Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32322d3232203d3e20323731373030.roa
File:                     3138392e38342e35362e302f32322d3232203d3e20323731373030.roa (raw, json)
Hash identifier:          auqLodEXrcA+zEJ20DAFtgzSSfWBR1tP8/KKrSMtiNg=
Subject key identifier:   CC:F3:D5:A5:8A:C9:23:14:14:69:3A:9C:BB:9F:F0:39:52:CA:46:3B
Certificate issuer:       /CN=02811F12265DC9D5B80E3494D63AD83585B896B3
Certificate serial:       1D61C0A94CC55AC389272BDAB3644766F2B754B9
Authority key identifier: 02:81:1F:12:26:5D:C9:D5:B8:0E:34:94:D6:3A:D8:35:85:B8:96:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02811F12265DC9D5B80E3494D63AD83585B896B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32322d3232203d3e20323731373030.roa
Signing time:             Fri 01 Mar 2024 20:19:14 +0000
ROA not before:           Fri 01 Mar 2024 20:14:14 +0000
ROA not after:            Fri 28 Feb 2025 20:19:14 +0000
asID:                     271700
IP address blocks:        189.84.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:61:c0:a9:4c:c5:5a:c3:89:27:2b:da:b3:64:47:66:f2:b7:54:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02811F12265DC9D5B80E3494D63AD83585B896B3
        Validity
            Not Before: Mar  1 20:14:14 2024 GMT
            Not After : Feb 28 20:19:14 2025 GMT
        Subject: CN=CCF3D5A58AC9231414693A9CBB9FF03952CA463B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:cc:3d:a7:b0:2f:c2:09:5b:32:5f:a0:e0:
                    22:62:2f:ff:fd:23:35:bb:49:85:03:ea:a2:f5:c9:
                    7b:d3:15:65:92:48:74:60:3e:93:fb:f9:c5:3c:26:
                    8a:f3:c4:b2:b3:b5:9f:ed:a9:d2:3c:98:f4:a9:b9:
                    e2:ec:b1:d6:73:d5:6e:2c:a1:93:ce:4f:65:30:e2:
                    5e:fc:1c:eb:13:ec:7d:44:74:90:c8:dd:69:fb:29:
                    2c:99:f4:59:9f:a2:b0:5a:fd:d9:f8:f6:44:cc:4e:
                    d8:38:05:28:6b:5d:cc:98:cb:0e:ae:2d:67:58:83:
                    f5:0e:75:d0:1c:6d:a6:9c:62:e6:62:c9:62:fe:cc:
                    8c:47:58:aa:b4:a0:ef:70:7a:46:dd:48:38:84:c4:
                    15:b4:1e:be:21:57:d3:d9:7b:20:3d:94:16:19:af:
                    4d:a7:7e:12:46:70:6f:80:ae:cb:b4:31:85:33:d4:
                    4e:be:29:4a:ba:a8:9e:3b:fa:0a:7b:ca:6e:86:b3:
                    6a:41:44:0a:7f:8e:58:9b:12:1d:5f:8b:99:33:e6:
                    27:d2:cf:07:f6:83:82:d2:a6:bf:32:cd:33:f3:b0:
                    57:da:1b:67:e0:73:ce:ab:e7:11:15:f4:1a:61:79:
                    e7:b5:45:f2:e2:5f:73:50:1c:ef:3e:d5:18:c8:0e:
                    49:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F3:D5:A5:8A:C9:23:14:14:69:3A:9C:BB:9F:F0:39:52:CA:46:3B
            X509v3 Authority Key Identifier:
                keyid:02:81:1F:12:26:5D:C9:D5:B8:0E:34:94:D6:3A:D8:35:85:B8:96:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/02811F12265DC9D5B80E3494D63AD83585B896B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02811F12265DC9D5B80E3494D63AD83585B896B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32322d3232203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:da:bb:f8:25:b6:3e:15:e3:42:cd:91:5b:72:18:03:7c:f7:
         6d:fb:16:9b:9c:a1:37:25:af:7c:6a:2b:c1:e0:5d:59:42:d2:
         08:d7:07:db:fc:79:f6:86:24:17:11:13:5b:a7:c6:82:0f:e3:
         8a:34:b5:13:20:54:1c:0a:a2:b2:de:d7:e3:85:dd:f5:54:5f:
         c2:e7:48:00:e6:78:19:23:91:7c:25:0e:d1:68:93:3e:31:59:
         0d:25:a4:00:e8:15:48:61:94:f9:d8:9b:44:d9:0c:e3:0e:14:
         a1:d5:23:52:76:c9:8a:f0:cd:b9:51:f9:2b:d9:27:38:f6:c7:
         f9:30:95:18:17:b2:3e:44:3f:2e:bd:39:9b:4b:c6:62:22:84:
         dc:55:57:6e:0d:5e:ab:7b:1c:36:43:e8:1c:85:fb:05:ce:6c:
         c6:c2:22:2e:2f:1c:44:14:9a:79:b5:fc:04:cd:3e:54:3d:fd:
         3f:08:b2:20:35:1d:77:5f:64:07:b4:3c:4d:34:f7:7a:8d:b8:
         87:6c:3e:8b:64:63:7d:22:54:57:8c:b4:a8:18:a5:f6:58:65:
         51:98:36:4a:ae:cf:7b:05:30:01:4c:14:1f:ff:20:60:c2:5d:
         11:de:07:35:93:0d:9c:d1:4d:0c:32:3d:be:2e:8f:0d:11:d0:
         0a:60:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org