Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3133302e302f32342d3234203d3e20323730373131.roa
File:                     3138392e3132372e3133302e302f32342d3234203d3e20323730373131.roa (raw, json)
Hash identifier:          5aAUAdsl3BO3RnbxemRwXU4EIZTwcLvxNTpdQOQ2ggs=
Subject key identifier:   11:2C:BB:3A:45:3E:89:A8:B2:D6:70:C8:C8:4F:5E:B2:12:42:CB:83
Certificate issuer:       /CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
Certificate serial:       6038087437DB6B3899C14F3B35AB589EC3D2E871
Authority key identifier: E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3133302e302f32342d3234203d3e20323730373131.roa
Signing time:             Thu 04 Apr 2024 12:08:34 +0000
ROA not before:           Thu 04 Apr 2024 12:03:34 +0000
ROA not after:            Thu 03 Apr 2025 12:08:34 +0000
asID:                     270711
IP address blocks:        189.127.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:38:08:74:37:db:6b:38:99:c1:4f:3b:35:ab:58:9e:c3:d2:e8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
        Validity
            Not Before: Apr  4 12:03:34 2024 GMT
            Not After : Apr  3 12:08:34 2025 GMT
        Subject: CN=112CBB3A453E89A8B2D670C8C84F5EB21242CB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:27:88:52:0b:fa:80:b1:c2:a0:32:b5:ad:
                    25:dc:ed:07:79:48:b9:a1:34:00:2a:21:6e:32:c8:
                    48:29:ff:8d:19:f7:ef:58:04:48:90:ab:aa:ea:0d:
                    68:7f:ff:7b:7d:3b:75:22:3f:7e:c9:47:8a:42:fd:
                    b4:78:c2:82:89:14:43:b4:f4:5b:83:82:36:f6:c3:
                    d9:15:c3:50:24:83:5e:aa:c5:9a:21:66:af:aa:d8:
                    31:88:6c:25:ec:b1:d9:6d:6a:5e:42:f3:85:77:81:
                    6c:1f:49:6b:ba:12:56:24:99:2d:9c:73:d7:86:58:
                    85:3c:0e:be:d3:32:cc:1a:f5:06:7d:f1:ef:9e:24:
                    ea:13:11:f8:8d:f2:f9:38:0f:14:73:69:3d:ee:12:
                    31:a9:d2:ac:0d:ee:63:60:13:67:4f:28:b0:10:ad:
                    ef:46:93:c4:56:52:64:30:f8:61:19:f6:8d:4b:5d:
                    44:b7:71:22:3d:d9:c2:e0:ff:46:e1:fa:a2:68:57:
                    13:ea:5e:3f:10:ca:b5:ad:f2:09:e2:29:56:74:60:
                    3e:6f:ed:d9:67:50:ff:d1:fa:8b:6b:fd:3d:82:77:
                    7e:6f:42:09:3f:ba:55:79:3d:70:0a:af:bf:18:6f:
                    50:e6:78:cb:80:28:81:7b:b5:84:fd:cf:2a:f4:a0:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2C:BB:3A:45:3E:89:A8:B2:D6:70:C8:C8:4F:5E:B2:12:42:CB:83
            X509v3 Authority Key Identifier:
                keyid:E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3133302e302f32342d3234203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:ae:1e:95:a9:e9:93:ae:25:6e:49:2e:58:a8:da:a6:4d:
         af:a2:d7:79:1e:a7:d7:02:31:61:80:8e:67:b1:e9:1d:74:bb:
         1f:82:77:37:53:4e:6b:87:a1:8b:f4:b0:2d:e8:98:21:b3:00:
         43:a1:30:41:49:3a:a5:7a:9c:64:45:83:09:04:8a:c9:ab:d9:
         84:76:13:d3:42:a5:08:f8:3b:28:f2:50:66:6b:05:61:94:45:
         5b:08:55:3f:4d:75:18:4e:41:ba:79:77:36:55:25:d3:22:e2:
         64:6b:82:a7:dd:a3:c3:07:d1:06:e9:18:9c:9d:09:68:d0:c6:
         14:86:a7:4c:11:8b:20:d3:c3:71:c2:c9:8a:e8:9e:9e:8f:b2:
         d2:8c:33:b1:4f:e8:3e:41:df:5c:a7:ca:62:89:7a:55:1b:fa:
         57:11:0b:e7:f5:01:00:aa:2d:71:8e:99:33:ac:1a:25:48:ae:
         60:01:54:04:01:45:17:72:fa:35:bd:bb:54:32:2c:f6:c1:77:
         44:48:21:41:e4:a2:f2:af:39:20:c4:c1:08:55:85:70:1b:47:
         09:64:6d:ac:71:0f:e7:b5:1c:e0:d5:90:49:30:a8:c3:21:56:
         7b:49:19:be:4c:8f:e5:75:3e:9d:b4:f2:22:11:2a:92:5f:67:
         88:70:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org