Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa
File:                     3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa (raw, json)
Hash identifier:          GR7/2JxMrTyN6Z79dvWbzM1yTMoafNdV/Th/roxU9g0=
Subject key identifier:   55:B9:28:83:63:8A:A5:6B:A8:E2:27:3F:26:38:7E:C4:94:DE:4C:EB
Certificate issuer:       /CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
Certificate serial:       55E25737CE5EA7F1CECB305505383226629B26BA
Authority key identifier: E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa
Signing time:             Thu 04 Apr 2024 12:08:33 +0000
ROA not before:           Thu 04 Apr 2024 12:03:33 +0000
ROA not after:            Thu 03 Apr 2025 12:08:33 +0000
asID:                     270711
IP address blocks:        189.127.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e2:57:37:ce:5e:a7:f1:ce:cb:30:55:05:38:32:26:62:9b:26:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
        Validity
            Not Before: Apr  4 12:03:33 2024 GMT
            Not After : Apr  3 12:08:33 2025 GMT
        Subject: CN=55B92883638AA56BA8E2273F26387EC494DE4CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:67:1e:bb:c2:67:06:4e:66:18:97:a5:bd:a7:
                    cd:43:2e:30:2d:66:86:2f:81:40:80:4d:1c:d9:31:
                    18:94:98:7d:87:2b:b3:33:08:e6:2e:0c:a7:87:77:
                    9a:7f:38:92:72:2b:76:45:da:1a:46:f6:ca:6a:ec:
                    4b:35:e8:90:41:52:c3:75:a8:a8:39:a6:0c:91:ac:
                    d9:6e:c3:01:d9:f3:36:45:78:4a:83:c5:bc:d3:90:
                    9d:92:4b:9d:b8:f3:cd:90:4b:c9:d8:97:50:54:c9:
                    c2:65:6f:ae:92:aa:2d:90:17:cc:f3:e1:27:3b:34:
                    21:9b:9b:af:b7:df:cb:e7:39:a5:00:51:95:2d:c2:
                    68:4f:c6:7b:79:43:6e:0e:75:a4:4e:81:83:e1:25:
                    3f:ab:76:bc:59:9e:58:23:d8:60:e3:b1:3c:ac:ad:
                    df:5f:cb:e1:1d:42:3d:ca:7f:17:34:de:ab:1d:b2:
                    a3:de:3f:69:e5:6e:9b:e6:e3:75:24:07:00:f9:1c:
                    3a:96:cb:e7:8c:13:55:ea:3c:1f:2e:24:72:6a:fa:
                    58:54:a4:b5:5a:46:8e:52:d4:57:9e:24:e1:43:c3:
                    fc:7c:6b:fb:3c:18:66:f3:a3:ef:cc:6e:06:40:0f:
                    d9:83:4e:d1:7c:1b:b3:87:41:75:88:b3:8b:ed:81:
                    55:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B9:28:83:63:8A:A5:6B:A8:E2:27:3F:26:38:7E:C4:94:DE:4C:EB
            X509v3 Authority Key Identifier:
                keyid:E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:45:41:01:cc:dc:0e:63:48:dc:ca:00:98:70:7a:ae:fb:dd:
         a0:7e:d6:1b:45:28:e1:31:82:82:61:21:b9:f8:a8:ef:ba:60:
         40:33:3e:c7:d2:8d:8a:05:6b:3e:aa:25:ef:4a:a6:b9:c9:f0:
         c4:3d:6c:2b:5e:1c:c2:6a:98:e1:2c:47:c8:ac:43:a6:81:5d:
         64:28:c5:f0:11:3f:e4:8c:29:14:d5:bd:c9:d7:48:36:7f:27:
         aa:c7:13:1a:91:bf:16:de:84:7a:07:2c:fb:95:bf:50:0a:ef:
         a4:e4:d3:0c:15:1b:09:37:94:85:a0:6a:5f:b1:42:91:99:21:
         11:b7:48:96:c2:07:68:48:5e:72:bb:d1:0e:e2:e1:47:e3:8c:
         32:c0:91:0a:10:75:6c:41:8e:33:c3:84:64:4f:b7:cb:df:04:
         35:59:b2:a8:02:2a:be:40:12:09:0e:27:e0:ff:7c:75:a9:19:
         1f:17:b6:b6:64:37:16:af:36:11:45:7c:78:97:01:e5:d7:55:
         44:79:ed:1a:b5:6c:9b:11:bd:7a:96:12:9a:57:85:2a:2c:4f:
         9c:ad:d1:48:29:3c:70:80:52:7e:74:31:ba:fa:ac:7f:30:a7:
         25:bd:1b:31:3e:73:aa:7f:3e:30:a6:c6:e4:fe:4e:7a:ac:d1:
         39:36:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org