cf:cb:98:9b:44:45:41:48:9e:32:7c:96:fe:
                    e4:26:5c:a9:57:44:96:2b:38:33:3c:88:b5:10:c2:
                    95:7c:d7:9d:de:95:3b:35:b2:96:0d:ec:14:48:54:
                    8b:d9:37:18:6d:7e:72:53:06:8e:52:13:79:1c:00:
                    25:25:7a:8b:91:3c:a2:b5:7a:f1:a4:f9:6e:c6:04:
                    56:6b:e0:d7:3a:21:0e:65:5f:4b:f9:2f:8a:b2:06:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0F:46:8C:A9:74:BE:8C:03:4B:6A:D2:E2:D4:DA:A7:BB:C8:85:0E
            X509v3 Authority Key Identifier:
                keyid:E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:5c:cf:9f:ef:af:dd:4d:c3:7d:1d:ff:a9:82:cc:9e:bf:
         50:0e:c4:40:08:f3:41:b2:88:fe:87:9c:e7:78:40:56:6f:e4:
         e7:b6:15:05:db:6d:d4:64:e9:da:51:66:e0:d9:b5:16:8c:00:
         00:04:12:ae:c7:bb:a3:32:b5:4e:75:56:9c:2e:d9:17:e3:54:
         e1:25:c3:39:1b:1c:21:cc:a9:c8:f5:59:4c:a3:80:cb:4a:56:
         1a:d7:be:d3:23:ac:32:07:bc:9b:11:f9:0a:20:cc:5d:ba:d3:
         73:c3:d1:79:4f:96:f3:21:51:69:e3:a6:0f:ae:a3:ee:1e:06:
         43:25:68:fc:8a:71:50:be:38:7b:d2:40:13:01:31:53:d3:8f:
         b2:95:a1:2a:8d:31:fe:23:e3:45:fa:40:68:81:e2:f2:89:24:
         69:24:b8:b3:35:d1:27:9d:a8:9c:13:4e:8f:cf:07:ca:44:fc:
         e5:89:5e:77:7d:b0:db:26:f9:20:00:2d:d4:52:4f:41:c9:9e:
         25:55:a4:86:94:25:10:73:da:d0:5c:f8:25:50:56:9e:1a:e5:
         12:3a:26:eb:2f:f4:f6:62:de:5c:97:8a:c8:9d:3e:72:8a:cd:
         94:be:70:00:0f:68:e0:e8:5e:2c:d9:22:50:16:ad:61:77:ef:
         8e:8b:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org