Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e39352e302f32342d3234203d3e20323632373439.roa
File:                     3138392e38392e39352e302f32342d3234203d3e20323632373439.roa (raw, json)
Hash identifier:          FKvh6qEmVwRqs7dJV9J62h8sc+Krer6NgblYhitxGSE=
Subject key identifier:   2D:24:4A:0F:CE:F7:87:8D:BB:81:6B:90:70:B8:1A:EB:BD:7D:F6:F5
Certificate issuer:       /CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Certificate serial:       3B7979C975C2D53EE321C022983CE5606C6F9525
Authority key identifier: 03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e39352e302f32342d3234203d3e20323632373439.roa
Signing time:             Tue 27 Feb 2024 11:00:18 +0000
ROA not before:           Tue 27 Feb 2024 10:55:18 +0000
ROA not after:            Tue 25 Feb 2025 11:00:18 +0000
asID:                     262749
IP address blocks:        189.89.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:79:79:c9:75:c2:d5:3e:e3:21:c0:22:98:3c:e5:60:6c:6f:95:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
        Validity
            Not Before: Feb 27 10:55:18 2024 GMT
            Not After : Feb 25 11:00:18 2025 GMT
        Subject: CN=2D244A0FCEF7878DBB816B9070B81AEBBD7DF6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:02:0d:08:12:0d:ae:5c:91:02:cf:d6:a9:
                    4b:66:67:66:33:a9:70:d3:f0:9a:2e:a1:26:fb:bf:
                    3a:fc:9b:95:e1:a3:74:5b:2e:b5:d7:8f:2d:f3:c6:
                    60:4a:bf:ec:48:cc:a5:3b:e5:4a:06:0a:e0:75:ea:
                    21:80:c0:32:2b:22:32:da:10:e9:bc:da:65:07:66:
                    88:d0:6c:15:97:f1:5a:d0:74:ed:78:f5:ee:4a:ad:
                    4c:66:ad:c6:92:8f:82:32:d4:c5:d9:f8:10:7a:c2:
                    0d:30:19:90:26:ca:9e:73:b6:08:7c:7c:1c:f9:f8:
                    0f:21:7d:4b:94:e0:29:16:af:82:c6:29:fc:cb:cb:
                    c3:38:ac:5a:40:8b:c3:aa:a0:b5:c9:dc:e1:0a:34:
                    86:8d:b3:42:f5:f8:2d:f7:38:c0:54:14:b0:27:12:
                    30:bc:93:c1:3f:9a:f9:ed:53:9e:6a:8f:50:e7:09:
                    d4:99:fc:8b:be:5e:49:a5:6d:10:ca:26:e4:c4:95:
                    07:45:fa:18:b1:ff:72:37:0f:21:a4:3a:2b:d2:6d:
                    ba:06:fb:4a:ec:6a:26:3c:7e:eb:da:26:ef:24:13:
                    f1:79:af:2f:89:c7:53:66:33:b2:17:a3:fe:6b:a4:
                    de:08:0e:13:2b:83:db:25:99:a1:48:7d:e4:1d:86:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:24:4A:0F:CE:F7:87:8D:BB:81:6B:90:70:B8:1A:EB:BD:7D:F6:F5
            X509v3 Authority Key Identifier:
                keyid:03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e39352e302f32342d3234203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:3f:8c:eb:a3:3a:f0:a7:e6:62:b7:ba:ea:d2:49:92:6a:50:
         6f:80:61:47:80:c1:fd:36:0b:aa:5d:21:56:07:f4:60:db:88:
         77:1a:26:fa:c9:3c:af:cd:05:a0:69:5b:c8:f4:64:34:da:96:
         a2:bb:da:ce:5e:fb:3b:b9:4a:e6:5d:dd:00:5f:96:3c:24:92:
         14:13:0a:41:96:f2:e9:f7:f4:9a:c5:1c:87:ae:24:f4:47:71:
         cf:93:3c:00:82:8e:60:6f:6e:30:a6:a8:b7:38:d6:21:b9:91:
         69:53:12:c3:86:c5:c6:b5:e7:c6:08:79:a6:4d:4f:4a:69:d9:
         35:a3:9e:b6:a5:08:c6:3d:b8:4d:9c:31:a9:e3:10:4a:f3:f0:
         84:f1:f3:2b:08:3f:67:9f:bf:69:b6:90:fb:0e:82:98:2c:d3:
         9a:bd:d6:78:43:f8:d9:15:eb:50:a2:1a:6e:ca:fe:9d:26:bc:
         09:16:19:16:26:b4:4d:95:ab:11:1f:7c:45:b2:f9:d7:13:23:
         14:22:9e:3f:35:24:19:37:5b:0d:69:0f:93:5a:54:fb:9c:df:
         53:d0:9d:d8:6c:de:13:d7:5a:3b:11:b6:8c:81:99:b2:07:fa:
         b9:e4:07:74:6f:8e:d1:47:f0:cd:02:9d:b2:08:68:a5:fd:8b:
         d6:72:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org