Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3133312e302f32342d3234203d3e20323730373131.roa
File:                     3138392e3132372e3133312e302f32342d3234203d3e20323730373131.roa (raw, json)
Hash identifier:          o3MfZLiXfm6RqNu0uRiTHE0TE/21B13GAlHhOld1NXQ=
Subject key identifier:   4E:77:82:09:F3:97:D2:63:70:BD:0E:02:E0:95:E3:84:D7:D7:83:67
Certificate issuer:       /CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
Certificate serial:       7D35179F8EF0C882C264E6CC4205CE957722E791
Authority key identifier: E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3133312e302f32342d3234203d3e20323730373131.roa
Signing time:             Thu 04 Apr 2024 12:08:35 +0000
ROA not before:           Thu 04 Apr 2024 12:03:35 +0000
ROA not after:            Thu 03 Apr 2025 12:08:35 +0000
asID:                     270711
IP address blocks:        189.127.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:35:17:9f:8e:f0:c8:82:c2:64:e6:cc:42:05:ce:95:77:22:e7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
        Validity
            Not Before: Apr  4 12:03:35 2024 GMT
            Not After : Apr  3 12:08:35 2025 GMT
        Subject: CN=4E778209F397D26370BD0E02E095E384D7D78367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:f9:db:d6:85:2e:a2:a7:de:e1:4a:3b:bb:
                    95:e2:43:ca:5a:0d:77:bb:93:9a:7e:7f:e0:fb:16:
                    2c:86:97:89:c6:b7:4f:72:30:be:06:0c:52:7c:98:
                    33:56:f4:32:86:13:de:ca:8f:b1:74:03:28:dd:8f:
                    d2:57:39:83:ed:02:9f:aa:2f:8d:53:e8:19:e2:66:
                    0c:5f:33:dc:c3:c2:19:95:b2:ca:0f:78:e8:9f:15:
                    e5:01:a1:24:22:41:ab:df:b4:67:1e:2a:47:c9:66:
                    d0:c6:3f:5d:c9:42:73:88:b1:16:ed:e0:d5:57:52:
                    58:9c:36:6d:4b:e9:78:e7:f3:6c:71:5e:d3:66:eb:
                    cc:12:a1:31:51:48:a4:af:e0:c7:ac:95:1b:25:cd:
                    b6:d4:68:ec:f1:f8:82:70:ca:e2:5a:8c:79:65:cc:
                    aa:17:5a:81:95:5a:4b:73:3a:6c:29:73:15:19:7e:
                    74:62:1e:c5:3d:e9:2e:5e:41:78:61:eb:2e:75:19:
                    50:46:6b:12:44:8a:a5:1e:9f:dc:e8:fe:91:24:9f:
                    15:67:95:3e:5a:1b:5c:f0:40:09:10:59:a5:02:d8:
                    40:db:5c:36:2b:66:8d:09:97:ac:04:9a:45:d3:d1:
                    81:1e:dc:ed:08:13:c3:19:3b:1d:4b:7d:bf:49:35:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:77:82:09:F3:97:D2:63:70:BD:0E:02:E0:95:E3:84:D7:D7:83:67
            X509v3 Authority Key Identifier:
                keyid:E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/3138392e3132372e3133312e302f32342d3234203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:3d:0a:82:5b:55:2b:fa:9e:b4:c9:0c:21:2d:c0:4f:84:4a:
         12:70:61:2d:31:52:a5:45:ea:31:fa:61:1f:76:81:26:79:0d:
         6a:90:99:1e:e2:e8:7b:7a:9b:2e:c2:9e:68:d6:9f:27:a0:1a:
         1c:8b:28:0f:a8:94:db:23:b5:b5:af:8b:26:c6:e0:e0:39:0b:
         4e:b4:e8:d5:39:1e:d4:06:62:2e:fd:27:5f:1e:04:3a:de:4f:
         86:09:85:44:eb:7e:14:a1:70:d4:f5:ad:f0:80:68:2e:46:cb:
         b7:da:74:c8:5d:d5:fa:42:ae:c5:b3:fa:29:c0:49:04:50:38:
         c5:a9:e8:6e:0d:55:61:bc:9f:3c:a7:73:bc:5b:f6:f6:db:72:
         5f:9a:da:29:aa:6d:59:f9:c2:3c:a0:f6:1a:1f:e0:73:bd:10:
         3f:76:a2:20:12:b0:3b:d7:c7:69:60:14:ea:52:75:78:59:71:
         0a:00:9d:49:a4:78:fd:1b:60:cb:eb:73:50:5a:0e:b7:e2:2b:
         59:79:ee:bf:22:23:b2:26:b7:88:16:1b:6f:75:5e:aa:5f:41:
         c7:26:9d:ce:2d:d0:eb:29:bc:6d:97:db:d1:69:cc:91:c3:ee:
         9c:4d:fb:5f:8f:b2:ec:de:b4:30:e4:72:2e:35:e1:ad:0a:7a:
         8a:0a:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org