Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa
File:                     3138392e38342e35382e302f32332d3233203d3e20323731373030.roa (raw, json)
Hash identifier:          efDOcjSrVtWPpsYo6Btt+8OD2X59ew4qwNO3AuwoZ4M=
Subject key identifier:   E2:74:8A:9D:9C:AD:8C:2F:DE:12:C9:D9:BD:3D:17:89:EA:6A:35:29
Certificate issuer:       /CN=02811F12265DC9D5B80E3494D63AD83585B896B3
Certificate serial:       2F979599E4228AED441AC85A31369C1B99F3671D
Authority key identifier: 02:81:1F:12:26:5D:C9:D5:B8:0E:34:94:D6:3A:D8:35:85:B8:96:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02811F12265DC9D5B80E3494D63AD83585B896B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa
Signing time:             Fri 01 Mar 2024 20:19:19 +0000
ROA not before:           Fri 01 Mar 2024 20:14:19 +0000
ROA not after:            Fri 28 Feb 2025 20:19:19 +0000
asID:                     271700
IP address blocks:        189.84.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:97:95:99:e4:22:8a:ed:44:1a:c8:5a:31:36:9c:1b:99:f3:67:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02811F12265DC9D5B80E3494D63AD83585B896B3
        Validity
            Not Before: Mar  1 20:14:19 2024 GMT
            Not After : Feb 28 20:19:19 2025 GMT
        Subject: CN=E2748A9D9CAD8C2FDE12C9D9BD3D1789EA6A3529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:65:a2:0c:29:65:ed:34:9b:be:96:cf:e6:
                    bd:e1:59:b8:f7:e8:60:d6:58:e5:a8:3d:bf:4a:3b:
                    6f:10:ad:fd:19:76:97:c6:43:8e:f5:3a:a9:fa:26:
                    9e:67:05:30:87:19:92:b2:a1:84:68:a9:f8:0f:d6:
                    8a:6c:36:ea:fa:d2:fc:41:4d:6e:b5:04:e0:0a:44:
                    26:45:d0:31:77:f5:d4:85:f8:c4:53:f3:f3:21:9b:
                    4d:d2:bf:78:98:ee:59:0b:45:55:04:b3:ed:2a:b3:
                    9f:a3:a7:9c:f0:8a:87:72:53:cd:71:47:93:88:67:
                    58:d1:b7:c0:3f:ca:8c:65:23:d9:1f:5b:dc:ad:c8:
                    11:93:e3:b0:fe:e0:b8:e1:80:0e:d0:97:21:5c:94:
                    1b:34:1f:24:f0:d2:f1:73:b1:f5:d0:d4:c3:c1:41:
                    50:d7:5e:c6:47:27:25:26:be:f0:50:bf:af:9a:0f:
                    87:84:5a:80:a2:ca:36:28:dd:4a:6a:f3:dd:28:e9:
                    6c:3d:1d:87:f0:00:c9:f5:c4:c7:0d:62:48:f4:cf:
                    84:47:a9:ea:88:83:5c:69:4b:fd:6c:0d:ea:2a:fa:
                    70:79:8a:02:fe:aa:b6:00:dc:3a:04:42:30:f3:2e:
                    e6:8b:a0:e9:73:cb:f5:4c:c5:a1:27:a6:33:a6:36:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:8A:9D:9C:AD:8C:2F:DE:12:C9:D9:BD:3D:17:89:EA:6A:35:29
            X509v3 Authority Key Identifier:
                keyid:02:81:1F:12:26:5D:C9:D5:B8:0E:34:94:D6:3A:D8:35:85:B8:96:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/02811F12265DC9D5B80E3494D63AD83585B896B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02811F12265DC9D5B80E3494D63AD83585B896B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:ce:ef:d0:ed:35:a5:ba:28:cb:b2:58:eb:72:74:6c:b5:11:
         7b:74:ad:83:a9:82:f4:fa:7d:c4:2e:eb:2f:2f:72:02:9e:56:
         47:fe:e7:67:7e:f9:c3:12:73:b3:35:01:7b:fd:19:5f:7a:b6:
         dd:ae:c7:dc:b8:eb:b2:44:1a:36:cf:db:6e:ee:4f:8c:28:41:
         9f:60:19:97:90:f4:fa:bb:8e:8c:ea:1b:2a:16:e7:65:33:b3:
         2b:35:ac:c2:e7:e7:2b:25:93:b6:57:56:94:6c:eb:7c:cd:74:
         1d:07:47:04:f2:7f:92:03:c8:78:9e:6f:ee:e6:8d:29:3b:de:
         b3:09:e0:57:da:29:3d:69:2b:42:58:b8:19:78:1b:03:11:c2:
         cf:38:a4:29:f0:d3:b4:57:81:16:57:8b:0b:99:4f:de:ca:73:
         d7:b9:91:6d:f9:5c:9d:cd:88:dd:93:f4:12:3b:d6:f0:fd:fc:
         cc:cb:2b:ba:be:77:8c:d8:f8:de:d7:07:8b:22:1d:a0:85:16:
         85:54:89:3e:0f:90:d1:c4:e4:bc:25:e2:5b:f2:0c:56:1f:81:
         eb:49:9b:58:a2:70:ef:65:da:df:64:f0:a0:47:be:4a:81:87:
         de:48:ae:8b:c9:9b:bd:66:8d:9f:54:1d:e0:1f:9f:a1:f4:85:
         d5:87:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org