Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38382e302f32322d3232203d3e203238323737.roa
File:                     3138392e31342e38382e302f32322d3232203d3e203238323737.roa (raw, json)
Hash identifier:          Qe98FKSJIoWcqZPFRP0mZisNsHFUbuDu1JFTvdUCuog=
Subject key identifier:   B2:A3:8E:D8:1C:2D:5D:F2:40:80:94:3A:D0:28:78:27:1A:EB:A1:3F
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       195B5770A3D9392DCBC7CB2A0D35A8D517B7F597
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38382e302f32322d3232203d3e203238323737.roa
Signing time:             Fri 12 Aug 2022 20:00:01 +0000
ROA not before:           Fri 12 Aug 2022 19:55:01 +0000
ROA not after:            Sat 12 Aug 2023 20:00:01 +0000
asID:                     28277
IP address blocks:        189.14.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5b:57:70:a3:d9:39:2d:cb:c7:cb:2a:0d:35:a8:d5:17:b7:f5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Aug 12 19:55:01 2022 GMT
            Not After : Aug 12 20:00:01 2023 GMT
        Subject: CN=3082010A0282010100C39CABF6E9D551EC3B6A80A84F72AF557F878DB7F4DCEB83A84ED3744F823EC9F2CE21364EF95E85AE7240FCE5A063BA508B09C05D91FB6492CE6C700AEE19AE86FF590EE17483E9056D694789C780B6D5AB141AF210677480CE58A14B89DE6B39D43EDBCC915973D10E89514F7BBEF83D680BE35096A3C9C03AFAB0B5F1541F1A3BCB8D2CF67483B529E2B618E2AAF7E75B940172EB9DBA7B8C5E3EA004F39265FB26963FF10426131675C08C32DFAE0AEEB4918E053423BDC04491FBF26C77D1F32C438B0497830C47F46B600528C1118FF00CA43EE31B4FCBDCBEA7BD4ABC12B17AE1BEEB7B9468A4A4200CA1B7ED34A208B4AB79A9D179741C606D7D03CB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:ab:f6:e9:d5:51:ec:3b:6a:80:a8:4f:72:
                    af:55:7f:87:8d:b7:f4:dc:eb:83:a8:4e:d3:74:4f:
                    82:3e:c9:f2:ce:21:36:4e:f9:5e:85:ae:72:40:fc:
                    e5:a0:63:ba:50:8b:09:c0:5d:91:fb:64:92:ce:6c:
                    70:0a:ee:19:ae:86:ff:59:0e:e1:74:83:e9:05:6d:
                    69:47:89:c7:80:b6:d5:ab:14:1a:f2:10:67:74:80:
                    ce:58:a1:4b:89:de:6b:39:d4:3e:db:cc:91:59:73:
                    d1:0e:89:51:4f:7b:be:f8:3d:68:0b:e3:50:96:a3:
                    c9:c0:3a:fa:b0:b5:f1:54:1f:1a:3b:cb:8d:2c:f6:
                    74:83:b5:29:e2:b6:18:e2:aa:f7:e7:5b:94:01:72:
                    eb:9d:ba:7b:8c:5e:3e:a0:04:f3:92:65:fb:26:96:
                    3f:f1:04:26:13:16:75:c0:8c:32:df:ae:0a:ee:b4:
                    91:8e:05:34:23:bd:c0:44:91:fb:f2:6c:77:d1:f3:
                    2c:43:8b:04:97:83:0c:47:f4:6b:60:05:28:c1:11:
                    8f:f0:0c:a4:3e:e3:1b:4f:cb:dc:be:a7:bd:4a:bc:
                    12:b1:7a:e1:be:eb:7b:94:68:a4:a4:20:0c:a1:b7:
                    ed:34:a2:08:b4:ab:79:a9:d1:79:74:1c:60:6d:7d:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A3:8E:D8:1C:2D:5D:F2:40:80:94:3A:D0:28:78:27:1A:EB:A1:3F
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38382e302f32322d3232203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:16:d5:98:5d:d3:9b:5a:b7:b0:24:69:6b:f3:ec:44:84:a8:
         11:f5:24:2f:e9:3c:4d:71:fd:c5:ba:f2:81:5e:12:cf:cb:cb:
         7b:37:84:8d:ec:a6:dd:76:42:c4:71:ce:97:57:76:8c:2f:45:
         fd:fa:11:73:01:5a:32:ec:70:f5:0b:bd:77:a4:95:83:7c:0e:
         cf:ad:a6:07:d8:12:e4:2b:05:e8:cb:e6:1b:55:84:eb:e5:dd:
         52:6a:63:0a:33:a7:cd:1d:e3:f0:ea:8a:36:59:48:85:a2:49:
         34:fa:51:bf:1a:82:f3:59:57:34:0d:94:36:0d:6d:e7:b4:0e:
         21:6f:d4:35:49:2d:ca:b7:f0:ee:9f:96:94:67:05:bd:9c:7f:
         5d:97:ac:60:61:d3:ba:fe:95:4c:15:fc:b8:ab:81:82:49:07:
         21:12:a9:59:e4:31:c2:b3:d4:c5:eb:ea:18:8e:de:4a:74:b7:
         55:26:8b:44:ff:ec:d7:c0:7b:ad:56:c3:7a:fa:79:41:fd:d2:
         f0:4a:b2:b6:d2:7e:22:2b:6d:d5:e5:68:3d:57:b9:5f:ad:76:
         46:e2:4a:98:e8:57:a1:63:ec:1c:8c:d0:92:a9:0e:31:a7:be:
         ac:37:38:4f:9f:78:8c:3b:f2:2e:c4:c0:58:b8:51:f1:2a:e3:
         7b:77:88:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org