Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32322d3232203d3e203238323334.roa
File:                     3138392e3132372e3139322e302f32322d3232203d3e203238323334.roa (raw, json)
Hash identifier:          JT6U2nbwlbt2aFP5k9efO4lq1xl/0SUa8qKOtPro1UM=
Subject key identifier:   89:0A:87:C3:F3:0B:F1:CE:05:AE:82:FC:84:68:DE:59:AC:E0:89:33
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       6877F4E2BCB91827518D7B7B33FC24941E9018E1
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32322d3232203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:03 +0000
ROA not before:           Wed 20 Dec 2023 19:55:03 +0000
ROA not after:            Wed 18 Dec 2024 20:00:03 +0000
asID:                     28234
IP address blocks:        189.127.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:77:f4:e2:bc:b9:18:27:51:8d:7b:7b:33:fc:24:94:1e:90:18:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:03 2023 GMT
            Not After : Dec 18 20:00:03 2024 GMT
        Subject: CN=890A87C3F30BF1CE05AE82FC8468DE59ACE08933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:f1:d8:56:1f:28:ed:66:c9:41:5a:a6:7d:
                    1b:96:96:9e:61:61:89:90:bd:a5:48:5d:bd:bb:a2:
                    31:7f:65:df:94:8b:89:60:9c:02:02:1d:6d:f3:37:
                    f6:40:10:ce:29:3b:5c:b4:c1:94:26:93:bb:a9:fb:
                    71:fd:22:d6:e1:0d:86:85:64:d2:e1:99:1e:b0:6a:
                    46:16:b5:26:ff:12:3b:a6:fe:f7:89:bb:2a:a6:f3:
                    ec:ff:4f:f5:f3:8e:ba:da:82:d5:bc:1f:e0:42:73:
                    7d:f4:42:d9:c3:3f:26:3d:d2:64:1a:2a:7a:dd:77:
                    40:89:f1:74:1c:12:0b:52:04:df:a7:73:bd:a4:37:
                    a1:35:7f:9b:de:d7:c4:59:74:76:98:55:ea:73:3d:
                    3b:ec:29:c7:28:bd:c1:b2:c1:74:0c:76:78:94:84:
                    06:37:4b:82:04:b7:2a:3b:b0:11:2d:f4:6d:be:97:
                    0b:f3:97:dd:bc:82:ee:0e:42:7f:26:d1:1a:6a:65:
                    3b:76:9a:a1:e3:fc:1f:6d:50:d9:54:97:83:00:97:
                    0f:ba:38:e6:0d:95:49:36:2d:4c:31:73:53:7a:65:
                    1f:1b:5a:cf:45:7c:9b:a0:96:82:e0:8d:a4:48:3e:
                    10:55:72:6c:98:65:6e:90:d5:ef:c5:fb:ca:15:99:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0A:87:C3:F3:0B:F1:CE:05:AE:82:FC:84:68:DE:59:AC:E0:89:33
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32322d3232203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:f3:e1:96:c7:c4:55:d1:0a:e8:53:63:0b:b5:67:8a:89:26:
         2e:f9:08:01:85:b5:38:15:28:94:13:fe:1b:16:02:6a:35:e7:
         de:a9:99:d3:cd:ff:22:7c:df:24:73:a6:4d:f9:14:84:37:00:
         3c:d8:47:19:0f:9a:be:de:60:94:01:c2:3d:b1:db:83:e3:6f:
         bc:ce:c1:96:df:08:df:d4:16:55:b5:02:ad:7c:7e:59:c5:bf:
         42:ec:a6:67:aa:61:2e:a5:83:29:5c:e1:02:5e:82:98:e6:5f:
         f5:24:af:f3:da:84:fa:3c:9f:4c:34:af:73:75:5b:e6:f9:d2:
         ea:c5:6d:e2:81:ef:d9:f8:dc:3b:48:4c:39:08:88:3c:48:35:
         84:76:00:e4:c0:75:70:e0:18:1b:fb:4b:21:89:8c:62:23:62:
         48:95:3f:e5:44:b8:63:9d:7a:11:69:fd:7e:f8:1a:80:82:59:
         a9:50:f6:51:af:13:ce:21:ac:99:28:59:4e:73:d6:22:0c:e0:
         0c:a6:29:e7:e7:46:33:21:65:3c:73:0b:87:67:be:58:f0:5c:
         bb:68:cc:9e:d7:b5:12:88:ed:70:11:46:99:d2:82:54:c2:76:
         7d:ca:3d:74:3b:2d:25:0d:1b:5b:ca:c5:ad:19:d1:7d:f3:72:
         eb:1e:c4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org