Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139362e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3139362e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          Lapv3aGPhvalwLg6zw2e5Y8ehgn9aAl0XqN4ThRlsBA=
Subject key identifier:   7C:65:CA:D1:9B:09:3D:F0:86:26:73:6B:E7:DB:97:A6:22:C7:D1:DA
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       44129CFCE590751CCBF8BB3E36E8AAA45A4F00B6
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139362e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 19:00:00 +0000
ROA not before:           Wed 20 Dec 2023 18:55:00 +0000
ROA not after:            Wed 18 Dec 2024 19:00:00 +0000
asID:                     28234
IP address blocks:        189.127.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:12:9c:fc:e5:90:75:1c:cb:f8:bb:3e:36:e8:aa:a4:5a:4f:00:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 18:55:00 2023 GMT
            Not After : Dec 18 19:00:00 2024 GMT
        Subject: CN=7C65CAD19B093DF08626736BE7DB97A622C7D1DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6f:92:cd:d0:7c:90:10:19:8c:c1:b8:1b:9a:
                    fe:1a:94:27:c9:cf:0e:79:f2:0f:e6:81:fb:f4:62:
                    7a:61:16:09:0f:73:9a:b7:c0:7f:e6:dc:cb:a3:f9:
                    ad:4b:99:36:94:80:da:15:34:d6:d4:7e:88:3c:ea:
                    0a:bc:fd:a2:63:8c:74:f0:4a:c1:95:e9:a8:e6:c3:
                    6c:0f:d6:d1:57:db:f9:29:09:04:a5:69:60:47:aa:
                    4e:fb:79:a0:49:a4:60:75:15:a8:01:a0:e5:9e:31:
                    40:95:4d:21:00:15:9c:85:45:af:33:23:09:04:1f:
                    ea:28:31:9e:3e:13:6e:fb:96:ef:d8:e1:0f:df:8a:
                    40:9c:06:1b:3e:f1:ee:ea:b8:cf:c7:cf:e1:be:f6:
                    44:53:c7:29:8d:a1:0a:29:a7:bf:67:75:f7:a1:d3:
                    f8:2f:85:58:9e:c3:05:a2:9d:19:a3:da:d7:77:19:
                    9d:17:bb:72:21:0d:fe:d7:84:5b:96:42:d0:b2:dc:
                    d8:48:d4:38:db:d9:25:8d:c7:a1:d7:cd:dc:ad:50:
                    b9:77:2d:64:bd:f8:e3:79:4c:92:29:a4:d7:7b:8e:
                    a3:9d:96:f2:3d:c9:6c:a0:c5:7f:9f:ef:97:53:0c:
                    98:b6:66:b0:cb:47:93:0b:26:1c:ab:2a:06:9d:de:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:65:CA:D1:9B:09:3D:F0:86:26:73:6B:E7:DB:97:A6:22:C7:D1:DA
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139362e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:41:dc:71:e1:2a:76:34:55:d3:45:29:5c:e7:38:71:50:36:
         92:57:2b:3b:2d:83:e7:0b:c5:45:57:f5:e6:b3:15:76:c6:76:
         85:0b:8b:e6:cd:3b:73:93:ca:b7:e6:50:5e:e7:ff:f0:b3:e2:
         97:e2:26:fe:61:27:c0:d4:88:4a:29:41:1b:7e:de:92:3e:06:
         54:ba:dd:d9:6b:20:28:20:53:d4:1c:e8:79:e2:ce:80:a5:21:
         cb:b4:6a:3d:61:46:f8:b8:0a:28:74:84:43:06:13:3b:fb:56:
         99:74:3d:9d:36:65:cd:ab:e6:e4:04:b6:89:39:52:f2:be:93:
         71:fe:34:fa:20:5d:f9:3b:17:05:3a:b7:9d:e7:4b:88:9b:7a:
         29:2f:76:c9:97:fc:11:d7:e6:f8:72:07:f4:e4:37:c0:e6:a9:
         ae:08:46:50:64:82:4a:f6:63:b6:46:33:6d:6e:77:7c:c9:7e:
         65:f9:54:2d:80:49:a3:02:cb:65:96:a1:22:df:1d:57:f4:bb:
         2c:bf:b4:64:1b:9f:0d:58:8d:72:6a:79:72:94:73:02:ec:e3:
         82:b7:1c:a0:f4:dc:59:dc:e0:b3:70:25:dc:ea:d7:e8:3d:27:
         5a:67:a0:3e:6d:0c:42:6b:54:36:60:84:09:c9:65:3f:32:5e:
         aa:9b:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org