Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e39322e302f32322d3232203d3e203238323737.roa
File:                     3138392e31342e39322e302f32322d3232203d3e203238323737.roa (raw, json)
Hash identifier:          cQFyHqUlfqA0OkLXbEgyAaL6IWGmC5KG/I3nmAmbhDM=
Subject key identifier:   D4:68:D0:84:51:C0:FF:6B:F3:7E:CD:75:9D:FE:3F:B9:5C:C4:6C:0E
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       686DA2AFA51A421F3C69FD3A54F48D189FD40962
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e39322e302f32322d3232203d3e203238323737.roa
Signing time:             Fri 12 Aug 2022 21:00:00 +0000
ROA not before:           Fri 12 Aug 2022 20:55:00 +0000
ROA not after:            Sat 12 Aug 2023 21:00:00 +0000
asID:                     28277
IP address blocks:        189.14.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6d:a2:af:a5:1a:42:1f:3c:69:fd:3a:54:f4:8d:18:9f:d4:09:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Aug 12 20:55:00 2022 GMT
            Not After : Aug 12 21:00:00 2023 GMT
        Subject: CN=3082010A0282010100D658D22A1598B6857C71CC983D8E18EE435F2F31C39C5A434D04C5EE4F77D2101884E132ED4477CF63F591EA12C7978899C9D2ADDFB4009DF71BD782788607A22D8B48A93FA6ABC7B09AE4CA60C2F470C52DAC6D3F01B4061929C39135D214D1645CC9CD8B9D5F6C4FC3D1995CA6008DDD613FD0FEDC2097FF0F34C0ED9FC49D958A0AAF8A3F9EFA9C4D9465FB6C2642924B88349F9C6DC08C5BB925A607A62D2FB09DD6C7B766D256DC0409E83AC7CFC473DD7BB44F122A9181F68A3A21476D935E16A7CD78052EF2C39AB1DE06A43989035B6026E425F3259CD1C7515BE3FEBCD1FC0C5EFBFE89C50C94ECB98B3B3B260BC5269F560968F551AA31E137A2A50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:d2:2a:15:98:b6:85:7c:71:cc:98:3d:8e:
                    18:ee:43:5f:2f:31:c3:9c:5a:43:4d:04:c5:ee:4f:
                    77:d2:10:18:84:e1:32:ed:44:77:cf:63:f5:91:ea:
                    12:c7:97:88:99:c9:d2:ad:df:b4:00:9d:f7:1b:d7:
                    82:78:86:07:a2:2d:8b:48:a9:3f:a6:ab:c7:b0:9a:
                    e4:ca:60:c2:f4:70:c5:2d:ac:6d:3f:01:b4:06:19:
                    29:c3:91:35:d2:14:d1:64:5c:c9:cd:8b:9d:5f:6c:
                    4f:c3:d1:99:5c:a6:00:8d:dd:61:3f:d0:fe:dc:20:
                    97:ff:0f:34:c0:ed:9f:c4:9d:95:8a:0a:af:8a:3f:
                    9e:fa:9c:4d:94:65:fb:6c:26:42:92:4b:88:34:9f:
                    9c:6d:c0:8c:5b:b9:25:a6:07:a6:2d:2f:b0:9d:d6:
                    c7:b7:66:d2:56:dc:04:09:e8:3a:c7:cf:c4:73:dd:
                    7b:b4:4f:12:2a:91:81:f6:8a:3a:21:47:6d:93:5e:
                    16:a7:cd:78:05:2e:f2:c3:9a:b1:de:06:a4:39:89:
                    03:5b:60:26:e4:25:f3:25:9c:d1:c7:51:5b:e3:fe:
                    bc:d1:fc:0c:5e:fb:fe:89:c5:0c:94:ec:b9:8b:3b:
                    3b:26:0b:c5:26:9f:56:09:68:f5:51:aa:31:e1:37:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:68:D0:84:51:C0:FF:6B:F3:7E:CD:75:9D:FE:3F:B9:5C:C4:6C:0E
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e39322e302f32322d3232203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:16:83:b0:77:47:1a:18:2b:18:56:b6:d9:02:a2:80:ee:
         6a:e8:ef:5b:cc:c8:0a:99:a4:ca:cf:c0:19:5e:f8:b6:80:df:
         d2:16:60:08:60:0b:6e:d0:0b:bf:75:ad:6b:8a:f3:c2:4e:ee:
         be:17:b0:81:3b:b0:93:d7:e0:0d:e8:7c:7f:c5:6c:4c:32:07:
         7b:0f:71:19:ad:8d:96:78:b0:4e:bc:85:8a:de:e5:ea:6a:89:
         66:a0:41:6b:7e:e4:76:93:a2:f5:a2:ab:99:39:69:19:7a:41:
         63:de:c7:84:63:c9:02:e4:2c:e4:20:6c:f6:65:35:9b:55:15:
         db:65:21:90:b1:1a:da:e4:3e:bb:02:d5:38:f4:66:6d:5a:d5:
         0c:76:72:fa:64:61:9a:68:1e:72:45:78:95:fe:4e:f3:56:0e:
         80:ab:7c:ec:9c:24:96:a5:4d:c4:30:81:76:2d:f7:36:d6:47:
         74:8b:21:ba:da:4d:e0:0b:dc:45:4b:59:fa:80:51:c0:87:d1:
         cb:8b:39:fb:12:4c:af:e3:66:c1:a1:d6:6b:9c:9c:30:fa:8b:
         75:71:6a:bd:90:3c:58:98:e7:a6:f9:a6:59:1d:23:9f:e1:d5:
         86:21:cd:b0:4e:4a:09:76:d7:14:9f:8a:ce:63:15:89:b9:6f:
         d1:7d:7b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org