Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130392e302f32342d3234203d3e20323730353533.roa
File:                     3138392e38352e3130392e302f32342d3234203d3e20323730353533.roa (raw, json)
Hash identifier:          USnok/QCYm8YhFk4aTjxBNUCCZNGUQmXDaN30ZLZUuo=
Subject key identifier:   F0:90:72:DA:71:0C:55:37:6A:6F:07:24:8E:3E:09:65:40:86:A6:1D
Certificate issuer:       /CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
Certificate serial:       11B86B2B0794DF13F93434B615C3D0DA3E857B71
Authority key identifier: 15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130392e302f32342d3234203d3e20323730353533.roa
Signing time:             Tue 11 Jul 2023 14:54:02 +0000
ROA not before:           Tue 11 Jul 2023 14:49:02 +0000
ROA not after:            Tue 09 Jul 2024 14:54:02 +0000
asID:                     270553
IP address blocks:        189.85.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b8:6b:2b:07:94:df:13:f9:34:34:b6:15:c3:d0:da:3e:85:7b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
        Validity
            Not Before: Jul 11 14:49:02 2023 GMT
            Not After : Jul  9 14:54:02 2024 GMT
        Subject: CN=F09072DA710C55376A6F07248E3E09654086A61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:dc:80:e6:7f:74:39:e0:a4:72:22:06:aa:
                    b5:87:9e:26:35:7d:03:2d:f9:73:d0:38:7f:40:f9:
                    87:3d:69:64:f0:f3:88:e5:2b:9a:e9:d5:58:5e:1c:
                    9b:ab:f1:b8:ba:17:0c:b5:0a:99:9b:2c:11:a5:60:
                    e7:1a:d0:75:3f:ec:d5:63:6b:a7:96:bd:62:43:f2:
                    bd:01:17:d7:f7:41:a1:d5:01:61:5f:ab:b1:37:d8:
                    6b:b1:30:e8:73:c4:87:7c:50:2c:76:c3:26:46:6c:
                    cf:86:e2:63:68:89:93:4b:e0:0c:fc:ea:cf:69:fb:
                    00:58:c4:2d:0b:22:59:05:38:89:12:eb:fe:2f:28:
                    56:51:e3:a4:8c:0e:53:22:5d:d6:80:e5:e4:3a:66:
                    db:20:f3:fb:7d:3b:51:11:e3:06:1c:ae:2c:39:2b:
                    ae:92:03:e8:b0:f1:85:17:39:57:b3:96:72:b3:05:
                    5b:7e:de:c2:ce:65:84:8b:06:0d:04:03:5c:d2:7d:
                    e3:f6:b1:37:dc:c6:3b:f8:e1:3c:a6:41:3b:81:35:
                    24:5e:8a:03:c7:20:d0:c8:3f:90:97:51:d2:7f:cb:
                    f9:df:3e:9a:45:8a:79:95:6f:46:44:d1:e9:1e:1c:
                    8d:f5:4f:60:5f:5b:bc:d1:49:90:24:ec:77:81:33:
                    74:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:90:72:DA:71:0C:55:37:6A:6F:07:24:8E:3E:09:65:40:86:A6:1D
            X509v3 Authority Key Identifier:
                keyid:15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3130392e302f32342d3234203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:32:2b:7a:bd:70:6d:51:f3:78:13:41:d8:75:7b:90:b7:2e:
         f5:15:b5:4d:84:25:9f:49:95:59:70:d7:40:4e:d9:15:67:6b:
         53:ae:15:69:f9:84:02:fb:17:f7:3a:49:3a:49:8d:3e:71:dd:
         5c:b6:32:f8:d5:3f:5b:9f:24:23:e6:96:58:7f:94:ef:85:a6:
         e0:f7:59:fa:6d:00:fa:ca:28:bf:fd:7e:50:2c:8f:a8:c7:4f:
         67:f3:20:1a:1f:46:90:57:a8:b1:c4:75:41:1e:5c:d6:20:1d:
         b6:6f:aa:16:e9:4d:b1:6b:a3:7a:08:b3:5e:df:b6:4e:01:ee:
         fd:88:a9:ac:49:ca:41:2f:dd:3e:67:0b:f9:cc:b3:0f:39:a1:
         4e:2b:07:1e:aa:9b:3e:36:6e:05:68:02:96:34:1b:39:53:a7:
         7a:da:8a:53:23:66:5c:1c:fe:d1:73:6f:6a:df:ae:19:5c:ec:
         c5:d4:16:03:99:17:81:e7:15:30:b8:a2:95:a8:f7:bd:0d:2a:
         5b:29:37:74:50:fa:de:b2:a7:8e:cb:2d:b7:59:5b:79:65:dd:
         e6:5a:83:79:5a:dd:ac:9e:0b:d0:86:cf:d3:62:8a:20:81:be:
         78:f8:d4:0c:15:d2:38:5d:6e:6b:f1:88:e5:e3:76:0e:53:6e:
         90:90:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org