Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139352e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139352e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          UEap4TXY+fFTPrqWrRkyOraS+p0ESM11sFh3Zu0/Wx0=
Subject key identifier:   A9:0C:12:86:E7:6C:2C:13:79:69:0F:20:F4:46:39:0D:94:F7:A2:75
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       5DDC18A2258D66D0B38801746233FF59278A03CC
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139352e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:01 +0000
ROA not before:           Wed 20 Dec 2023 19:55:01 +0000
ROA not after:            Wed 18 Dec 2024 20:00:01 +0000
asID:                     28234
IP address blocks:        189.127.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:dc:18:a2:25:8d:66:d0:b3:88:01:74:62:33:ff:59:27:8a:03:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:01 2023 GMT
            Not After : Dec 18 20:00:01 2024 GMT
        Subject: CN=A90C1286E76C2C1379690F20F446390D94F7A275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:37:71:e2:aa:39:b2:47:e2:36:a4:96:fd:
                    c8:fa:59:7a:f4:dd:8d:58:41:18:56:5a:52:ec:b6:
                    49:9c:e3:27:e0:9c:55:12:db:7f:20:90:fd:11:76:
                    4a:cf:f5:33:2f:68:cc:fc:bf:63:fb:2a:07:56:25:
                    53:ce:40:c4:ec:f6:e4:fa:1f:d3:60:6b:74:f9:4c:
                    22:47:dd:29:ee:14:f3:1b:03:55:12:4b:6b:b3:6a:
                    d8:24:f5:d4:6b:b0:65:41:55:09:1e:a5:bd:a8:35:
                    82:c0:28:5d:ef:cc:81:c8:87:1f:22:1f:8d:2e:34:
                    34:13:16:55:d2:94:ef:cb:1a:ec:ed:51:59:34:fc:
                    02:18:1e:b9:8d:c3:60:55:ca:bc:12:4f:27:fd:f5:
                    43:c5:98:1f:39:70:0b:c3:5d:61:66:b0:27:3f:e0:
                    e2:57:7e:a4:cd:70:64:d5:94:9d:ec:a7:a2:3b:7e:
                    a4:80:a6:24:44:a3:1d:f6:9a:2e:ca:d2:7c:bc:ad:
                    ad:c0:88:24:06:64:eb:6d:03:ad:ba:26:ad:c7:64:
                    0c:1b:ec:ee:7c:40:97:9d:f1:0a:11:36:ee:61:c4:
                    e2:a8:6b:db:d6:e7:a4:0f:8f:75:74:0d:ad:d6:dd:
                    38:c6:52:96:0f:b0:5f:95:d6:2e:36:e9:86:6d:f6:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0C:12:86:E7:6C:2C:13:79:69:0F:20:F4:46:39:0D:94:F7:A2:75
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139352e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c9:a4:56:fb:96:5c:af:c1:f2:0a:b3:8a:05:32:df:97:0e:
         75:f8:4c:aa:01:f1:9d:1a:6d:6d:f0:7f:71:c3:31:3d:4d:29:
         42:cd:75:7e:bd:f4:f2:e3:51:eb:a7:0e:e9:f5:af:db:14:35:
         2d:67:8f:64:a5:c4:21:a9:a6:87:b0:b5:7d:46:8c:61:15:31:
         e3:42:98:47:4c:d6:6c:37:32:05:61:df:dd:c4:f4:d9:99:92:
         ec:61:60:cd:bf:22:ac:a0:1d:5f:a5:a4:30:0d:d5:45:82:c2:
         ab:12:6f:bd:24:a9:4f:0d:43:74:2d:ba:1f:ac:ce:70:9b:bf:
         89:7d:69:2f:14:c3:07:d6:b7:1f:b9:15:eb:dd:2b:03:44:59:
         95:2d:3f:21:78:09:e5:af:70:32:2b:e9:f9:a6:63:fc:7d:63:
         7e:f8:a5:05:64:4d:ac:0c:4f:91:d5:7a:2b:48:b4:10:31:14:
         04:c9:34:40:e3:6e:f2:a2:de:57:2f:01:42:8f:17:96:30:8a:
         cd:bb:4a:60:0d:29:dd:87:28:0a:7b:48:c3:ad:60:05:ba:2b:
         d8:43:88:1d:99:be:91:06:bd:c1:de:01:f7:3d:a7:d5:fd:d8:
         a4:d8:2b:7c:89:db:6a:2c:05:b4:3d:9b:56:53:69:82:83:77:
         26:f8:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org