Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38382e302f32312d3231203d3e203238323737.roa
File:                     3138392e31342e38382e302f32312d3231203d3e203238323737.roa (raw, json)
Hash identifier:          9nzLWlXPJbImuzgYDbsf6JlDfo4X16riazhvNMwQyuM=
Subject key identifier:   7F:73:D6:4C:4C:5C:27:0A:C6:93:09:96:07:0D:C1:A3:C8:20:91:BE
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       23BA18CDA4F9AEEA0738D25BA6A4561A712F6C9F
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38382e302f32312d3231203d3e203238323737.roa
Signing time:             Fri 02 Sep 2022 14:00:00 +0000
ROA not before:           Fri 02 Sep 2022 13:55:00 +0000
ROA not after:            Sat 02 Sep 2023 14:00:00 +0000
asID:                     28277
IP address blocks:        189.14.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ba:18:cd:a4:f9:ae:ea:07:38:d2:5b:a6:a4:56:1a:71:2f:6c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Sep  2 13:55:00 2022 GMT
            Not After : Sep  2 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:de:bc:a9:eb:15:95:ba:b6:e8:16:da:cf:97:
                    11:8e:e7:13:bc:1c:f3:34:6d:7a:ce:69:07:94:0a:
                    c3:e8:2a:d5:99:a1:14:92:11:65:e7:5c:94:66:7b:
                    01:9d:eb:86:ec:c0:84:f7:a8:6e:8d:1a:91:a8:d9:
                    96:bf:1b:81:d5:b5:69:47:6f:95:94:a6:36:6c:c6:
                    85:b0:d1:8f:e1:ba:3b:13:28:c5:4d:97:9e:54:6a:
                    e5:b1:01:3c:99:62:49:ea:aa:84:9c:b9:55:b8:4e:
                    c5:61:89:c0:bf:ef:a9:90:17:4f:be:db:37:0d:10:
                    c1:83:f8:62:e6:79:86:34:31:a7:05:96:28:db:98:
                    45:68:fc:ea:10:10:3e:7a:e2:d7:78:f0:67:e4:32:
                    23:25:76:f9:a0:08:85:85:ea:ba:c1:7a:d0:26:7c:
                    c3:90:5d:57:e7:09:83:a7:ed:df:b1:38:af:f1:8f:
                    5c:87:4b:00:eb:9b:51:bb:3a:6f:e0:52:ab:d6:2b:
                    e5:b0:52:1b:2c:02:ed:fc:a6:77:e5:2b:1a:44:82:
                    97:a8:8b:ec:6d:ee:01:94:d5:6e:c7:31:cc:82:54:
                    fb:02:14:e4:8a:43:6b:b6:f1:35:1c:0f:9f:54:cd:
                    f4:5c:99:1a:08:f4:60:74:51:ef:75:90:13:8d:e5:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:73:D6:4C:4C:5C:27:0A:C6:93:09:96:07:0D:C1:A3:C8:20:91:BE
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38382e302f32312d3231203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:ee:7f:a2:15:73:e3:46:a3:4d:0c:be:13:2c:5b:82:89:bd:
         8d:81:ab:0e:72:80:f4:67:f0:59:d7:73:6c:e6:9f:da:34:2c:
         45:cb:c3:24:58:13:85:17:3f:f3:a5:dc:83:32:13:b9:7d:6d:
         1c:7e:34:a8:f5:d9:aa:7b:da:8e:8e:e2:15:ba:b2:bc:54:61:
         cb:46:12:54:b5:61:55:cf:e9:5f:8b:ac:dd:b2:79:5b:05:1f:
         32:d3:9b:7a:05:19:ad:89:1b:3a:0f:d1:46:ee:3e:81:74:20:
         56:55:45:c7:93:a2:0b:a9:55:df:cb:9b:45:af:f0:a2:a3:b5:
         ca:be:d5:96:08:65:b2:0a:79:cd:94:38:fd:66:65:3d:64:db:
         1c:19:f7:16:21:8e:93:a4:c2:23:82:d8:57:41:6b:32:52:89:
         0a:35:c9:97:95:93:eb:4a:42:78:75:cd:4e:d7:de:d5:bd:ab:
         c8:b6:76:a5:70:e0:fe:df:a4:85:58:fa:d5:34:29:4c:3d:59:
         9b:f8:e4:15:eb:8f:f4:fd:c6:32:66:be:90:1e:8b:04:8a:e7:
         3d:48:17:fc:d4:79:91:62:bb:79:b1:59:e5:7a:dd:26:d3:9d:
         8c:5d:73:e3:c5:7b:11:ed:24:61:cc:a6:1f:08:a7:6a:b3:40:
         1a:02:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org