Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139362e302f32322d3232203d3e203238323334.roa
File:                     3138392e3132372e3139362e302f32322d3232203d3e203238323334.roa (raw, json)
Hash identifier:          j2h3TY2G2y5F3/B/KGjiounG+N6lriWKSITyLoytuuk=
Subject key identifier:   A3:74:FD:D7:41:17:23:9F:81:E2:43:49:F1:2A:AB:C0:CE:7A:9E:FC
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       48AB6094BA2D4B7AAFAC10E4A656FD6B8BA6F81A
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139362e302f32322d3232203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 19:00:01 +0000
ROA not before:           Wed 20 Dec 2023 18:55:01 +0000
ROA not after:            Wed 18 Dec 2024 19:00:01 +0000
asID:                     28234
IP address blocks:        189.127.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ab:60:94:ba:2d:4b:7a:af:ac:10:e4:a6:56:fd:6b:8b:a6:f8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 18:55:01 2023 GMT
            Not After : Dec 18 19:00:01 2024 GMT
        Subject: CN=A374FDD74117239F81E24349F12AABC0CE7A9EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:6d:09:c4:4c:94:36:03:40:6d:45:88:e9:
                    67:31:87:a5:0c:07:a0:4f:12:53:9d:45:62:70:a5:
                    56:74:cb:70:aa:01:f4:48:c6:c6:1a:2b:85:d5:77:
                    5b:db:43:51:b3:98:ba:7b:4a:70:62:0b:93:28:5e:
                    35:46:d2:66:74:f7:15:60:be:01:cc:da:7b:7c:dc:
                    40:af:ee:9b:2a:a6:1d:2e:a6:77:27:bd:65:39:7b:
                    93:80:61:aa:92:ee:2d:bc:f0:96:6c:c9:d4:7e:11:
                    6e:ed:6b:c1:8b:e4:1e:62:51:e0:be:15:b3:84:8a:
                    23:04:37:c7:6d:e5:80:e2:8a:00:07:f8:69:ad:db:
                    45:ef:03:e4:dc:e1:15:5e:ba:61:5c:ea:a8:24:6b:
                    58:31:ef:2b:76:31:a6:02:5a:cc:39:ff:c8:8a:ae:
                    3e:45:1a:00:14:cc:cb:f3:0d:47:2c:85:78:bb:f2:
                    0e:1b:e2:f5:91:60:f5:db:50:ad:29:a3:b2:a3:6d:
                    06:27:42:a0:80:14:1f:20:4e:0a:65:74:e4:09:e5:
                    f1:63:ef:7f:0a:7e:eb:7e:59:2f:0b:b4:02:7b:2a:
                    32:c3:63:28:45:9d:ec:4f:fa:0f:9d:3a:de:1e:bd:
                    03:20:11:37:11:d2:1d:8c:75:04:01:6a:33:20:dc:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:74:FD:D7:41:17:23:9F:81:E2:43:49:F1:2A:AB:C0:CE:7A:9E:FC
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139362e302f32322d3232203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:cb:63:af:37:e6:da:e4:f7:c0:47:dc:2f:a6:85:a8:64:c5:
         93:ed:68:90:e7:de:dd:f9:0a:c7:e2:e5:2a:90:8c:79:66:f8:
         1e:6e:cd:7c:3e:1e:00:7f:7b:4f:76:dc:20:9c:47:f7:ea:79:
         ee:45:6f:9b:1b:53:19:95:85:9b:e9:c5:99:87:6e:4a:a2:fd:
         c7:c0:80:1e:cc:ff:e6:ae:d2:b3:68:74:63:32:d5:ac:08:54:
         5b:f7:45:ab:e2:16:00:33:c6:28:2d:e3:b1:47:51:ba:a2:96:
         41:e1:c8:0d:2a:82:f1:0d:4d:be:aa:b2:92:26:1c:44:bf:bf:
         c4:bc:e5:e2:92:94:64:39:6a:f0:3b:88:0b:bc:f2:d3:ba:58:
         c3:46:cb:40:00:46:2f:de:92:e2:c3:10:45:4b:57:b1:e3:5a:
         4c:4f:0f:a2:d2:48:06:46:71:05:30:cb:db:27:98:73:97:cd:
         21:db:7a:bb:d7:5e:1b:16:cf:3d:63:45:e5:b3:c0:c8:d3:d6:
         ac:c4:fe:e9:41:84:d8:46:d8:cf:30:a5:ca:c9:e9:8f:b0:2b:
         46:09:8d:ff:d2:16:20:c0:dc:e3:d9:dd:a0:e6:63:95:26:70:
         7e:de:13:99:8a:90:5b:e3:2a:57:35:d1:54:36:20:57:7e:1e:
         e3:34:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org