Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3132392e302f32342d3234203d3e20323730373131.roa
File:                     3138392e3132372e3132392e302f32342d3234203d3e20323730373131.roa (raw, json)
Hash identifier:          pb/vbLKksCduDdiEX5Y1RlzAhvVjab/J6vNQXRRVBm4=
Subject key identifier:   1E:0F:BD:09:6A:56:FF:B5:0D:29:67:34:06:1D:5F:28:3B:81:39:8D
Certificate issuer:       /CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
Certificate serial:       67B09FE5D4694F2F3934CE6706F827281E870966
Authority key identifier: E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3132392e302f32342d3234203d3e20323730373131.roa
Signing time:             Thu 04 Apr 2024 12:08:34 +0000
ROA not before:           Thu 04 Apr 2024 12:03:34 +0000
ROA not after:            Thu 03 Apr 2025 12:08:34 +0000
asID:                     270711
IP address blocks:        189.127.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b0:9f:e5:d4:69:4f:2f:39:34:ce:67:06:f8:27:28:1e:87:09:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
        Validity
            Not Before: Apr  4 12:03:34 2024 GMT
            Not After : Apr  3 12:08:34 2025 GMT
        Subject: CN=1E0FBD096A56FFB50D296734061D5F283B81398D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:44:48:03:47:48:a8:2a:c2:2d:9b:fd:dd:f9:
                    35:de:ab:1a:9a:65:e2:23:c6:05:10:d8:0e:49:19:
                    2b:e9:45:42:85:53:c6:84:36:17:c9:5d:da:eb:13:
                    42:a3:88:08:09:c5:da:c1:0c:01:b6:5f:f7:62:4d:
                    be:b1:04:47:c2:d8:c1:c8:d9:36:57:f3:d0:62:53:
                    c7:12:f0:66:83:8c:ef:55:02:1d:c0:b9:7b:b5:54:
                    7e:2a:67:9e:fb:79:7f:83:f1:75:b7:68:b9:34:0d:
                    6c:35:75:f3:30:a0:4a:3a:78:48:ed:18:69:75:1f:
                    f9:53:fa:1b:cd:aa:8f:9b:59:a3:8b:f8:3d:46:11:
                    de:98:35:07:ff:d5:1b:f4:17:a4:32:b8:50:cd:3e:
                    9a:39:94:d4:b5:39:34:d4:86:44:27:2e:4d:c3:54:
                    43:97:1d:7d:9d:9d:dc:24:5e:99:4b:88:c5:88:12:
                    d3:c8:ad:0f:38:84:12:52:43:e4:39:22:c3:7d:e2:
                    38:92:c3:bd:5f:d8:70:56:e0:fe:0c:96:ea:ea:40:
                    e2:1c:dd:99:96:2f:9c:fa:f4:b9:50:8c:5d:85:8f:
                    0a:d4:d1:cc:92:5d:c9:96:46:45:20:ce:af:dc:2d:
                    04:a7:13:5f:6d:43:2d:3a:34:21:56:88:5a:88:d1:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0F:BD:09:6A:56:FF:B5:0D:29:67:34:06:1D:5F:28:3B:81:39:8D
            X509v3 Authority Key Identifier:
                keyid:E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3132392e302f32342d3234203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ba:07:bf:6b:0d:d4:ae:67:b1:90:b7:50:bb:04:fc:ae:c9:
         4f:54:fa:ac:b7:0c:ae:30:33:65:35:df:d9:79:37:a5:dd:3c:
         20:20:e7:07:6b:02:40:a5:21:27:ea:74:f8:85:2d:df:b7:3c:
         69:e1:80:5e:d9:8c:01:ab:54:5a:f6:ac:23:48:8b:10:cf:a3:
         f7:dc:65:a3:60:90:f0:37:10:53:02:cb:d4:4e:a2:f9:b2:ef:
         e0:8e:59:17:c7:46:6d:5f:df:c6:4b:eb:fb:1f:86:e9:c1:69:
         9a:38:32:aa:7b:76:29:3a:9c:21:84:59:31:3e:93:c3:f7:f1:
         9e:5f:43:a8:6f:39:f1:00:fa:2b:2e:f4:b1:14:23:30:04:95:
         d5:22:7b:cb:95:d2:47:4c:d8:e8:69:2e:13:c5:68:29:97:99:
         e4:89:77:92:4c:f2:63:62:5a:ec:30:27:5f:12:4f:5b:3b:f2:
         a9:3f:5f:48:04:d9:7f:4f:f8:e8:45:a6:f2:40:ab:9d:69:05:
         ca:08:20:45:5b:4e:ca:2e:26:05:81:ed:13:25:8f:91:98:39:
         32:48:71:b2:b8:e6:a6:98:1e:51:32:98:f5:23:94:b0:ac:8c:
         62:a8:09:b6:18:90:49:ed:b8:02:81:fb:f1:e0:a8:13:d6:23:
         7f:cc:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org