Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/3138392e3131332e3138302e302f32322d3234203d3e20323730333334.roa
File:                     3138392e3131332e3138302e302f32322d3234203d3e20323730333334.roa (raw, json)
Hash identifier:          7foY2y4fh8AbMYYoUyN5Pp/z/smaeRYPnJqFPVi9fuQ=
Subject key identifier:   A2:F3:BE:51:00:47:56:94:2C:53:8B:27:3D:5A:86:3C:C6:02:BC:52
Certificate issuer:       /CN=03BA31A787BD80FCF2490BD375CCA939046D0F3D
Certificate serial:       2A9C346410C524517CDDFC074F5634968A84AD5C
Authority key identifier: 03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/3138392e3131332e3138302e302f32322d3234203d3e20323730333334.roa
Signing time:             Mon 10 Oct 2022 17:48:27 +0000
ROA not before:           Mon 10 Oct 2022 17:43:27 +0000
ROA not after:            Mon 09 Oct 2023 17:48:27 +0000
asID:                     270334
IP address blocks:        189.113.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9c:34:64:10:c5:24:51:7c:dd:fc:07:4f:56:34:96:8a:84:ad:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03BA31A787BD80FCF2490BD375CCA939046D0F3D
        Validity
            Not Before: Oct 10 17:43:27 2022 GMT
            Not After : Oct  9 17:48:27 2023 GMT
        Subject: CN=A2F3BE51004756942C538B273D5A863CC602BC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:f6:82:bf:0b:53:56:f0:f7:f6:96:75:45:
                    64:cc:44:04:cd:09:dd:d0:08:7f:ed:a3:36:f1:e4:
                    61:33:d3:63:35:7b:79:02:81:0d:2e:a3:ff:cf:56:
                    21:c7:d0:1f:7c:b0:6e:1c:0b:b8:bb:4a:ed:25:2a:
                    80:9c:3d:b1:75:b6:46:d6:1f:54:de:56:33:04:53:
                    bf:2d:f3:e1:30:9f:58:be:7f:b4:cd:19:90:a6:c3:
                    9b:80:1f:9c:6b:97:5d:4e:c3:28:aa:7c:d2:94:2c:
                    ce:c1:14:af:de:4c:ea:47:e7:9d:a8:6e:68:5f:70:
                    b6:1e:1e:4c:bf:88:77:b1:94:dc:30:77:df:37:cc:
                    e9:00:56:1f:a3:70:af:49:ad:b0:f6:61:e3:6c:a9:
                    a4:6c:ca:93:15:c1:c1:15:8b:82:94:4b:aa:73:e9:
                    a2:09:83:b1:b3:20:94:7c:ad:14:30:a0:35:55:29:
                    36:d2:42:5c:43:39:c8:09:f8:60:c5:45:47:c9:6b:
                    43:8d:d5:c9:15:2c:a9:61:c9:c2:43:8e:3b:f0:4f:
                    42:1c:06:65:06:d7:86:86:d3:a0:8e:d8:f7:76:b7:
                    ec:ed:c7:6a:7c:d1:07:5d:8b:62:e7:ee:64:3d:4b:
                    a9:ff:2b:1e:5f:48:7a:91:07:a8:70:46:cc:3d:12:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F3:BE:51:00:47:56:94:2C:53:8B:27:3D:5A:86:3C:C6:02:BC:52
            X509v3 Authority Key Identifier:
                keyid:03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/3138392e3131332e3138302e302f32322d3234203d3e20323730333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:53:96:58:91:5c:2b:4c:96:70:0f:74:9f:12:2c:f5:fe:f0:
         47:ec:95:4c:1a:76:c7:6d:29:df:fa:72:5d:7a:37:fd:32:75:
         50:57:69:57:3f:90:4a:c1:55:9f:e4:dd:34:83:fe:71:f1:c9:
         13:63:f8:b5:a8:4c:5c:d1:94:ce:f7:4d:32:84:14:9f:79:91:
         71:e8:0f:a2:7c:fe:58:78:fe:7c:72:24:d0:c8:61:7c:d5:a6:
         79:84:15:03:5c:cc:3e:e6:d0:a5:f7:d1:2a:a7:66:f3:54:45:
         59:5f:3f:c2:8e:ab:24:25:04:9d:4a:b1:a9:58:8f:35:a7:03:
         45:ab:d7:15:76:8f:71:be:ee:41:c9:9a:e1:66:f0:8c:41:eb:
         96:79:65:0f:62:49:c0:ca:4b:84:f9:be:64:5f:77:62:06:8f:
         cd:21:6e:06:4d:88:19:16:24:33:7e:2b:96:dc:89:d5:d7:ab:
         1e:61:5e:58:fe:b5:04:f4:30:e1:08:b5:d2:97:76:7c:a6:f7:
         0b:03:fd:e0:3d:91:f3:ea:f0:d5:c8:d8:0f:36:cb:04:90:30:
         f6:82:df:95:ad:8e:5a:8e:38:f3:59:25:c5:03:32:da:35:95:
         3d:48:46:2b:84:4f:c7:68:56:a9:3e:df:dc:4d:9f:18:e7:84:
         ad:7b:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org