Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32312d3231203d3e203238323334.roa
File:                     3138392e3132372e3139322e302f32312d3231203d3e203238323334.roa (raw, json)
Hash identifier:          pGGemiDaseSokuirj/mcU3FyMkKHIuo+jC9SeYafBTM=
Subject key identifier:   55:BE:5B:C2:79:F2:07:89:AB:77:73:03:2F:D9:2F:46:98:D0:53:5A
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       1E2D1702B8B614478718BDECDACBD00AF3C814BC
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32312d3231203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:04 +0000
ROA not before:           Wed 20 Dec 2023 19:55:04 +0000
ROA not after:            Wed 18 Dec 2024 20:00:04 +0000
asID:                     28234
IP address blocks:        189.127.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2d:17:02:b8:b6:14:47:87:18:bd:ec:da:cb:d0:0a:f3:c8:14:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:04 2023 GMT
            Not After : Dec 18 20:00:04 2024 GMT
        Subject: CN=55BE5BC279F20789AB7773032FD92F4698D0535A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f0:2f:f8:a6:4b:cb:31:f3:f5:e1:02:38:e9:
                    bc:e5:31:bf:62:74:56:ce:cb:76:b7:84:42:31:05:
                    ab:64:b7:89:70:dc:b2:27:4a:30:3c:a0:a9:c7:56:
                    f0:56:f4:94:27:85:74:c9:78:b3:82:6c:ff:5e:36:
                    7d:f6:63:03:5f:84:de:37:ab:af:15:b4:9e:9d:8b:
                    cb:7a:e3:08:b6:5f:87:82:03:c5:f5:39:a1:a1:63:
                    67:f3:42:ff:ee:4f:04:83:88:44:fd:ad:09:80:8a:
                    4a:0b:97:21:b8:04:74:ef:88:05:4f:c1:0f:12:d0:
                    54:95:d8:09:6d:14:14:be:87:cd:2c:95:12:12:94:
                    fd:7e:45:59:cd:8b:59:3f:b3:e3:b3:47:d2:3d:96:
                    86:9b:fa:bb:35:16:52:1a:a9:b0:d2:96:a4:5f:b8:
                    bc:7d:02:dd:c4:be:2f:4f:ef:66:d5:4a:8d:8b:30:
                    fa:35:29:e9:72:e8:27:29:d3:4f:b9:6d:b3:fb:f7:
                    40:11:38:33:2f:5f:82:4b:3c:ee:d7:dc:4d:37:6a:
                    2d:8f:99:64:0a:46:99:2b:9a:25:87:0a:1c:72:bb:
                    df:74:a7:14:17:f6:24:31:90:b8:dd:d4:b3:e1:60:
                    64:37:c1:79:5e:77:02:0b:9c:4a:d3:4d:b1:4b:fe:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BE:5B:C2:79:F2:07:89:AB:77:73:03:2F:D9:2F:46:98:D0:53:5A
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32312d3231203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:3b:bd:3d:9e:ba:97:5e:8c:a0:05:58:0a:6c:f7:b9:d6:0b:
         ba:54:12:94:44:2e:af:58:15:81:7c:4d:3e:8c:0b:ce:7f:01:
         23:c5:3a:16:29:cb:41:5f:8b:0f:6c:93:c9:8e:d2:15:5d:c0:
         b5:4b:e5:e1:0b:ce:0f:59:60:fe:62:54:7d:6c:2d:c7:75:8f:
         91:ed:93:5f:93:be:2e:65:51:b9:32:38:eb:2a:d1:fe:d9:f9:
         24:9f:bc:d7:74:81:b2:84:91:39:94:26:6c:8a:7c:ce:19:52:
         70:8d:6d:89:5f:aa:50:80:8f:c9:58:03:fa:80:74:79:6d:7c:
         3f:b9:e3:97:7f:34:49:af:f0:40:d8:32:5b:e8:70:92:20:36:
         ef:aa:72:d3:97:47:3f:42:a4:87:3e:39:2f:db:23:73:f5:42:
         ad:a3:b1:8a:b0:b8:43:e9:66:7e:e3:b6:47:a0:c1:e3:42:1f:
         f5:3e:13:44:d5:16:80:be:02:c1:75:7b:83:d5:63:68:e5:50:
         c3:28:bd:2e:f3:ac:be:72:2e:53:7d:1b:47:f7:a6:b6:c6:15:
         09:e1:a6:0c:09:c1:7d:77:94:d3:f7:28:11:0b:83:c9:79:a1:
         b2:39:97:c2:ab:3c:96:5b:c1:96:e8:68:a6:91:f0:24:07:25:
         dd:e1:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org